All Activity

The .heliohost.org domains are no longer available to regular users (they were actually discontinued in 2021). We were forced to make this change because users kept getting hacked or setting up phishing sites, which resulted in the main heliohost.org website getting blacklisted on places like facebook. Accounts that had one were allowed to continue using them until the domain was changed or removed, and when Johnny crashed, all such domains on Johnny were effectively removed. It can be added back temporarily if there a specific reason you need this domain (for example we had another user for example who had embedded devices pointed to one of these...he had to release firmware updates to change the domain). Do you have a specific reason it's needed? If so, we'll add it back as an alias temporarily and set it to redirect to your new domain for you, but do keep in mind there will be a point where the .org domains will no longer work for regular users.

That's good to know. Those files can vary quite widely by server version and database content, so the fact an off the shelf AI can convert the binary InnoDB database files back into .sql format without issue is quite impressive. Thank you for the info.

Hi! Thank you very much, I was easly able to recreate my database based on the file you provided. I just used Claude and asked "create a sql phpmyadmin import file based on the following files" I created the database manually via plesk -> import -> uploaded my file created by claude (create table, insert into) -> done. Thanks!

Escalating to Krydos.

I am using Cockroach DB via Cockroach labs, and they unfortunately do not allow changing the remote end to a more standard port number sadly. Host: swell-teddy-27169.j77.aws-eu-west-2.cockroachlabs.cloud Port: 26257 I don't have a fixed IP address available from the CockroachDB Cloud dashboard; the connection is configured using the hostname above.

username y2f I'd like this domain to be added https://y2f.heliohost.org (this is what it was before the johnny rebuild rather than helioho.st)

Thank you !

Domains added. They can take up to 2 hours to function.

What IP will you be making the outbound connection to? Also, is there a reason the remote end cannot be changed to a more standard port number that's already allowed?

Dear admin please add deemabaya.com , erp.deemabaya.com to my hosting account. Thank you

Hello, My account username: tuhinsarkar Domain which I want this done for: globalyouthsciencejournal.app Please open outgoing TCP port 26257 on this domain/account. Thank You

Thanks Thanks, working now

Does it work now?

Getting the same issue on my Johnny account, escalating to a root admin...

This is from softaculous "The license key is invalid. In order to use Plesk, please obtain and install a new valid license key. The amount of currently used resources exceeds the limits defined by your license. The number of websites hosted on the server exceeds the limits defined by your license. You have 1 sites hosted; your license allows hosting only 0 sites. The number of served customer accounts exceeds the limits defined by your license. You have 2 customer accounts currently served; your license allows serving only 0 customer accounts." Is this error from their end or from heliohost end?

That account was lost in a server crash back in early May. Please see these News articles for more information: https://helionet.org/index/topic/67733-when-it-rains-it-pours/ and https://helionet.org/index/topic/67995-johnny-upgrade/ You can recreate your account by trying to sign into it at https://heliohost.org/login/ A backup from 2024-07-25 is available for this account as well from https://heliohost.org/backup/. Newer files may be available, however newer databases will likely not be.

Nope not mistaken. An alias is exactly what you need if you don't want it to redirect. Alias has been added. Please be sure to configure DNS using our name servers or by using A and AAAA records pointed to the IPs shown in Plesk. The alias can take up to 2 hours to function.

Username: N/A, Server: N/A, Main Domain: N/A Por favor requiero que me Levante la suspensi?n de mi cuenta User: chatapp Web: chatpic.helioho.st

Closing due to inactivity since there has been no response in this thread for over a week. If you're still having this issue or need help with something else please open a new ticket.

.htaccess file is going to be your best friend here as moneybroz said above. We've had to block these scanners on our own sites as well as help other users with the same (usually on our other plans after they got suspended over it).

Like our autoreply already said "Please be aware that our system rejects binary attachments. If you are submitting a screenshot or attachment please post a link to the file instead of attaching it to the email."

Hi I would like to thank you for the fact that the domain is already set up ? I have started working on it. Regarding the database, please have a look and let me know if this is sufficient. It consists of a database with a few tables that I already had previously. [cid:79591265-efae-452b-a535-e21192e863a9] I look forward to your feedback. Thank you. Bernardo Pinto Coelho [rgb_iscte_pt_horizontal_positive_mail] Servi?os de Infraestruturas Inform?ticas e de Comunica??es Edif?cio II, Sala C701 Avenida das For?as Armadas, 1649-026 LISBOA Portugal Telefone: +351 210 464 468 | Extens?o: 223 295 ________________________________

Just add these two lines in the .htaccess file for the domain being attacked, deny from 139.59.136.0/24 deny from 146.190.103.0/24 If the attacks continue from this same range, change the above to deny from 139.59.0.0/16 deny from 146.190.0.0/16

Hello everyone, I host my Flask application (AtenaHub.app.br) on the **Morty** server. Recently, I noticed a sudden and huge spike in my CPU usage. To understand what was going on, I analyzed my `access_log` and `error.log`, and it turns out my account is under a massive automated vulnerability scanning and directory fuzzing attack. While my application code is safe, the sheer volume of requests is forcing ModSecurity to work overtime, which is draining my CPU quota. Here is some evidence from my logs: **1. Aggressive Fuzzing by Scanners (like LeakIX / l9scan):** They are flooding the server looking for open ports, `.env` files, and `.git` folders. ```text 139.59.136.184 - - [07/Jun/2026:20:41:29 +0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.3393e2435313e29313e25363; +https://leakix.net)" 146.190.103.103 - - [07/Jun/2026:20:41:40 +0000] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.3393e2435313e29313e25363; +https://leakix.net)" ``` **2. ModSecurity doing its job (but consuming CPU):** ModSecurity is correctly blocking these requests with 403s, including attempts to access environment variables and even PHP injection exploits. ```text [security2:error] [pid 1684739:tid 1684785] [client 146.190.63.248:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [security2:error] [pid 1684739:tid 1684775] [client 146.190.63.248:0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\xadd cgi.force_redirect=0... [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found"] ``` I would like to ask for your advice on the best practice here to save my CPU quota: 1. Should I just block these specific User-Agents and IPs via `.htaccess`? 2. Is there a better internal tool in Plesk you recommend for this? I want to make sure I handle this efficiently without causing trouble for the shared server. Any suggestions are greatly appreciated! Thank you!

I've removed that domain from your account. Please note there is a risk of data loss when domains are removed, since the folder for the domain inside Plesk will be deleted. I made a full account backup for you before I removed the domain, in case you need any of the old files. You can download the backup here: https://heliohost.org/backup If you're not sure how to extract the backup files, please follow our how-to guide here: https://wiki.helionet.org/Account_Backups I also added the new domain for you. Please note that it may take up to 2 hours for the domain change to take effect, and it will not work until you set up your DNS with your domain registrar. To configure your DNS, please see the steps provided on our Wiki to either set NS records pointed at the HelioHost nameservers, or create A/AAAA records and point them to your server's IPv4/IPv6 address: https://wiki.helionet.org/Addon_Domains#Custom_Addon_Domains If after a full 2 hours it doesn't work on your side, please make sure you clear your web browser cache: https://wiki.helionet.org/Clear_Your_Cache