NightHawk Posted October 30, 2015 Posted October 30, 2015 a. your HelioHost: nightzb. the server your account is on: steviec. your HelioHost main domain: nightchanz.com Hello came to work on my site and its showing HelioHost Account Suspended. I didn't log in for over 30 days, Any information about getting it back running please. The renew script isn't working for me.I also have had problems with not being able to log into php myadmin. Thanks. NightHawk
wolstech Posted October 30, 2015 Posted October 30, 2015 The renew script didn't work because you were suspended for spam. Krydos will have more information.
wolstech Posted October 30, 2015 Posted October 30, 2015 This support request is being escalated to our root admin.
Krydos Posted October 30, 2015 Posted October 30, 2015 Here are the spam reports we received for your account: We have received a complaint about your account. Please investigate and fix within 24 hours. Hurricane Electric Abuse Department support@he.net From scomp@aol.net Thu Oct 29 05:53:14 2015 Return-Path: <scomp@aol.net> X-Original-To: report@abuse.he.net Delivered-To: report@abuse.he.net Received: from smr-m05e.mx.aol.com (smr-m05e.mx.aol.com [204.29.186.194]) by abuse.he.net (Postfix) with ESMTPS id CC7D854029C for <report@abuse.he.net>; Thu, 29 Oct 2015 05:52:32 -0700 (PDT) Received: from scmp-m009.mail.aol.com (scmp-m009.mail.aol.com [172.26.180.17]) by smr-m05e.mx.aol.com (AOL Mail Bouncer) with ESMTP id 3126C380015A for <report@abuse.he.net>; Thu, 29 Oct 2015 08:52:31 -0400 (EDT) Received: from scomp@aol.net by scmp-m009.mail.aol.com; Thu, 29 Oct 2015 08:52:28 EDT To: report@abuse.he.net From: scomp@aol.net Date: Thu, 29 Oct 2015 08:52:28 EDT Subject: Email Feedback Report for IP 65.19.143.2 MIME-Version: 1.0 Content-Type: multipart/report; report-type=feedback-report; boundary="boundary-1138-29572-2659438-17846" X-AOL-INRLY: stevie.heliohost.org [65.19.143.2] scmp-m009 X-Loop: scomp --boundary-1138-29572-2659438-17846 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit This is an email abuse report for an email message with the message-id of 38318700.44231.52965E60@night.nightchanz.com received from IP address 65.19.143.2 on Thu, 29 Oct 2015 07:05:30 -0400 (EDT) For information, please review the top portion of the following page: http://postmaster.aol.com/Postmaster.FeedbackLoop.php For information about AOL E-mail guidelines, please see http://postmaster.aol.com/Postmaster.Guidelines.php If you would like to cancel or change the configuration for your FBL please use the tool located at: http://postmaster.aol.com/SupportRequest.FBL.php --boundary-1138-29572-2659438-17846 Content-Disposition: inline Content-Type: message/feedback-report Feedback-Type: abuse User-Agent: AOL SComp Version: 0.1 Received-Date: Thu, 29 Oct 2015 07:05:30 -0400 (EDT) Source-IP: 65.19.143.2 Reported-Domain: stevie.heliohost.org Redacted-Address: redacted Redacted-Address: redacted@ --boundary-1138-29572-2659438-17846 Content-Type: message/rfc822 Content-Disposition: inline Return-Path: <night@nightchanz.com> Received: from stevie.heliohost.org (stevie.heliohost.org [65.19.143.2]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mtaig-aaf04.mx.aol.com (Internet Inbound) with ESMTPS id E7343700000B2 for <redacted>; Thu, 29 Oct 2015 07:05:30 -0400 (EDT) Received: from [178.222.248.71] (port=3355 helo=[192.168.100.20]) by stevie.heliohost.org with esmtpa (Exim 4.82) (envelope-from <night@nightchanz.com>) id 1Zrl0t-000267-Cy; Thu, 29 Oct 2015 04:04:36 -0700 From: "night" <night@nightchanz.com> Cc: redacted@yahoo.com, redacted@hotmail.com, redacted@aol.com, redacted@aol.com, redacted@aol.com, redacted@hotmail.com Date: Thu, 29 Oct 2015 12:04:35 +0100 MIME-Version: 1.0 Subject: IMPROVE YOUR SEHUAL HALETH carnal Message-ID: <38318700.44231.52965E60@night.nightchanz.com> Priority: normal X-mailer: Pegasus Mail for Windows (4.70) Content-type: text/plain; charset=windows-1251 Content-transfer-encoding: 7BIT Content-description: Mail message body X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - stevie.heliohost.org X-AntiAbuse: Original Domain - aol.com X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - nightchanz.com X-Get-Message-Sender-Via: stevie.heliohost.org: authenticated_id: night@nightchanz.com X-Source: X-Source-Args: X-Source-Dir: x-aol-global-disposition: G Authentication-Results: mx.aol.com; spf=none (aol.com: the domain nightchanz.com appears to have no SPF Record.) smtp.mailfrom=nightchanz.com; x-aol-sid: 3039ac1a7f5a5631fd7a6e7d X-AOL-IP: 65.19.143.2 X-AOL-SPF: domain : nightchanz.com SPF : none http://sanallikahayat.esy.es/webdirect.php?link=st2K7a Mander pussy cries for your dickie dick Mander WALKED ALWAYS canada peniss dokktors http://dressbestuniform.com/webdirect.php?link=kfSFJc --boundary-1138-29572-2659438-17846-- We have received a complaint about your account. Please investigate and fix within 24 hours. Hurricane Electric Abuse Department support@he.net From scomp@aol.net Thu Oct 29 10:12:56 2015 Return-Path: <scomp@aol.net> X-Original-To: report@abuse.he.net Delivered-To: report@abuse.he.net Received: from smr-a03e.mx.aol.com (smr-a03e.mx.aol.com [204.29.186.242]) by abuse.he.net (Postfix) with ESMTPS id 94AE15401B2 for <report@abuse.he.net>; Thu, 29 Oct 2015 10:12:56 -0700 (PDT) Received: from scmp-d009.mail.aol.com (scmp-d009.mail.aol.com [172.29.189.78]) by smr-a03e.mx.aol.com (AOL Mail Bouncer) with ESMTP id B260D3800300 for <report@abuse.he.net>; Thu, 29 Oct 2015 13:12:55 -0400 (EDT) Received: from scomp@aol.net by scmp-d009.mail.aol.com; Thu, 29 Oct 2015 13:12:50 EDT To: report@abuse.he.net From: scomp@aol.net Date: Thu, 29 Oct 2015 13:12:50 EDT Subject: Email Feedback Report for IP 65.19.143.2 MIME-Version: 1.0 Content-Type: multipart/report; report-type=feedback-report; boundary="boundary-1138-29572-2659438-8190" X-AOL-INRLY: stevie.heliohost.org [65.19.143.2] scmp-d009 X-Loop: scomp --boundary-1138-29572-2659438-8190 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit This is an email abuse report for an email message with the message-id of op.8ufu952olhwon1@p0s0096.startdedicated.com received from IP address 65.19.143.2 on Thu, 29 Oct 2015 07:59:59 -0400 (EDT) For information, please review the top portion of the following page: http://postmaster.aol.com/Postmaster.FeedbackLoop.php For information about AOL E-mail guidelines, please see http://postmaster.aol.com/Postmaster.Guidelines.php If you would like to cancel or change the configuration for your FBL please use the tool located at: http://postmaster.aol.com/SupportRequest.FBL.php --boundary-1138-29572-2659438-8190 Content-Disposition: inline Content-Type: message/feedback-report Feedback-Type: abuse User-Agent: AOL SComp Version: 0.1 Received-Date: Thu, 29 Oct 2015 07:59:59 -0400 (EDT) Source-IP: 65.19.143.2 Reported-Domain: stevie.heliohost.org Redacted-Address: redacted Redacted-Address: redacted@ --boundary-1138-29572-2659438-8190 Content-Type: message/rfc822 Content-Disposition: inline Return-Path: <night@nightchanz.com> Received: from stevie.heliohost.org (stevie.heliohost.org [65.19.143.2]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mtaig-aam03.mx.aol.com (Internet Inbound) with ESMTPS id 66FF370000091 for <redacted>; Thu, 29 Oct 2015 07:59:59 -0400 (EDT) Received: from [14.174.202.181] (port=26788 helo=[192.168.1.5]) by stevie.heliohost.org with esmtpa (Exim 4.82) (envelope-from <night@nightchanz.com>) id 1ZrlsR-0006zx-MC; Thu, 29 Oct 2015 04:59:53 -0700 From: "night" <night@nightchanz.com> Cc: redacted@simistermedia.com, redacted@aol.com, redacted@yahoo.com Date: Thu, 29 Oct 2015 19:02:57 +0700 MIME-Version: 1.0 Subject: BEHIND viagraaa? no problem, take it nnnnoooWWW Message-ID: <op.8ufu952olhwon1@p0s0096.startdedicated.com> Priority: normal X-mailer: Pegasus Mail for Windows (4.70) Content-type: text/plain; charset=windows-1251 Content-transfer-encoding: 7BIT Content-description: Mail message body X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - stevie.heliohost.org X-AntiAbuse: Original Domain - aol.com X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - nightchanz.com X-Get-Message-Sender-Via: stevie.heliohost.org: authenticated_id: night@nightchanz.com X-Source: X-Source-Args: X-Source-Dir: x-aol-global-disposition: G Authentication-Results: mx.aol.com; spf=none (aol.com: the domain nightchanz.com appears to have no SPF Record.) smtp.mailfrom=nightchanz.com; x-aol-sid: 3039ac1b138756320a3e1fa3 X-AOL-IP: 65.19.143.2 X-AOL-SPF: domain : nightchanz.com SPF : none Xavier looking for online parmazie? here it is Samsung fathered no more lonely nights - canadienne piulls SANDALS NO PRECRIPTION DURGGS SERVICE closely http://everbrightinfra.com/xTRa3z --boundary-1138-29572-2659438-8190--
NightHawk Posted October 30, 2015 Author Posted October 30, 2015 Where's all the spam coming from, I haven't used my site for this behavior now or in the past. Could someone have gained access to my emailer or other parts?looks like someone has done this without my knowledge. Could his have been a form of hack?
Krydos Posted October 31, 2015 Posted October 31, 2015 Where's all the spam coming from Received: from [14.174.202.181] (port=26788 helo=[192.168.1.5]) by stevie.heliohost.org with esmtpa (Exim 4.82) # ./where_ip 14.174.202.181 Hanoi, Vietnam It looks like that one came from Vietnam. Received: from [178.222.248.71] (port=3355 helo=[192.168.100.20]) by stevie.heliohost.org with esmtpa (Exim 4.82) # ./where_ip 178.222.248.71 Belgrade, Serbia and that one came from Serbia.Could someone have gained access to my emailer or other parts?looks like someone has done this without my knowledge.Probably. The account nightz has been unsuspended. Please change all of your passwords, make sure your account is secure, and make sure all of your computers that can send email through your account are malware free. If this account is found to be sending spam again the suspension will likely be a permanent one. Let us know if you need any additional assistance.
NightHawk Posted November 1, 2015 Author Posted November 1, 2015 Thanks for unsuspended my account, I have been Spam attacked in my email with over 4500 emails on Thursday, I have changed my passwords just in case and activated. Spam assassin, Email Authentication. and lowered my email quota to the near minimum. Hoping this will prevent their type of attack in the future. Thanks NightHawk.
Recommended Posts