[Solved] Unsuspend my account

[hostmysiteplease]

My account "hostmysiteplease" is suspended

[wolstech]

You're suspended for abusing the email service. The limit is 50/day, but you tried sending nearly 1500, almost 30x the allowed limit.

hostmysiteplease	2025-06-01 22:16:37	Tommy	hostmysiteplease.helioho.st	hostmysiteplease	Suspended by system for sending 220 emails.
hostmysiteplease	2025-05-28 22:09:40	Tommy	hostmysiteplease.helioho.st	hostmysiteplease	Disabled email service for sending 1256 emails.

Can you explain?

[hostmysiteplease]

I thought I had locked down the wordpress installation but it seems to be futile. Let me just switch to plain HTML since I seem to be playing whack a mole with Wordpress. Everytime I lock it down, they find another way to hack it. I'm exhausted, can't keep securing the Wordpress installations.

I'm going to remove all wordpress installations and replace them with plain HTML. I just need to copy the website contents then I wipe them all

[wolstech]

Yeah Wordpress is full of security issues itself, and many of the free extensions out there have backdoors built in too (and they're free purely for that reason, they give away the extension so the developer has servers they can use for abusive activity that makes them money, typically spam or phishing). This is extremely common for WP.

You've been unsuspended, but I'm leaving your mail service disabled for the time being so the compromised WP installs can't send spam. It may take a few minutes for your account to work again. Please remove WP quickly.

[hostmysiteplease]

I've blocked access to all via index.html so that I can access the db and download the data but I seem to be getting a 503 on all domains in my account. Even the ones which didn't have any Wordpress installations such as harlemtechnologies.com. See the attached image

[wolstech]

This looks to be broken internally...no meaningful error in the Plesk logs either. Escalating to Krydos.

Not sure what exactly is wrong with it, but I did notice your account is unusual in that your linux system username doesn't match your hosting account username (it's supposed to match), so maybe that broke something during the suspend/unsuspend process?

If Krydos can't fix it, we may need to just reset your account...

[wolstech]

After further review, due to the username mismatch and the 503 issue, this account will need to be reset to correct the problems, which will delete all of your data and domains.

Do you want me to go ahead and do that now?

Also, which domains do you need added back to the account after the reset?

[hostmysiteplease]

Do we need to reset the account? The 403 error is gone. Anyway, if you have to the domains are as follows:

1. waa.co.ke
2. dhamira.co.ke
3. conarim.com
4. harlemtechnologies.com
5. mwenendo.xyz
6. nilijua.xyz
7. yourcompanysolutions.online

 

[wolstech]

If the error has cleared itself and you're satisfied with how the account is working now, no we do not need to reset it. The unusual username mismatch may cause issues down the road, but if it's working we can just leave it be.

[hostmysiteplease]

Leave it. If it brings issues down the line, we shall reset. It seems to be ok now. Thanks alot for your help.

Now to look for my Dreamweaver key so that I can start porting the sites from Wordpress.

Is the email enabled now? Also, I couldn't find anything in the statistics on which account or the email traffic statistics, Any idea where I can be checking in the future to avoid getting suspended?

[Krydos]

34 minutes ago, hostmysiteplease said:

Is the email enabled now?

No. Are the hacked Wordpress sites deleted?

34 minutes ago, hostmysiteplease said:

Also, I couldn't find anything in the statistics on which account or the email traffic statistics, Any idea where I can be checking in the future to avoid getting suspended?

https://tommy.heliohost.org/smb/outgoing-mail/list/type/subscription

[hostmysiteplease]

Yes. I removed all Wordpress files from my account

[wolstech]

Mail service has been enabled on your account.  

[hostmysiteplease]

Thanks a lot for your help