Web Shield, statistics and logs on Windows hosting
See what protects your HyperDC Windows hosting: what Web Shield refuses by default, your site's statistics, its access log and the list of recent activity.
- Beginner
- 10 min read
- Updated
This guide is not available in your language yet, so it is shown in English.
Your Windows hosting comes with Web Shield, and your service page shows what happens on your sites.
What Web Shield does
Web Shield checks the address, query string and headers of incoming requests. At its default level it refuses, before they reach your site:
- SQL injection attempts in the address;
- attempts to climb out of your folders (path traversal);
- requests for files that must stay private, such as
web.config,.envand anything under.git.
Normal pages keep working. You can still upload and edit these files in File Manager; only visitors are refused.
Verify: open https://example.com/web.config in a browser. You get an error page, not the file.
See your traffic
Open Statistics on your service page to see your site's traffic by day.
Read the access log
- Open Logs and choose the Website.
- Select Access and how many lines you want.
- Select Refresh to see the latest requests.
The newest lines are at the bottom. This is the place to check whether a request reached your site and what status it got.
See what changed
Activity lists what was done on your hosting account, when and by whom. It helps when something changed and you do not know why.
Next steps
- Errors from an ASP.NET site: ASP.NET and IIS errors.
- A site that was broken into: clean a hacked website.
Frequently asked questions
Do I have to turn Web Shield on?
No. It protects your sites at its default level, and normal pages keep working.
Does Web Shield replace updates?
No. It checks the address, query string and headers of a request, not form data or uploads. Keep your applications up to date as well.
A normal page of mine is refused. What now?
Send us the time and the address of the request in a ticket, and we look at it with you.
Can I see the Windows event log?
Not on shared Windows hosting; we manage the server. For a failing request, the Logs tab shows the access log, and a ticket with the time and address gets you more.