Request to Unsuspend My HelioHost Account

[arifchy369]

My account was recently suspended without prior notice, and I would like to kindly request a review and unsuspension. I believe there might have been a misunderstanding, as I have always followed the Terms of Service and acceptable use policy.

My account details are as follows:

• Username: arifchy369

• Domain: arifchy369.helioho.st

• Server: Johnny

If there was any specific issue that caused the suspension, I’d appreciate it if you could let me know so I can immediately address and correct it. I’ve been very happy with HelioHost’s service and would like to continue using it responsibly.

Thank you for your time and understanding.
Best regards,
Arif Chowdhury

[Unknown025]

An administrator will be able to explain the suspension reason, but it's likely related to the content that you're hosting.

[arifchy369]

It’s possible that some malware or harmful files were accidentally included in my hosting files without my knowledge. I sincerely apologize if that caused any issue.

Could you please reset my account so I can start fresh and make sure everything is clean and compliant this time? I’ll make sure to carefully review all files before uploading again.

Thank you for your understanding and support.

[Krydos]

8 hours ago, arifchy369 said:

without my knowledge

The reason you were suspended is because you intentionally uploaded a web shell. It looks intentional to me because it has your name written all over it in the comments, etc. Attempts to hack our servers, or circumvent limitations imposed for the security of our thousands of other users sharing the same server as you are not taken lightly. If you need SSH access you can purchase a VPS at https://heliohost.org/vps/ where you will have root access to install anything you want, and you can't be tempted to try to access other users data because you're the only user on the server.

[arifchy369]

Thank you for your clear reply. I want to be completely transparent and apologize for the situation.

What happened: I used a custom node-pty based remote shell to deploy a Python application because SSH was not available on the hosting plan. My goal was to clone a Git repository, compile shared binaries required by the application, and install some libraries. I used a deployment approach I’ve used on other hosting providers where SSH isn’t available — I did not intend to create a backdoor, attack the server, or access any other users’ data.

I understand how this looked from your side and why you treated it seriously. I accept full responsibility for not checking the Terms of Service closely enough. I want to cooperate fully:

* I will remove any questionable files immediately (or provide you with permission to remove them).
* I will follow any remediation steps you require and comply with any penalties you impose.
* If unsuspension isn’t possible, please let me know whether a reset or alternate remedy is available so I can move forward responsibly. 

Please tell me the next steps you need from me. I truly appreciate HelioHost and would like to resolve this and stay compliant.

Sincerely,
Arif

Edited 3 hours ago by arifchy369

[Krydos]

1 hour ago, arifchy369 said:

to deploy a Python application

What does the Python application do?

[arifchy369]

The project I was deploying is a small Flask-based image encryption tool — a personal hobby project. It encrypts and decrypts image pixels using AES to protect images locally before storage.

Pixel-by-pixel AES in Python is CPU-intensive and very slow, so I wrote the critical processing functions in C for efficiency, which produces .so files. The app also uses some Python libraries not installed on the server, like PyCryptodome, flask_session, and flask_wtf.

As a newcomer to HelioHost, I didn’t know the proper way to deploy such an app without SSH, so I used a custom node-pty + WebSocket based shell I developed myself to automate deployment: clone my repo, compile the C extension, and install dependencies. There was no intention to access other users’ data or compromise the server — it was only for my hobby project.

[Krydos]

Here is our documentation on how to host a Flask website on the free Johnny plan. https://wiki.helionet.org/Flask Please note that SSH isn't required, nor is uploading hacker web shells with extremely weak passwords stored in plaintext that are comically insecure. If you feel like you're incapable of following these instructions, you can purchase a VPS at https://heliohost.org/vps/ where you will have root SSH access.

[arifchy369]

I sincerely apologize for uploading the custom WebSocket shell. I now understand it was insecure and violated your policies. I commit to removing it immediately and following your official Flask deployment instructions.

I kindly request that my account be unsuspended so I can correct this and continue using HelioHost responsibly.

Thank you for your consideration.

[Krydos]

9 minutes ago, arifchy369 said:

continue using HelioHost responsibly

You are required to do an account reset if you wish to stay on Johnny. You are allowed to have a partial backup of a file or two if you need, but each file needs to be checked manually by an admin prior to being approved for backup to make sure we aren't backing up anything that violates our terms of service. If you don't need a backup of anything let us know and we can proceed with the reset immediately.