Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
25% Recurring Discount on NVMe VPS
Try EnsoVPN - Reliable VPN - 1-Day Free Trial
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
CloudLinux
Try EnsoVPN - Fast & Private VPN - 1-Day Free Trial
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

VSYS permanently suspended my VPS without any technical explanation

Hello everyone,

I'm sharing my experience with VSYS because I honestly don't know what else I could have done.

I was a VSYS customer for almost 2 years, and I still had around 4 months remaining on my VPS when it was suddenly and permanently suspended.

The only explanation I received was:

"During a security review, our system detected activity originating from your account that violates our Terms of Service."

No logs, no evidence, no timestamps, and no technical explanation were ever provided.

My VPS was hosting my WordPress websites and development Docker containers. I never intentionally used it to send spam, and I never used it as a mail server. My email services are hosted with a completely different provider.

After trying to understand what happened, I checked my VPS IP and found it listed on Spamhaus for suspicious email-related activity. I immediately contacted VSYS, explained that I genuinely had no idea what had happened, and asked them to review my case.

Unfortunately, every reply was exactly the same template response saying the suspension was final, the case was closed, there would be no refund, and no further communication would be provided.

I even contacted live chat hoping someone could at least ask the compliance team to review my case. Instead, I was told that abuse cases are not discussed via chat and was eventually asked to stop contacting their team.

What disappointed me the most wasn't that they enforce abuse policies. I fully understand that every hosting provider has to protect its infrastructure.

What disappointed me was the complete lack of transparency and the fact that I was never given a meaningful opportunity to explain my side or appeal the decision. It felt like I was judged, punished, and the door was immediately closed.

I genuinely feel that I was treated unfairly. If I had knowingly violated their Terms of Service, I wouldn't have spent hours trying to understand what happened and asking them to review my case.

Has anyone else experienced something similar with VSYS or another hosting provider?

Comments

  • olokeoloke Member, Host Rep

    @vsys_host any comment on this?

    Thanked by 2forest hyperblast
  • reikuzanreikuzan Member

    i was once also listed, to spmhaus type shit. do fixing my mail stuff (learning email) , and unblocked/delisted after request to them.

    spamhaus is too aggresive even with some small misconfigure server.

    but yes its provider side should not forcing, giving user time to fix their stuff before going forward block this and that, suspend this or that.

    in ur case. idk mybe false positive or someone hacked ur server.

  • @reikuzan said:
    i was once also listed, to spmhaus type shit. do fixing my mail stuff (learning email) , and unblocked/delisted after request to them.

    spamhaus is too aggresive even with some small misconfigure server.

    but yes its provider side should not forcing, giving user time to fix their stuff before going forward block this and that, suspend this or that.

    in ur case. idk mybe false positive or someone hacked ur server.

    Yeah, that's what I'm thinking too. It could be a false positive, or something on the server may have been compromised without my knowledge.

    I investigated the issue myself and found that Spamhaus had listed the network range, not just my VPS IP. The report references the entire /24 subnet and includes multiple IP addresses from the same range, which I found interesting.

    If anyone wants to see the Spamhaus report, I'm happy to share the link. I'm trying to understand what actually happened, not hide anything.

    Thanked by 2forest oloke
  • reikuzanreikuzan Member
    edited 9:51AM

    [@stevekelal said]
    entire /24 subnet

    damn, no other option than contact ur provider, explain its not ur fault. ask change ip / move different node/ location

    Thanked by 2forest stevekelal
  • @stevekelal said:

    @reikuzan said:
    i was once also listed, to spmhaus type shit. do fixing my mail stuff (learning email) , and unblocked/delisted after request to them.

    spamhaus is too aggresive even with some small misconfigure server.

    but yes its provider side should not forcing, giving user time to fix their stuff before going forward block this and that, suspend this or that.

    in ur case. idk mybe false positive or someone hacked ur server.

    Yeah, that's what I'm thinking too. It could be a false positive, or something on the server may have been compromised without my knowledge.

    I investigated the issue myself and found that Spamhaus had listed the network range, not just my VPS IP. The report references the entire /24 subnet and includes multiple IP addresses from the same range, which I found interesting.

    If anyone wants to see the Spamhaus report, I'm happy to share the link. I'm trying to understand what actually happened, not hide anything.

    You really should have worded your original post differently. As it reads its just your ip. The subnet changes things.

    Thanked by 1stevekelal
  • stevekelalstevekelal Member
    edited 9:59AM

    @reikuzan said:

    [@stevekelal said]
    entire /24 subnet

    damn, no other option than contact ur provider, explain its not ur fault. ask change ip / move different node/ location

    I tried everything. I explained my situation, asked them to investigate, asked whether the server had been compromised, asked for temporary access, even offered to migrate to a different node or a dedicated server.

    Unfortunately, every single reply was exactly the same copy-and-paste message:

    .....
    Hello,

    During a security review, our system detected activity originating from your account that violates our Terms of Service.

    As a result, your account has been permanently suspended and access to the service has been blocked. This action was taken to protect the integrity of our infrastructure and other customers.

    Please note that this suspension is final and will not be reversed. In accordance with our Terms of Service, the service is not eligible for a refund, and no data will be made available following the termination of the account.

    This matter is considered closed. We will not be providing any further communication or correspondence regarding this case.
    .....

    They never answered any of my questions or acknowledged the information I provided.

    Thanked by 1forest
  • forestforest Member

    @stevekelal said:

    @reikuzan said:

    [@stevekelal said]
    entire /24 subnet

    damn, no other option than contact ur provider, explain its not ur fault. ask change ip / move different node/ location

    I tried everything. I explained my situation, asked them to investigate, asked whether the server had been compromised, asked for temporary access, even offered to migrate to a different node or a dedicated server.

    Unfortunately, every single reply was exactly the same copy-and-paste message:

    .....
    Hello,

    During a security review, our system detected activity originating from your account that violates our Terms of Service.

    As a result, your account has been permanently suspended and access to the service has been blocked. This action was taken to protect the integrity of our infrastructure and other customers.

    Please note that this suspension is final and will not be reversed. In accordance with our Terms of Service, the service is not eligible for a refund, and no data will be made available following the termination of the account.

    This matter is considered closed. We will not be providing any further communication or correspondence regarding this case.
    .....

    They never answered any of my questions or acknowledged the information I provided.

    Wow, that is... really poor service. I'll have to remember to stop recommending VSYS if that's how they deal with things.

  • stevekelalstevekelal Member
    edited 12:27PM

    For transparency, I've redacted all personal information, including my name, account details, and the last digits of my VPS IP address.

    I'm sharing these screenshots because they provide context for my case and allow others to review the facts for themselves.

    Included evidence:

    The partially redacted IP shown in my client area belongs to the subnet listed by Spamhaus.

    Everything I've shared is backed by evidence that I can verify. The screenshots are taken directly from my own account, my assigned VPS, and my support tickets. I've redacted sensitive information only to protect my privacy, not to hide any facts.

    I'm posting this so the community can review the evidence and draw their own conclusions based on the available facts. If anyone has experienced something similar or has any insights, I'd genuinely appreciate your feedback.

    Note: All screenshots are hosted on ibb.co, which is the official image hosting domain of imgbb.com, in case anyone is unfamiliar with the links.

  • vsys_hostvsys_host Member, Patron Provider

    @stevekelal

    Your service has been suspended due to a Spamhaus listing associated with activity originating from your VPS in accordance with our Terms of Service.

    As Spamhaus listings negatively affect the stability and reputation of our network, we are unable to restore the service.

    Virtual Systems may suspend a service without prior notice where continued provision of the service may conflict with applicable law, regulatory obligations, or our internal policies.

  • @vsys_host said:
    @stevekelal

    Your service has been suspended due to a Spamhaus listing associated with activity originating from your VPS in accordance with our Terms of Service.

    As Spamhaus listings negatively affect the stability and reputation of our network, we are unable to restore the service.

    Virtual Systems may suspend a service without prior notice where continued provision of the service may conflict with applicable law, regulatory obligations, or our internal policies.

    You claim the activity originated from my VPS. Then please provide the evidence. One log is enough. One abuse report is enough. One timestamp is enough. One piece of technical evidence showing my VPS sent spam or performed any illegal activity. Until now, none has been provided.

  • zedzed Veteran

    @stevekelal said:

    @vsys_host said:
    @stevekelal

    Your service has been suspended due to a Spamhaus listing associated with activity originating from your VPS in accordance with our Terms of Service.

    As Spamhaus listings negatively affect the stability and reputation of our network, we are unable to restore the service.

    Virtual Systems may suspend a service without prior notice where continued provision of the service may conflict with applicable law, regulatory obligations, or our internal policies.

    You claim the activity originated from my VPS. Then please provide the evidence. One log is enough. One abuse report is enough. One timestamp is enough. One piece of technical evidence showing my VPS sent spam or performed any illegal activity. Until now, none has been provided.

    i guess they don't have to actually provide you anything but at least now all the rest of us can see how they handle customers and that'll count.

  • Well known scam

    Move on

    Thanked by 1stevekelal
  • @zed said:

    @stevekelal said:

    @vsys_host said:
    @stevekelal

    Your service has been suspended due to a Spamhaus listing associated with activity originating from your VPS in accordance with our Terms of Service.

    As Spamhaus listings negatively affect the stability and reputation of our network, we are unable to restore the service.

    Virtual Systems may suspend a service without prior notice where continued provision of the service may conflict with applicable law, regulatory obligations, or our internal policies.

    You claim the activity originated from my VPS. Then please provide the evidence. One log is enough. One abuse report is enough. One timestamp is enough. One piece of technical evidence showing my VPS sent spam or performed any illegal activity. Until now, none has been provided.

    i guess they don't have to actually provide you anything but at least now all the rest of us can see how they handle customers and that'll count.

    Exactly. If I had actually done something wrong, I would admit it. I'm very strict when it comes to abuse and security, and I have no interest in fighting over something I know I did.

    I've never sent spam in my life. In fact, this VPS wasn't even configured to send email. There was no SMTP service running, no mail server, and I hadn't even configured rDNS. I have no reason to send spam from a VPS like that...I'd be hurting myself...

    If they have evidence that my VPS actually sent spam or was involved in illegal activity, I'd genuinely like to see it. So far, none has been provided.

  • kuroitkuroit Member, Host Rep, Megathread Squad

    @stevekelal Let me guess: Annual plan with very good (cheap) pricing?

  • bustersgbustersg Veteran
    edited 1:46PM

    i roughly read OP tickets, OP really spend time to explain and patient to keep asking for assistance, dont think i saw that he was rude to support team at all despite closing door on him everytime. OP deserve a chance to investigate plus he was a good tenant for almost 2 years, in some way past behavior carries some weight too.

    to OP: time to find another provider and use your backups.

    Thanked by 1stevekelal
  • @kuroit said:
    @stevekelal Let me guess: Annual plan with very good (cheap) pricing?

    Jackpot!

    Thanked by 1kuroit
  • That's pretty shitty to just copy and paste the same shit over and over again. Especially if the client is being patient and cordial enough.
    Not willing to work with you on the case after 2 years (which I presume without issue) and handing out the same stale copypasta? Well that's just an more turds in the pot. 🫤

    Thanked by 1kuroit
  • kuroitkuroit Member, Host Rep, Megathread Squad

    @alincupunct said:

    @kuroit said:
    @stevekelal Let me guess: Annual plan with very good (cheap) pricing?

    Jackpot!

    I'm pretty sure thats the main reason! Cant do "price increase" as there will be major backlash, cant do "no more renewal" either. Keeping these up are struggle because of price changes everywhere.

    Easy solution: ToS violation

    Just thinking from providers point of view about all the annual deals been offered here on LET over the years.

  • @vsys_host

    I have a simple question.

    Spamhaus lists the entire 213.111.150.0/24 subnet under SBL699484.

    Do I own that entire /24 range? Of course not. I only had one VPS with one IP.

    So how was it determined that my VPS was the source? Were all the IPs in that subnet sending spam at the same time? Or was there something specific about my IP?

    I'm asking because this doesn't make sense to me.

    If the activity really originated from my VPS, then there should be at least one log, one timestamp, one abuse report, or any technical evidence proving it.

    That's all I'm asking for.

  • @CheepCluck said: cordial

    Oh I love cordial, apple for example is very refreshing.

Sign In or Register to comment.