- Email Compromise: Server is sending out spam emails
- System Compromise: Server is compromised due to unauthorized access or a security vulnerability and sending out huge amount of traffic
- Server under attack: Server is under DDoS attack
- We send out a warning email to the authorized contact as soon as we discover and ascertain the abuse issue. The email contains the nature of the abuse and a request to check the issue at your end. If there are any identifiable security vulnerabilities, we will include the remedial measures as well. We would ask you to respond to us with the corrective measures you have taken to address the issue
- If we do not get a response, from your end, within 2 hours and the issue is still persisting we would call the authorized contact on their given phone numbers to intimate them of the issue
- In case of lack of response, to our phone call, for another 2 hours,
- We would perforce have to switch off the machines, to prevent malicious activities on your server
- We would require you to share the passwords for your server in order to turn off all the services
- Once we are sure that the server is clean, we will bring it online
- In case you take action on the abuse yourself, we would require written confirmation on the steps you have taken to stop the reported actions
We understand getting an abuse ticket is a hassle, but please remember that we're doing our best to protect our network, the Internet community and you.
Switching off your server is a last resort for us, and we want to make sure everyone is on the same page to prevent us from having to take that recourse. In the unfortunate event that you do experience an abuse issue, please follow the instructions in this communication and it will save you unnecessary downtime and complicated procedures to bring back the site/server.