Christopher Sakel

Proxmox VE 7: Attackers Log In as Root Without a Password

A parameter in the two-factor login flow made the password check fail entirely: in Proxmox VE 7, attackers could log in as root without any credentials. The flaw was fixed by accident in July 2023, but the fix was never backported to VE 7 — and it has been actively exploited since late August. Prepaid-Host is not affected.

Running your own Hytale server: what it actually needs

Hypixel Studios publishes no official server requirements — the figures in the common guides are estimates. We run Hytale servers ourselves and lay out what they actually need, what the three approaches cost, and when each one pays off.

Virtualizor compromised: BGP hijack, tampered update — and what you need to check now

A BGP hijack took over Virtualizor's update channel. The attacker obtained a valid Let's Encrypt certificate and shipped a tampered package. Prepaid-Host is not affected — if you run Virtualizor yourself, you should act now.

Windows RDP Publicly Exposed: How to Properly Secure Access

An open RDP port 3389 on any public Windows server gets scanned and attacked within minutes. Here's how to properly secure access with a firewall rule, NLA, account lockout, and VPN – step by step, with PowerShell commands and a checklist.

Let's Encrypt for Web Hosting: Certificate, Renewal, Troubleshooting

How Let's Encrypt works under the hood, why the certificate on our web hosting renews itself automatically, and what to do when renewal fails: Port 80, DNS records, wildcards, reverse proxies.

Why we have to adjust some root server prices – the full breakdown

On 1 August 2026 we're adjusting the prices of some older, RAM-heavy root server promo plans – for renewals only and no more than +35 %. Why RAM, NVMe and IPv4 became scarce at the same time – and what changes for you and what does not.

Monitoring at Prepaid-Host: keep an eye on your servers, domains and services – prepaid and from Europe

New in the Prepaid-Host panel: our monitoring watches your servers, domains and services around the clock from 7 European locations – with consensus checks against false alarms, heartbeat for cron jobs and SSL expiry warnings. Powered by our partner Uptimeify, billed in the familiar prepaid model with no contract term. From €2.99/month, 30 days free.

Incident Report

Installing Apache2, PHP 8, MariaDB/MySQL and phpMyAdmin on Debian and Ubuntu

A step-by-step guide to setting up a complete web stack on Debian 10/11 or Ubuntu 20.04/22.04: Apache2, PHP 8, MariaDB and phpMyAdmin, including the database login options you will need afterwards.

Summer Top-Up Bonus

KVM Windows Server available now

Windows Server 2019 is now available for our KVM root servers at no extra cost, starting with configurations from 3.65€/month. The system installs fully automatically within 5 minutes.

Installing Minecraft on Debian 11/10/9