wolstech Posted June 3 Posted June 3 You're suspended for abusing the email service. The limit is 50/day, but you tried sending nearly 1500, almost 30x the allowed limit. hostmysiteplease 2025-06-01 22:16:37 Tommy hostmysiteplease.helioho.st hostmysiteplease Suspended by system for sending 220 emails. hostmysiteplease 2025-05-28 22:09:40 Tommy hostmysiteplease.helioho.st hostmysiteplease Disabled email service for sending 1256 emails. Can you explain?
hostmysiteplease Posted June 3 Author Posted June 3 I thought I had locked down the wordpress installation but it seems to be futile. Let me just switch to plain HTML since I seem to be playing whack a mole with Wordpress. Everytime I lock it down, they find another way to hack it. I'm exhausted, can't keep securing the Wordpress installations. I'm going to remove all wordpress installations and replace them with plain HTML. I just need to copy the website contents then I wipe them all
wolstech Posted June 3 Posted June 3 Yeah Wordpress is full of security issues itself, and many of the free extensions out there have backdoors built in too (and they're free purely for that reason, they give away the extension so the developer has servers they can use for abusive activity that makes them money, typically spam or phishing). This is extremely common for WP. You've been unsuspended, but I'm leaving your mail service disabled for the time being so the compromised WP installs can't send spam. It may take a few minutes for your account to work again. Please remove WP quickly.
hostmysiteplease Posted June 3 Author Posted June 3 I've blocked access to all via index.html so that I can access the db and download the data but I seem to be getting a 503 on all domains in my account. Even the ones which didn't have any Wordpress installations such as harlemtechnologies.com. See the attached image
wolstech Posted June 3 Posted June 3 This looks to be broken internally...no meaningful error in the Plesk logs either. Escalating to Krydos. Not sure what exactly is wrong with it, but I did notice your account is unusual in that your linux system username doesn't match your hosting account username (it's supposed to match), so maybe that broke something during the suspend/unsuspend process? If Krydos can't fix it, we may need to just reset your account...
wolstech Posted June 3 Posted June 3 After further review, due to the username mismatch and the 503 issue, this account will need to be reset to correct the problems, which will delete all of your data and domains. Do you want me to go ahead and do that now? Also, which domains do you need added back to the account after the reset?
hostmysiteplease Posted June 3 Author Posted June 3 Do we need to reset the account? The 403 error is gone. Anyway, if you have to the domains are as follows: waa.co.ke dhamira.co.ke conarim.com harlemtechnologies.com mwenendo.xyz nilijua.xyz yourcompanysolutions.online
wolstech Posted June 3 Posted June 3 If the error has cleared itself and you're satisfied with how the account is working now, no we do not need to reset it. The unusual username mismatch may cause issues down the road, but if it's working we can just leave it be.
hostmysiteplease Posted June 3 Author Posted June 3 Leave it. If it brings issues down the line, we shall reset. It seems to be ok now. Thanks alot for your help. Now to look for my Dreamweaver key so that I can start porting the sites from Wordpress. Is the email enabled now? Also, I couldn't find anything in the statistics on which account or the email traffic statistics, Any idea where I can be checking in the future to avoid getting suspended?
Krydos Posted June 3 Posted June 3 34 minutes ago, hostmysiteplease said: Is the email enabled now? No. Are the hacked Wordpress sites deleted? 34 minutes ago, hostmysiteplease said: Also, I couldn't find anything in the statistics on which account or the email traffic statistics, Any idea where I can be checking in the future to avoid getting suspended? https://tommy.heliohost.org/smb/outgoing-mail/list/type/subscription
hostmysiteplease Posted June 4 Author Posted June 4 Yes. I removed all Wordpress files from my account
wolstech Posted June 6 Posted June 6 Something on your account is still trying to send emails, and the server has removed your mail service again as a result. Your account tried to send 220 emails earlier today. Do you have email forwarding set up by chance? Forwarders are a very common way to get suspended for overuse of email.
Recommended Posts