Krydos

The way the script checks to see if your password is correct or not is by connecting to the Johnny server. Since the Johnny server is down the check will always fail. Just create your new Stevie account as it's impossible to delete a Johnny account while the server is offline.

Go to http://www.heliohost.org/home/create-stevie-account and create a new account.

As wolstech already said once an account is flagged as phishing it cannot be recovered. We can let you create a new account, and use your .com domain on that new account instead. Let us know if you'd like to do that.

As you can see in the spam report someone was sending emails with this file on your account: /home1/abroskin/public_html/formatting-heaps.php Someone has compromised your account. I strongly recommend deleting everything from public_html and setting it all up again. You should also change all of your passwords. You need to fix this immediately. If you get suspended for spam again you will most likely not get another chance. Your account is now unsuspended. Let us know if you need any additional help.

We have received a complaint about your account. Please investigate and fix within 24 hours. Hurricane Electric Abuse Department support@he.net From scomp@aol.net Wed Jul 13 11:07:36 2016 Return-Path: <scomp@aol.net> X-Original-To: report@abuse.he.net Delivered-To: report@abuse.he.net Received: from smr-a01e.mx.aol.com (smr-a01e.mx.aol.com [204.29.186.241]) by abuse.he.net (Postfix) with ESMTPS id 133EB54011B for <report@abuse.he.net>; Wed, 13 Jul 2016 11:07:36 -0700 (PDT) Received: from scmp-m008.mail.aol.com (scmp-m008.mail.aol.com [172.29.110.249]) by smr-a01e.mx.aol.com (AOL Mail Bouncer) with ESMTP id 6B7E638000BB for <report@abuse.he.net>; Wed, 13 Jul 2016 14:07:35 -0400 (EDT) Received: from scomp@aol.net by scmp-m008.mail.aol.com; Wed, 13 Jul 2016 14:07:33 EDT To: report@abuse.he.net From: scomp@aol.net Date: Wed, 13 Jul 2016 14:07:33 EDT Subject: Email Feedback Report for IP 65.19.143.2 MIME-Version: 1.0 Content-Type: multipart/report; report-type=feedback-report; boundary="boundary-1138-29572-2659438-7973" X-AOL-INRLY: stevie.heliohost.org [65.19.143.2] scmp-m008 X-Loop: scomp --boundary-1138-29572-2659438-7973 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit This is an email abuse report for an email message with the message-id of E1bNNoj-0007l3-Cb@stevie.heliohost.org received from IP address 65.19.143.2 on Wed, 13 Jul 2016 13:19:11 -0400 (EDT) For information, please review the top portion of the following page: http://postmaster.aol.com/Postmaster.FeedbackLoop.php For information about AOL E-mail guidelines, please see http://postmaster.aol.com/Postmaster.Guidelines.php If you would like to cancel or change the configuration for your FBL please use the tool located at: http://postmaster.aol.com/SupportRequest.FBL.php --boundary-1138-29572-2659438-7973 Content-Disposition: inline Content-Type: message/feedback-report Feedback-Type: abuse User-Agent: AOL SComp Version: 0.1 Received-Date: Wed, 13 Jul 2016 13:19:11 -0400 (EDT) Source-IP: 65.19.143.2 Reported-Domain: stevie.heliohost.org Redacted-Address: redacted Redacted-Address: redacted@ --boundary-1138-29572-2659438-7973 Content-Type: message/rfc822 Content-Disposition: inline Return-Path: <abroskin@stevie.heliohost.org> Received: from stevie.heliohost.org (stevie.heliohost.org [65.19.143.2]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mtaig-aan04.mx.aol.com (Internet Inbound) with ESMTPS id D6778700000AB for <redacted>; Wed, 13 Jul 2016 13:19:11 -0400 (EDT) Received: from abroskin by stevie.heliohost.org with local (Exim 4.82) (envelope-from <abroskin@stevie.heliohost.org>) id 1bNNoj-0007l3-Cb for redacted; Wed, 13 Jul 2016 10:18:59 -0700 To: redacted@aol.com Subject: Hi Pamla Young X-cpchn: dpupsxszbirlrqzjtksicufiofoqjlr X-sdoyaxjgaxxc: qndgyfpoejtcn X-kuhpwsiioem: mdumjsuiuaxjiolurwglzkmlvxz X-vzbsabunbkawwg: iupuczriyeozftpsrel X-ukeszcoam: ckkrpxkvdtandifnwzxhciccjl X-laeughsxzdjbwbxno: qthjxizztaycfd Message-Id: <E1bNNoj-0007l3-Cb@stevie.heliohost.org> From: abroskin@stevie.heliohost.org Date: Wed, 13 Jul 2016 10:18:59 -0700 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - stevie.heliohost.org X-AntiAbuse: Original Domain - aol.com X-AntiAbuse: Originator/Caller UID/GID - [5080 32003] / [47 12] X-AntiAbuse: Sender Address Domain - stevie.heliohost.org X-Get-Message-Sender-Via: stevie.heliohost.org: authenticated_id: abroskin/primary_hostname/system user X-Source: /usr/bin/php X-Source-Args: /usr/bin/php /home1/abroskin/public_html/formatting-heaps.php X-Source-Dir: antiquariato-it.com:/public_html x-aol-global-disposition: G X-AOL-SCOLL-DMARC: mtaig-aan04.mx.aol.com ; domain : stevie.heliohost.org ; policy : none ; result : F Authentication-Results: mx.aol.com; spf=none (aol.com: the domain stevie.heliohost.org appears to have no SPF Record.) smtp.mailfrom=stevie.heliohost.org; dmarc=fail (aol.com: the domain stevie.heliohost.org reports that Neither SPF nor DKIM align.) header.from=stevie.heliohost.org; x-aol-sid: 3039ac1b13465786780f7274 X-AOL-IP: 65.19.143.2 X-AOL-SPF: domain : stevie.heliohost.org SPF : none Pamla Young, you are considered approved for no fax Cash Advance from $200 to $1000 Click to Apply Now http://antiquariato-it.com/formatting-heaps.php?xmlkhzz=aHR0cDovL2dldGxvYW5zZmFzdC50b3AvP2w9TkhaenJBc2VuYUFWWVMzUVY2VV9jRVdBS0tOZVJiMU8ybFg5bFMtb0F1az0= Indiana 46816, USA - 2016 Wed 13:19:00 13 Jul --boundary-1138-29572-2659438-7973--

$mysqli = new mysqli($servername, $username , $password, "HotelEscuela",33066); ^^^^^ That doesn't look like port 3306. You have an extra digit in there.

Inactivity.

Your account has been manually unsuspended. If you still see the suspended page then you should try clearing your browsers cache.

No, sorry. Like wolstech already said, we don't take backups of user's data. Users are expected to take their own backups. We do sometimes take backups of user's data prior to something like a mysql update, but unfortunately there was no way to know that mysql was going to crash prior to the event. For future reference we strongly recommend that everyone takes frequent backups of their site which can be accomplished using the tool in cPanel: http://stevie.heliohost.org:2082/frontend/x3/backup/index.html Another helpful tip is to use MyISAM storage engine for your mysql data. In our 11 years of operation we've never lost any myisam data. Twice now we've lost innodb data.

You'll have to restore those databases from your most recent backup. To restore your backup Go to http://stevie.heliohost.org:2082/frontend/x3/sql/index.htmlCreate the database names you listed.Go to http://stevie.heliohost.org:2082/3rdparty/phpMyAdmin/index.phpSelect the databases in the left navigation pane that you created in step 2 one by one.Click the 'import' button along the top of the screen.Click 'choose file' and find the backup on your hard drive.Let us know if you need any further assistance.

By the way, thanks for all the tweets.

Unsuspended.

You'll have to restore those databases from your most recent backup. To restore your backup Go to http://stevie.heliohost.org:2082/frontend/x3/sql/index.htmlCreate the database names you listed.Go to http://stevie.heliohost.org:2082/3rdparty/phpMyAdmin/index.phpSelect the databases in the left navigation pane that you created in step 2 one by one.Click the 'import' button along the top of the screen.Click 'choose file' and find the backup on your hard drive.Let us know if you need any further assistance.

I think white background sites are easier to see in bright light, such as if you have a lot of open windows during the day, or on your laptop outside, or on a phone/mobile in direct sun. Personally, I've always been more of a command line person. I use SSH to connect to Heliohost's servers. I use the command line to do most everything I can on my computers. On Mac OS the command line terminal window defaults to a white background with black text which just looks so wrong for typing linux commands, so I always change it to a more traditional dark background. Vim is my favourite text/code editor. Aside from my personal preferences it's my opinion that dark backgrounds on a lot of websites make them look dated. Few use command lines anymore, which is why I think a lot of websites used to use dark backgrounds. It was like a left over from the days of monochrome displays. (Dark background with green text.) Who knows. The popular style right now seems to be white backgrounds, but maybe a few years from now we'll switch back to dark backgrounds again. Trends tend to be cyclical like that.

Dedicated IP granted.

Your account has been manually unsuspended. If you still see the suspended page then you should try clearing your browsers cache.

Dropped.

@byron Since we lost a lot of data from the ACP make sure you check to see if accounts are suspended. If you check http://lonelion.co.uk/ you can see that it was probably inactive. Just suspend it and unsuspend it to sync up the records again. @alakay You can't reset passwords on accounts that are inactive. That's probably why you aren't getting the password reset emails. I have reactivated your account for you. Can you log in now?

No problem.

Your wordpress site at /home1/ltlt/public_html/delivery is set up to use ltlt_wp555 mysql> use ltlt_wp555; Database changed mysql> show tables; Empty set (0.00 sec) Yeah, it looks like you database is empty. You'll have to restore it from a backup. Let us know if you need help restoring your backup. However, the database ltlt_wp5555 has data in it. Perhaps you're just using the wrong database name?

Can you add that domain now?

You probably have a wrong password saved in your FTP client.

Please post the following information: Your cPanel username Your main domain The server that you are on

The system blocked you because of a large amount of failed attempts to log in. Can you log in now?

Yes, you were suspended for sending spam We have received a complaint about your account. Please investigate and fix within 24 hours. Hurricane Electric Abuse Department support@he.net From scomp@aol.net Sun Jul 10 08:54:31 2016 Return-Path: <scomp@aol.net> X-Original-To: report@abuse.he.net Delivered-To: report@abuse.he.net Received: from smr-a04e.mx.aol.com (smr-a04e.mx.aol.com [204.29.186.243]) by abuse.he.net (Postfix) with ESMTPS id 6D9EF540112 for <report@abuse.he.net>; Sun, 10 Jul 2016 08:54:31 -0700 (PDT) Received: from scmp-d009.mail.aol.com (scmp-d009.mail.aol.com [172.29.189.78]) by smr-a04e.mx.aol.com (AOL Mail Bouncer) with ESMTP id C35E93800255 for <report@abuse.he.net>; Sun, 10 Jul 2016 11:54:30 -0400 (EDT) Received: from scomp@aol.net by scmp-d009.mail.aol.com; Sun, 10 Jul 2016 11:54:30 EDT To: report@abuse.he.net From: scomp@aol.net Date: Sun, 10 Jul 2016 11:54:30 EDT Subject: Email Feedback Report for IP 65.19.143.2 MIME-Version: 1.0 Content-Type: multipart/report; report-type=feedback-report; boundary="boundary-1138-29572-2659438-32351" X-AOL-INRLY: stevie.heliohost.org [65.19.143.2] scmp-d009 X-Loop: scomp --boundary-1138-29572-2659438-32351 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit This is an email abuse report for an email message with the message-id of 00006872d1f8$4679ebb9$9f01e8a4$@comcast.net received from IP address 65.19.143.2 on Sun, 10 Jul 2016 10:14:36 -0400 (EDT) For information, please review the top portion of the following page: http://postmaster.aol.com/Postmaster.FeedbackLoop.php For information about AOL E-mail guidelines, please see http://postmaster.aol.com/Postmaster.Guidelines.php If you would like to cancel or change the configuration for your FBL please use the tool located at: http://postmaster.aol.com/SupportRequest.FBL.php --boundary-1138-29572-2659438-32351 Content-Disposition: inline Content-Type: message/feedback-report Feedback-Type: abuse User-Agent: AOL SComp Version: 0.1 Received-Date: Sun, 10 Jul 2016 10:14:36 -0400 (EDT) Source-IP: 65.19.143.2 Reported-Domain: stevie.heliohost.org Redacted-Address: redacted Redacted-Address: redacted@ --boundary-1138-29572-2659438-32351 Content-Type: message/rfc822 Content-Disposition: inline Return-Path: <gbli@terrastel.com> Received: from stevie.heliohost.org (stevie.heliohost.org [65.19.143.2]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mtaig-aal02.mx.aol.com (Internet Inbound) with ESMTPS id A98B870000092 for <redacted>; Sun, 10 Jul 2016 10:14:36 -0400 (EDT) Received: from c-5f9b70d5.012-193-67626713.cust.bredbandsbolaget.se ([213.112.155.95]:50221 helo=oxybd.com) by stevie.heliohost.org with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.82) (envelope-from <gbli@terrastel.com>) id 1bMFVO-0006fu-LL; Sun, 10 Jul 2016 07:14:21 -0700 From: liz overholt <gbli@terrastel.com> To: redacted@myfairpoint.net redacted@gmail.com, redacted@aol.com, redacted@charter.net redacted@yahoo.com Subject: recent photos Date: Sun, 10 Jul 2016 17:14:19 +0300 Message-ID: <00006872d1f8$4679ebb9$9f01e8a4$@comcast.net> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0001_4C244308.1392352F" X-Mailer: Microsoft Outlook 15.0 Thread-Index: AdHo+cMiNk3sKPYa4cNJHLSNjj/GKw== Content-Language: en-us X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - stevie.heliohost.org X-AntiAbuse: Original Domain - aol.com X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - terrastel.com X-Get-Message-Sender-Via: stevie.heliohost.org: authenticated_id: gbli@terrastel.com X-Source: X-Source-Args: X-Source-Dir: x-aol-global-disposition: G Authentication-Results: mx.aol.com; spf=none (aol.com: the domain terrastel.com appears to have no SPF Record.) smtp.mailfrom=terrastel.com; x-aol-sid: 3039ac1b14c25782584b7fb6 X-AOL-IP: 65.19.143.2 X-AOL-SPF: domain : terrastel.com SPF : none This is a multipart message in MIME format. ------=_NextPart_000_0001_4C244308.1392352F Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi, I've got those photos from our last meeting, just take a look <http://safrujibe.perryphotos.com/lnndzsol> liz overholt ------=_NextPart_000_0001_4C244308.1392352F Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas= -microsoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:off= ice:word" xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml"= xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV=3D"C= ontent-Type" CONTENT=3D"text/html; charset=3Dus-ascii"><meta name=3DGe= nerator content=3D"Microsoft Word 15 (filtered medium)"><style><!-- /* Font Definitions */ @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0cm; margin-bottom:.0001pt; font-size:11.0pt; font-family:"Calibri",sans-serif; mso-fareast-language:EN-US;} a:link, span.MsoHyperlink {mso-style-priority:99; color:#0563C1; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {mso-style-priority:99; color:#954F72; text-decoration:underline;} span.EmailStyle17 {mso-style-type:personal-compose; font-family:"Calibri",sans-serif; color:windowtext;} =2EMsoChpDefault {mso-style-type:export-only; font-family:"Calibri",sans-serif; mso-fareast-language:EN-US;} @page WordSection1 {size:612.0pt 792.0pt; margin:2.0cm 42.5pt 2.0cm 3.0cm;} div.WordSection1 {page:WordSection1;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--></head><body lang=3DEN link=3D"#0563= C1" vlink=3D"#954F72"><div class=3DWordSection1><p class=3DMsoNormal><= span lang=3DEN-US>Hi,<o:p></o:p></span></p><p class=3DMsoNormal><span = lang=3DEN-US><o:p> </o:p></span></p><p class=3DMsoNormal><span la= ng=3DEN-US>I've got those photos from our last meeting, just take a lo= ok <a href=3D"http://safrujibe.perryphotos.com/lnndzsol">http://safruj= ibe.perryphotos.com/lnndzsol</a><o:p></o:p></span></p><p class=3DMsoNo= rmal><span lang=3DEN-US><o:p> </o:p></span></p><p class=3DMsoNorm= al><span lang=3DEN-US>liz overholt<o:p></o:p></span></p></div></body><= /html> ------=_NextPart_000_0001_4C244308.1392352F-- --boundary-1138-29572-2659438-32351-- Your account has been unsuspended. Make sure it doesn't happen again.