New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Hetzner Abuse & Suspension Issue
Hello 
,
I have started a hosting business and reselling VPS server to my clients from Hetzner with a WHMCS module. I have much clients currently who using them as RDP and Linux servrs.
I have not received any abuse report yet. But I'm afraid about fake/real abuse of one IP/server report and Hetzner will suspend my account and all of my clients will effected.
- Is there any way to prevent this?
- How can I monitor my clients what are they doing?
- How can I detect the abuse, spamming so that I can prevent it before Hetzner comes in?
- Does Hetzner suspend at 1st or they give warning emails?
- How to handle a abuse report?
- Anyone reselling Hetzner VPS? How's your expirence?
I'm planning not to turn on server ports 25, 465.
Sorry for all of this questions. But I'm really worried. Can someone help me by replying this?
Comments
Welcome to the reselling business!
To answer your questions ....
There is no way to prevent account suspensions due to abuse, especially with larger hosts who just look at you as a client number.
Eavesdropping on your clients is not considered the right way of doing business. Be upfront about your TOS, what you allow and what you dont. Also, block port 25, don't bother with rate limiting.
Hetzner suspensions are russian roulette kinda thing... you might get a warning or not.
Once an abuse report comes in, deal with it immediately. Don't keep it there waiting. Show your provider that you are actually doing something about it and taking it seriously.
I am not reselling hetzner, but from my experience this goes for all the larger hosts. Some of the smaller hosts might be willing to work with you on a case by case basis and might avoid outright blocking you or your account, and might just nullroute the IP etc.
My advice is not to keep your eggs in one basket. It never is worth it, especially if you are reselling. Start providing/reselling different providers, in case anything happens you are already mitigating the impact.
However, on a more serious note, as you grow you can lease your own IPs, get an ASN, and handle the abuse reports your self.
If you use WHMCS, there is a module that we have created that helps with abuse management https://marketplace.whmcs.com/product/1326-abuse-manager-pro
And as always, if you need any help, more than happy to assist/answer your questions
If you are not from a high risk country and have a registered business that you use with Hetzner then they are quite lenient as long as you respond to their abuse notices.
You can never prevent all client abuse. But preventing usage of port 25 for example cuts a lot of abuse already.
If you just just resell their VPS services then you cannot unless you log into their VPS. That is a no-no.
As above
Hetzner forwards an abuse notice to you and depending on the severity of the issue they give you 6-48 hours to respond. Port scanning is around 6 hours, network attacks around 24 hours and 48 hours for e-mail abuse. If you fail to respond within the deadline they will block the IP address until the matter is resolved. From my experience they just block the offending IP and it does not affect other services.
You resolve the issue and send a statement. The abuse notices are usually quite detailed so you'll know what needs to be done.
Only their dedicated servers.
I'd suggest to reach out to Hetzner and explain your business to them. I did that in my early days and they gave me a pretty relaxed statement.
It's wonderful to see that your company has thousands of satisfied customers and is even trusted by government agencies already! Truly impressive. I absolutely love all the great things I've seen on your website — it just looks so professional and polished, especially with the fun ads, false information and fake claims sprinkled throughout. It's instantly clear you've put in a lot of hard work to build such a reputable and trustworthy brand.
Pretty sure that with all that success, you probably don't need any advice or suggestions. But even so, I just wanted to say how inspiring it is to see a company doing so well. Keep up the fantastic work — your passion and dedication really shine through!
/s
Oh. And maybe pay to WHCMS?
?
!
Oh, didn't saw a website in the first post and it sounded like your post was generated by ChatGPT (or similar), but now, after I searched for the company in his profile and looked at that website full of lies, SEO bullshit and pointless repetitions, I realised that you're absolutely right, sorry.
No worries! I went ahead and added /s to avoid any potential confusion. My comment was still off-topic, though.