hostpolice
New Member
On sep 2 I got email from hivelocity stating that SPAM Mail were sent out from our server & therefore it has been terminated. The email is as below, we were doing vps hosting on that server & the IP they have stated is one of our clients vps. He sent spam mails & Hivelocity just terminated our server without any warning & emailed us after terminating the server.
NO warning to fix the issue. When we are doing hosting business anyone can purchase the account & abuse our server but they should have given us a warning to fix the issue & we never had any spam mail issue in past. This was the first one & they terminated our server. We have used burstnet, softlayer & some other data center in past & everyone warn first & only terminate the server when the issue is not fixed.
below is the email I received from them
I replied to this email asking that I was not warned & not given time to fix the issue & here is the reply from their abuse manager:
I called them & ask to put the server back for 24 hrs to allow to copy clients data to a new server but they are not agree.
I did chat with Steve their general manager & here is what he says
NO warning to fix the issue. When we are doing hosting business anyone can purchase the account & abuse our server but they should have given us a warning to fix the issue & we never had any spam mail issue in past. This was the first one & they terminated our server. We have used burstnet, softlayer & some other data center in past & everyone warn first & only terminate the server when the issue is not fixed.
below is the email I received from them
Code:
==============================================================================
**** This email was sent from HiVelocity’s Abuse System ****
Hello,
While investigating complaints of IP blacklisting I found that the IP 66.232.97.148 has caused multiple RBL blacklistings of hivelocity IP addresses. The server at 66.232.97.148 is in violation of our AUP and has been terminated from the HiVelocity network.
*****************************
1) http://ipadmin.junkemailfilter.com/remove.php?ip=66.232.97.148
2) http://dnsbl.invaluement.com/lookup/Default.aspx
66.232.97.148
STATUS: Listed on ivmSIP DATE LISTED: 6/8/2009 2:32:42 AM EST
3) IP 66.232.97.148 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=66.232.97.148
Note: You took possession of this server on 04/28/2009.
*****************************
You may contact your account manager with any questions or concerns and also you may make arrangements to purchase the harddrive should you need any data from it.
Thank you!
-Jay
Sr. Systems Administrator
HiVelocity Engineering Dept.
http://www.hivelocity.net
CONFIDENTIALITY NOTICE: The information in this e-mail message and any of its attachments is privileged and confidential and is intended solely for the indicated recipient. If you received this message in error, please delete it without copying or reading it, and notify the sender by return e-mail or by calling 888-869-4678 Additionally, this communication is not intended to convey legal advice to the recipient.
You can review this case at http://abuse.hivelocity.net
Your case id is 1793
Your pass code is esu83wcz (pass code is case sensitive)
CONFIDENTIALITY NOTICE: The information in this e-mail message and any of its attachments is privileged and confidential and is intended solely for the indicated recipient. If you received this message in error, please delete it without copying or reading it, and notify the sender by return e-mail or by calling 888-869-4678 Additionally, this communication is not intended to convey legal advice to the recipient.
***************************************************************
Below you may find a copy of the email message sent into abuse.
***************************************************************
[ SpamCop V4.6.0.028 ]
This message is brief for your comfort. Please use links below for details.
Email from 66.232.97.148 / Mon, 31 Aug 2009 10:10:46 +0200 http://www.spamcop.net/w3m?i=z4508739466z359f4e743d8473ff1e0696aab849fa3ez
[ Offending message ]
Delivered-To: x
Received: from pilot.dds.nl (pilot.dds.nl [85.17.178.136])
by joon.dds.nl (Postfix) with ESMTP id 06B6A222FB7;
Mon, 31 Aug 2009 10:10:52 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by pilot.dds.nl (Postfix) with ESMTP id 9E08D58059;
Mon, 31 Aug 2009 10:10:52 +0200 (CEST)
X-DDS-Server: pilot.dds.nl
X-Spam-Flag: YES
X-Spam-Status: Yes, score=6.707 tagged_above=-1000 required=5
tests=[AWL=-0.091, BAYES_00=-1.5, DDS_TXT_SPAM=36660,
HTML_MESSAGE=0.001, HTML_MIME_NO_HTML_TAG=0.097, MIME_HTML_ONLY=0.1,
RCVD_IN_JMF_BL=2, RDNS_NONE=0.1]
Received: from host.anysync.com (unknown [66.232.97.148])
by pilot.dds.nl (Postfix) with ESMTP id 0277858073
for ; Mon, 31 Aug 2009 10:10:46 +0200 (CEST)
Date: Mon, 31 Aug 2009 08:08:59 +0000
To: x
From: Mark Huybregts
Subject: Linkruil
Message-ID:
X-Priority: 3
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="UTF-8"
X-Virus-Scanned: clamav-milter 0.95.2 at pilot
X-Virus-Status: Clean
Beste webmaster,
Mijn naam is Mark Huybregts, en ik werk als linkdeveloper voor casino, forex en games gerelateerde websites.
Ik vond http://huizen.dds.nl via Google, en wil graag vragen of u interesse hebt in linkuitwisseling?
Ik kan u links aanbieden op uiteenlopende pagina's qua onderwerp en pagerank.
Mocht u geinteresseerd zijn in een ruil breng ik u graag op de hoogte van alle details!
Met vriendelijke groet,
Mark Huybregts
English: I am looking for link exchange partners for casino, forex and games related sites. I can offer you links on different sorts of pages regarding subject, pagerank etc.
If you are interested in an exchange, please let me know so I can give you the details! :)
*****************************
1) http://ipadmin.junkemailfilter.com/remove.php?ip=66.232.97.148
2) http://dnsbl.invaluement.com/lookup/Default.aspx
66.232.97.148
STATUS: Listed on ivmSIP DATE LISTED: 6/8/2009 2:32:42 AM EST
3) IP 66.232.97.148 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=66.232.97.148
*****************************I replied to this email asking that I was not warned & not given time to fix the issue & here is the reply from their abuse manager:
Code:
Hello,
**************************************************
NOTE: I will not work with you on this issue due to the numerous blacklistings. Furthermore, this server was blacklisted in level 1 at UCPROTECT and is in part responsible for the ASN listing which is effecting all our IP's.
IP 66.232.97.148 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=66.232.97.148
**************************************************
The server is a terminated spam source and is not going back online. As you were advised in the abuse email you received:
You may contact your account manager with any questions or concerns and also you may make arrangements to purchase the harddrive should you need any data from it.
Thank you!
-Jay
Sr. Systems Administrator
HiVelocity Impressive Support
(888) 869-4678
http://www.hivelocity.netI called them & ask to put the server back for 24 hrs to allow to copy clients data to a new server but they are not agree.
I did chat with Steve their general manager & here is what he says
Code:
info: Please wait while I transfer the chat to 'Steven'.
info: You are now chatting with 'Steven'
Steven: we have already explained to you why your server is not going back online. We researched and every ip we checked was blacklisted
ME: not every
ME: show me please
Steven: we randomly checked and each one we checked was blacklisted
ME: first you said every IP
Steven: by removing you we are able to get them delisted
ME: now your saying randomly
Steven: no, i said each one we checked
ME: what problem your having with me ?
Steven: spam
ME: whats wrong
Steven: your server was spewing spam from multiple ips.
ME: & NO warning @ all ?
Steven: you got our ips blacklisted
Steven: that is my problem
ME: It can be delisted
Steven: typically we give warnings but your abuse was blatant and widespread
ME: not a big issue
ME: how come
ME: its first sp,ma complaint
ME: my server never had any spam complaint before
ME: this is not good business practise
ME: to terminate any service
ME: without any notice
ME: without any chance
ME: hello
Steven: I am here. You have not said anything new from what we talked about this morning. Your first complaint was a bad one and was rampant spam resulting in blacklistings
ME: I never had any spam compliant
ME: This was the first one
ME: & you just terminated
Steven: and it was a bad one
ME: at least you could inform us to backup the data in 24 hrs
ME: before just terminating it
ME: not a good business practice
ME: really
ME: the black list gets removed when there is no spam for 15 days
ME: & I can assure you that
Steven: I have to leave you now to step into a meeting. You asked for the manager and I gave you my time just like I did this morning.
ME: I need a solution my clinets need their data
Steven: I will have the abuse manager on shift look at your abuse case again now
ME: thats why I am asking you
ME: you just can't leave this way
Steven: if he comes to a different conclusion then we will let you know
ME: Please understand
ME: I am your client for 4 months now
ME: & never had any issues
ME: I am felling I am a victim
ME:
ME: please
Steven: I will have an abuse manager take another look at it now
ME: ok
Steven: we will reply to that ticket very shortly
ME: ok
ME: Thanks
Steven: trust me, I dont like taking servers offline either
ME: bye
ME: yes but I assure you can get the Ips white listed again
Steven: I have to go but I am giving your case to the abuse tech now
ME: ok
ME: Thanks
ME: bye
Steven: bye for now sir
info: Chat session has ended.
24 hrs now till I have no update in ticket, I went to chat again..
info: Please wait for a site operator to respond.
info: You are now chatting with 'Andrew'
Andrew: Hello, welcome to HiVelocity's Impressive Support TM. How may I assist you today?
ME: Hi
ME: Is kevin there ?
Andrew: Hello
Andrew: Kevin is not available for now.
ME: when he will on then ?
ME: can you please transfer to steven ?
Andrew: I would like to suggest you to email him at kevin@hivelocity.net so he will mail back to you.
Andrew: Just a minute
info: Please wait while I transfer the chat to 'Steven'.
info: You are now chatting with 'Steven'
Steven: Hello Again
ME: Hi
Steven: As I told you yesterday, I had another tech in the abuse dept look into your case. Unfortunately, he agreed with Jay. It is obvious there was massive spam going on
ME: You told em that other abuse manager will look in to my issue
ME: but I have no updates yet
ME: there is only one IP in the email
ME: I just gave you the update.
ME: there is no update
Steven: here are some of his words exactly.....
Steven: "It is pretty clear this guy some how obtained (farmed) a list of domains and wrote some kind of mass mailer to mail webmaster@ to each domain. As you can see virtually all the messages have failed for various reasons. In many cases, the domains dont even exist anymore. Why would anyone knowingly message accounts under domains that do not and have not existed for a long time. I am sure many of the failure messages are due to listings caused by this system."
ME: see it was a vps on the server & the guy abused the server & we can't other thousand of clients because of him
ME: please understand
ME: I got many emails
ME: they are asking for their data
ME: some of them did email to you also
ME: you need to give a chance to your client to fix the issue
ME: I can assure you there won't be spam anymore & you can even terminate the server after 2 days
ME: if you do not want to continue
Steven: it was not just one VPS. Every one of your ips got listed
ME: I searched & couldnt see anymore
ME: its one only
ME: I am sure
Steven: I have 2 guys here telling me different
Steven: I am sorry but 2 abuse techs independently looked into your issue and both said the same thing. The server cannot go back online due to massive spamming and getting all ips blacklisted
ME: ok please provide me IP addresseS
ME: so I can see
Steven: we sent you all the listings in the emails we sent when the abuse case was opened
ME: I already said there is only 1 ip in the email
ME: & I got only one email
ME: when you say there are multiple ip then please provide me
ME: ask your guys
ME: to provide
Steven: stand by
ME: hello
ME: are you there ?
Steven: yes
Steven: waiting on my abuse guy
ME: ok
ME: I have checked all ip manually
ME: There is only one IP
ME: in black list
ME: no other
ME: while you are saying all of my server Ips got blacklisted that is NOT true
ME: how long do I need to wait
Steven: i am going to have my abuse manager send you the evidence again
Steven: I will not be able to put the server back online
Steven: I have to go.
Steven: you will be getting an email shortly
info: Chat session has ended.
info: You are not currently in a chat session.
He kept me waiting for half an hour approx then he says he'll update me in ticket. He even don't know exactly about the issue. First he said all of ,y server IPs are got blacklisted then he says we checked some randomly & all of them are blacklisted. I asked him to show the other IP except 66.232.97.148 & he has no answer.
Here are the IP address associated with my server, please check them & let me know anymore is blacklisted except 66.232.97.148
IP Allocation: 66.232.97.225-230, 66.232.124.181-190 & 66.232.124.2-6
66.232.97.146-150
There was no abuse till I paid them just before 5 days. After I paid them for this month the abuse issue was borned & they terminated my server. I asked them for refund for the service they are not going to provide me but they are not ready to refund.
The worst thing is they do not care for their clients, I requested them just to open the server for 24 hrs to copy clients data to new server but they are ridiculous & don't understand anything.
Please beware of these guys. I have got WORST Service & support in industry from them.
The thread is discussed on WHT More information here: http://www.webhostingtalk.com/showthread.php?t=887556
They told me that they are putting the server back online for 24 hrs so I can move data to new server but then they said the HDD is throwing errors & they are trying to recover the data & till now I have not get the data back.
Just wanted to all of you aware of this.
If anyone has server with Hivelocity please NOTE: if someone sends a spam email from your server they will suspend you with out any notice, without any chance to fix the issue & will get you out of the business.
There is one more victim having same issue read it here
http://www.webhostingtalk.com/showthread.php?t=888029
Thanks.
