Krydos

Due to abuse of our email system (especially on Stevie) we have had been forced to tighten our security on spam sending accounts. Your account was suspended for sending 281 emails on average per day. We recommend you keep this value below 50 emails per day to avoid being suspended. This is your only warning. The next suspension will be permanent. Feel free to use these forums for assistance if you're unsure how to reduce the number of emails your account sends, how to prevent vulnerabilities on your site that could allow a spammer to send mail from your account, etc. When you are confidant that you can solve your spam email problem quickly before you get suspended again let us know by replying to this thread and the first admin that sees it can unsuspend your account.

Deployed. http://softlab.heliohost.org/blog

This doesn't look like it's going to be feasible. Are there any other options that you could use to convert html to pdf, or can you run this program on your home computer and upload the results to your website?

Delisting a server only to have it listed again a few days (or hours) reflects even worse on the reputation, and in some cases they can permanently block the server from ever being delisted again. The more information you all can provide as to the nature and method of the spam being sent from our servers the more quickly we can refine our automated spam prevention processes, and hopefully never have this happen again.

Looks like everything is working now. My guess is that, like most Johnny accounts when the server was broken, the account creation failed. Since his domain is not something.heliohost.org then it will show up as queued until the account is created properly rather than show no domain by that name.

Please post the following information: Your cPanel username Your main domain The server that you are on

Deployed. http://softlab.heliohost.org/blog

The /var partition filled up. I deleted over four gigabytes of data from the partition, but it required a full system reboot to show up properly. Since the full partition was causing issues with creating new accounts I disabled the account creation temporarily to prevent anymore failed messages. Once the load spikes dissipate some more I will re-enable account creations on Johnny. The FTP issues, high load, and downtime for cPanel on Johnny were all related, and should now be fixed. See the news posts http://www.helionet.org/index/topic/20897-2015-4-14/ and http://www.helionet.org/index/topic/20898-2015-4-15/ for further information.

Deployed. http://softlab.heliohost.org/blog

The database gamegoof_maafs has been dropped for you.

Deployed. http://softlab.heliohost.org/blog

The title of your post is The reason you couldn't view your application was because the system didn't like two characters that I removed of the automatically created redirect. Your ruby on rails application could then be viewed once that was fixed. I thought that was your "original concern" since it was the title of your post. The reason it displays a blank web page is because /home/ejweb/rails_apps/test/ is not publicly visible. It is the root of your application, but it cannot be seen with a browser. If you read http://guides.rubyonrails.org/getting_started.html you can see that /home/ejweb/rails_apps/test/public/ is the publicly accessible webroot of your rails application. I created a test file so you can see what I mean located at http://ejweb.tk/test/index2.html That's because ejweb.tk:12955 is not publicly accessible. This is a security concern on a large scale shared server such as what we host. If you want to view your rails app remotely you will have to view it through the redirect. Sure.

You account has been unsuspended. Sorry for the mix up. Like wolstech said your account may have been suspended by mistake.

Here is the report we received regarding your account: We have received a complaint about your account. Please investigate and fix within 24 hours. Hurricane Electric Abuse Department support@he.net From scomp@aol.net Thu Feb 19 07:35:41 2015 Return-Path: <scomp@aol.net> X-Original-To: report@abuse.he.net Delivered-To: report@abuse.he.net Received: from smr-m2.mx.aol.com (smr-m2.mx.aol.com [64.12.232.218]) by abuse.he.net (Postfix) with ESMTPS id B7909540099 for <report@abuse.he.net>; Thu, 19 Feb 2015 07:35:40 -0800 (PST) Received: from scmp-m002.mail.aol.com (scmp-m002.mail.aol.com [172.29.110.246]) by smr-m2.mx.aol.com (AOL Mail Bouncer) with ESMTP id 23B1338000165 for <report@abuse.he.net>; Thu, 19 Feb 2015 10:35:40 -0500 (EST) Received: from scomp@aol.net by scmp-m002.mail.aol.com; Thu, 19 Feb 2015 10:35:32 EST To: report@abuse.he.net From: scomp@aol.net Date: Thu, 19 Feb 2015 10:35:32 EST Subject: Email Feedback Report for IP 65.19.143.2 MIME-Version: 1.0 Content-Type: multipart/report; report-type=feedback-report; boundary="boundary-1138-29572-2659438-9339" X-AOL-INRLY: stevie.heliohost.org [65.19.143.2] scmp-m002 X-Loop: scomp --boundary-1138-29572-2659438-9339 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit This is an email abuse report for an email message with the message-id of 465a6019ec4f1bcedfe6dd08d0134c8c@socialmediarock.com received from IP address 65.19.143.2 on Thu, 19 Feb 2015 09:53:49 -0500 (EST) For information, please review the top portion of the following page: http://postmaster.aol.com/Postmaster.FeedbackLoop.php For information about AOL E-mail guidelines, please see http://postmaster.aol.com/Postmaster.Guidelines.php If you would like to cancel or change the configuration for your FBL please use the tool located at: http://postmaster.aol.com/SupportRequest.FBL.php --boundary-1138-29572-2659438-9339 Content-Disposition: inline Content-Type: message/feedback-report Feedback-Type: abuse User-Agent: AOL SComp Version: 0.1 Received-Date: Thu, 19 Feb 2015 09:53:49 -0500 (EST) Source-IP: 65.19.143.2 Reported-Domain: stevie.heliohost.org Redacted-Address: redacted Redacted-Address: redacted@ --boundary-1138-29572-2659438-9339 Content-Type: message/rfc822 Content-Disposition: inline Return-Path: <support@socialmediarock.com> Received: from stevie.heliohost.org (stevie.heliohost.org [65.19.143.2]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mtaig-mab02.mx.aol.com (Internet Inbound) with ESMTPS id 9A45570000083 for <redacted>; Thu, 19 Feb 2015 09:53:49 -0500 (EST) Received: from mobirock by stevie.heliohost.org with local (Exim 4.80) (envelope-from <support@socialmediarock.com>) id 1YOSUU-0007Kx-14 for redacted; Thu, 19 Feb 2015 06:53:45 -0800 To: redacted@aol.com Subject: This amazing natural extract helped me to lose my baby weight so fast Date: Thu, 19 Feb 2015 06:54:10 -0800 From: Daniel Montoya <support@socialmediarock.com> Message-ID: <465a6019ec4f1bcedfe6dd08d0134c8c@socialmediarock.com> X-Priority: 3 X-Mailer: PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/) MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="b1_465a6019ec4f1bcedfe6dd08d0134c8c" Content-Transfer-Encoding: 8bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - stevie.heliohost.org X-AntiAbuse: Original Domain - aol.com X-AntiAbuse: Originator/Caller UID/GID - [24698 32003] / [47 12] X-AntiAbuse: Sender Address Domain - socialmediarock.com X-Get-Message-Sender-Via: stevie.heliohost.org: authenticated_id: mobirock/from_h X-Source: /usr/bin/php X-Source-Args: /usr/bin/php /home1/mobirock/public_html/wp-includes/js/tinymce/.test89.php X-Source-Dir: socialmediarock.com:/public_html/wp-includes/js/tinymce x-aol-global-disposition: G Authentication-Results: mx.aol.com; spf=none (aol.com: the domain socialmediarock.com appears to have no SPF Record.) smtp.mailfrom=socialmediarock.com; x-aol-sid: 3039ac1af94454e5f8fd5bbc X-AOL-IP: 65.19.143.2 X-AOL-SPF: domain : socialmediarock.com SPF : none --b1_465a6019ec4f1bcedfe6dd08d0134c8c Content-Type: text/plain; charset=us-ascii Just a couple of bottles containing pure forskolin extract and It seems I can fly! I volunteered to test it because the policy of the seller is quite trustworthy - they guarantee to give you 100% money back if you see no result. But, as far as I know, they had no returns yet, because it truly works! It worked for me and it's gonna work for you too! Take off your sports shoes and have a break to enjoy life at its fullest. [ http://theearthvilla.com/uploads/sql.php?MsynRWSz=K1P ] All you need is this product! --b1_465a6019ec4f1bcedfe6dd08d0134c8c Content-Type: text/html; charset=us-ascii <html> <body> Just a couple of bottles containing pure forskolin extract and It seems I can fly!<br> I volunteered to test it because the policy of the seller is quite trustworthy - they guarantee to give you 100% money back if you see no result.<br> <br> But, as far as I know, they had no returns yet, because it truly works! It worked for me and it's gonna work for you too!<br> <br> Take off your sports shoes and have a break to enjoy life at its fullest. <a href="http://theearthvilla.com/uploads/sql.php?MsynRWSz=K1P">All you need is this product!</a><br> </body> </html> --b1_465a6019ec4f1bcedfe6dd08d0134c8c-- --boundary-1138-29572-2659438-9339-- As you can see /home1/mobirock/public_html/wp-includes/js/tinymce/.test89.php was sending out spam from your account. Surely a wordpress malware hidden in your tinymce addon or through some vulnerability. We can give you another chance, but you have to fix the issue IMMEDIATELY not several days or even hours later. When you're ready to fix the problem make a post here and whichever admin sees it first can unsuspend your account for you. If you don't fix it quickly and you get suspended for sending spam emails again you will not get another chance.

This support request is being escalated to our root admin. I saw your question on IRC, but you logged off before I could respond to it. I also normally don't handle any issues on the forum that aren't escalated to me, but this one may have slipped through the cracks. I tested your issue, and I found that the .htaccess rewrite rules don't seem to like all the backslash escapes anymore. I got it working for you. All I did was edit /home/ejweb/public_html/.htaccess and change RewriteRule ^test\/(.*) "http\:\/\/127\.0\.0\.1\:12955\/$1" [P,L] to RewriteRule ^test(.*) "http\:\/\/127\.0\.0\.1\:12374\/$1" [P,L] Let us know if you're having any other issues, and sorry for the delay helping you with this. http://ejweb.tk/test

It looks like /home/bscripts/public_html/storm8/scriptresources/lootglitcher.php has been causing most of your load. Taking a quick peek at it all I see is curl after curl after curl call. Some bot to play a game for you or something? Anyways, curl causes a lot of load. Perhaps moving to Johnny would help since that server has a higher threshold for suspending accounts for high load. Stevie is pretty sensitive to suspending accounts like yours to prevent downtime for all the other users. This is part of the reason we can maintain 99% uptime on Stevie while Johnny is considerably lower than that. Out of curiosity I checked the TOS of Storm8 which states: I'm going to leave your account suspended until you can explain to us how your scripts don't violate their TOS.

The account was created using the email address umunol@yahoo.com

Dedicated IP granted.

cpu mem 2014-02-20 2 6 2014-02-19 1 3 2014-02-18 1 1 2014-02-17 2 3 2014-02-16 1 6 2014-02-15 9 5 2014-02-14 26 8

Please post the following information: Your cPanel username Your main domain The server that you are on

It looks like this one sort of fell through the cracks. Sorry for the long delay in getting a response. I was able to install frontpage extensions on my Johnny account successfully without any errors. Perhaps it was a temporary error? Let us know if you're still having any issues.

You already have a dedicated IP anyways http://www.helionet.org/index/topic/20144-cannot-create-johnny-ssl-account/page__view__findpost__p__106509

The record has been updated. Let us know if it still isn't working.

Well, here's the two SRV records I added: DOMAIN TTL PRIORITY WEIGHT PORT HOST _sip._tcp 14400 IN SRV 100 1 443 sipdir.online.lync.com. _sipfederationtls._tcp 14400 IN SRV 100 1 5061 sipfed.online.lync.com. The fields I need are domain, ttl, priority, weight, port, and host. There is no service, protocol, or target. Both records look very similar to many other SRV records on our DNS servers. Perhaps if you show me the instructions that you received from lync.com it will make this easier? Also, I know TTL doesn't match what you said, but the smaller that number is the more load it puts on our servers. Unless you're changing these SRV records all the time it probably doesn't need to be so small.

I can't find a payment with that transaction ID, or any payments sent from the email address associated with the hosting account web65 or the validated forum account that you posted from. Can you verify the transaction ID or let us know what email address you sent the payment from?