New Topics

Hi Wolstech, Following up on this thread; wanted to flag something I found while cleaning up after the recent incident, in case it's useful for your records. While reviewing my ngo.helioho.st site (a separate, non-WordPress domain on this account) I found two files that don't belong there: a heavily obfuscated backdoor named mac.php (last modified June 11, ~7:49 PM), and an injected index.php containing a remote-eval payload pulling from 63.141.235.34, plus a redirect to a suspicious shortened link, swiy.co/goodrich555 (modified June 13, ~7:07–7:12 AM). Both timestamps are before your review where you mentioned nothing looked suspicious outside lda.ng, so this looks like it's from the same intrusion window, just on a domain that isn't WordPress and may not have been part of that check. Tried backuing up existing WP installs like ths.helioho, but i encounter Host Build interrupts sue to things like allowed runtime and PHP max execution. I've already renamed both files to .infected to disable them and remove them from execution and I'm restoring a clean copy of that site myself. I'm not asking for another account-wide reset; this is contained and I'm handling it, but since I don't have shell access to search file contents across the rest of the account, Since this looks like leftover from the same incident rather than a new one, I wanted to flag it rather than sit on it. Would it be possible to do a targeted check for similar files on my other domains rather than a full account reset?-since the rest of the account otherwise appears unaffected. Happy to send over the exact file contents if that helps your scan. Thanks again for the help.

Username: N/A, Server: N/A, Main Domain: N/A Priority: 9/10 Hello, my account and services insides faced a problem. All services are not working, they return the error 503. Service unavailable. This occured when I sent you a message to reset the plan because they was useless projects inside, but instead of doing that you added files and that hit my plan storage(1117MB / 1000). So now, I want to reset all because I have merged the database before, and not I can restart. That means, delete all files of my account and I'll make new files. username: gentillenoir075 email: gentillenoir075@gmail.com plan: Morty. Priority: 9/10 Urgence : 10/10 Make it as soon as possible because the website serve many peoples.

I also wanted to let you know that when I go to the wiki, it says my ip is blocked or something. My ip address is 73.144.3.243 not sure what's going on with that, I can access everything else just fine.

Your current balance is $6.6407 plus $15 plus $3 bonus brings your new total to $24.6407. Based on your load for the last 30 days your new estimated expiration date is 2026-08-24. If your load increases this could run out sooner or if your load decreases it could last longer though. We'll email you occasionally to let you know how your balance is being used. Thanks for increasing your Morty balance.

Number 2 is correct, you'll get a blank OS with SSH access to setup whatever you want. If you aren't used to the command line of linux then we can install a control panel such as Hestia for you.

In order to reset your account we must first verify your email address. This is to prevent someone from pretending to be you to delete your data. The easiest way to verify your email address is to send an email with the text "please reset my account" to support@heliohost.org from the email address listed in the top right corner of https://heliohost.org/dashboard/ Once we've verified your email address we will be happy to start the reset for you.

Are you able to access the wiki now?

Installed. You can see the current list of installed modules for Johnny's Python 3.14 at https://johnny-info.heliohost.org/pyinfo/info3.14.py Installed.

Alright, it looks like the Ubuntu 26 installer works again. You should have just received an email that your VPS is ready to go. Thanks for your patience and thanks for helping us test the new OS.

Thank you, I am forwarding him how to archive the account.

Yes, all good now. Thanks. On Sun, Jun 14, 2026 at 7:10?PM HelioHost Support wrote: > The issue was a DDoS on our wiki this morning broke a firewall rule that > is required to login. It should be fixed now. > > You may view the status of your ticket by visiting: > > https://helionet.org/index/index.php?showtopic=68298 > > Thank you, > HelioHost support > https://heliohost.org/ > https://helionet.org/ > >

Installed. You can see the current list of installed modules and their versions for Morty's Perl at https://morty2-info.heliohost.org/modules.pl

The issue was a DDoS on our wiki this morning broke a firewall rule that is required to login. It should be fixed now.

The issue was a DDoS on our wiki this morning broke a firewall rule that is required for the login system to work. It should be fixed now.

We can reset your account for you. In order to reset your account we need to verify your email address. This is to make sure someone isn't pretending to be you to delete your data. The easiest way to verify your email is to send your reset request from the same email address listed in the top right corner of https://heliohost.org/dashboard/ while logged in.

Hey Krydos, didn't consider that, I'll give it a shot with WinSCP and see if it'll accept the files. Thanks for the suggestion!

Remote access enabled. host=65.19.154.90 port=5432 user=russwell_app dbname=russwell_reddit password=<set in Plesk>

Can you access the wiki now?

Is it possible to change the port that gateway01.us-east-1.prod.aws.tidbcloud.com is listening on?

thank you !!!!

Closing due to inactivity since there has been no response in this thread for over a week. If you're still having this issue or need help with something else please open a new ticket.

Closing due to inactivity since there has been no response in this thread for over a week. If you're still having this issue or need help with something else please open a new ticket.

Closing due to inactivity since there has been no response in this thread for over a week. If you're still having this issue or need help with something else please open a new ticket.

Closing due to inactivity since there has been no response in this thread for over a week. If you're still having this issue or need help with something else please open a new ticket.

I'll go ahead and mark this as [Solved] since there are no outstanding queries for support. If you run into any issues, please open a new ticket. Please note: All support requests should be in English. When asking for help from the unpaid volunteer staff, please ensure you ask in English since this is what all staff are fluent in. This expectation is listed in the Technical Documentation Wiki at: https://wiki.helionet.org/FAQ If you need to post in another language, we would appreciate it if you could translate your support requests to English to help reduce the work load on our unpaid volunteers. The more time you can save us on small things like this all add up and allow us to add new features, and improve our service rather than wasting a lot of time trying to translate stuff. We recommend using a service such as: https://translate.google.com/ Thanks!