Report abuse

How to report abuse coming from the HourlyVPS network, what evidence to send and what happens next.

Last updated

Effective date: October 2, 2026 · Version 1.0

In plain English

  • Email [email protected]: one incident per email, in plain text, with the IP address or URL, the time in UTC and your evidence.
  • You receive an acknowledgement with a reference number.
  • We review the report, ask our customer to act, and step in ourselves when harm is serious or ongoing.
  • We tell you what we decided. Our customer receives the reasons and a way to contest the decision.
  • Reporting child sexual abuse material? Never send the material itself. Send the URL or IP address, and also report it to NCMEC or your national hotline.

1. What to report here

Use this page to report activity coming from IP addresses or servers on the HourlyVPS network: spam, phishing, malware, attacks and scanning, copyright infringement, illegal content or any other breach of our Acceptable Use Policy. If you are not sure an address belongs to us, send the report anyway; we will tell you if it does not.

Other channels:

  • Are you our customer, and is your own server under attack or not working? Open a support ticket in the Portal.
  • Found a security vulnerability in our website, Portal or platform? See our Security page or write to [email protected].
  • Privacy request about your own data? Write to [email protected].
  • Law-enforcement or government request? See section 9.

2. How to report

  • Email [email protected].
  • Send one incident, or one source IP address, per email. Several events from the same address can go in one report.
  • Use plain text and paste logs into the body of the email. Attach text or log files only; do not attach executables. For malware, send the URL and the SHA-256 hash, or a password-protected archive with the password in the email.
  • Write in English if you can.
  • Machine-readable reports in ARF or X-ARF format are welcome.

3. What to include

We need the following to act on any report:

  • the IP address or URL on our network;
  • the date and time of each event, with the time zone (UTC preferred);
  • what happened and why you believe it is abusive or illegal. For illegal content, explain which law it breaks and why;
  • evidence, such as log lines, full email headers or screenshots;
  • your name and email address, so we can confirm receipt and tell you our decision. Reports of child sexual abuse material can be sent without your name;
  • a statement that you believe in good faith that the information in your report is accurate and complete.
Type of reportPlease also include
SpamThe complete message with all headers, not only a forwarded body, and if you know it, why the recipient never opted in
Phishing or fraud siteThe full URL, a screenshot and the brand or organization being impersonated
Malware or command-and-controlThe URL or IP address and port, the SHA-256 hash, and a sandbox report link if you have one
Attacks, scanning or brute forceLog lines with source and destination IP, destination port, protocol and time in UTC, and the volume or rate for floods
CopyrightEverything listed in section 7
Other illegal contentThe exact URL or location, the law concerned, why the content breaks it, and your connection to the matter if relevant, for example as the rights holder or the person affected

4. Report template

Copy this into your email and fill it in:

To: [email protected]
Subject: [type of abuse] from [IP address or URL]

IP address or URL on your network:
First and last time seen (UTC):
Type: spam | phishing | malware | attack or scan | copyright | illegal content | other
What happened:
Why it is abusive or illegal (law or rule, if known):
Evidence (logs, full headers, URLs, SHA-256 hashes), pasted below:

Your name:
Organization (optional):
Email address for updates:
I believe in good faith that the information in this report is accurate and complete.

5. What happens after you report

  1. Acknowledgement. You receive a confirmation with a reference number. Keep the number in the subject line when you write again.
  2. Review. A member of our team checks that the report concerns our network and sets its priority (section 6). If information is missing, we ask you for it.
  3. Customer notice. For most reports, we send the details to our customer and require action within a deadline. We remove your personal details unless you agree or the law requires otherwise. Copyright notices are usually forwarded in full, because the customer needs them to respond.
  4. Action. If the customer does not resolve the problem in time, or if the harm is serious or ongoing, we act ourselves: we block a port or IP address, suspend the server or terminate the service, as described in the Acceptable Use Policy.
  5. Decision notice. We email you our decision: the action we took, that we took no action and briefly why, or that the address is not on our network.
  6. Statement of reasons. The customer receives the facts we relied on, the rule concerned, the scope and duration of any measure and how to contest it.
  7. Reconsideration. You or the customer can ask us to reconsider by replying to the ticket with new information. If the decision was wrong, we change it.

6. Response targets

These are targets, not guarantees. They count from the time your report reaches our abuse mailbox. Business days are Monday to Friday, excluding US federal public holidays.

Priority and examplesFirst reviewAction or decision
Urgent: child sexual abuse material; a threat to someone’s life or safety; active phishing or malware distribution; command-and-control servers; ongoing attacks from our networkWithin 4 hours, every dayWithin 24 hours
High: spam runs; scanning and brute force; compromised servers; abused open relays or resolversWithin 1 business dayWithin 2 business days
Standard: copyright notices; other illegal-content notices that need legal assessment; other breaches of our Acceptable Use PolicyWithin 2 business daysWithin 5 business days, or we tell you if a legal assessment takes longer

7. Copyright notices (DMCA)

White Label Services, LLC responds to notices of claimed copyright infringement under the US Digital Millennium Copyright Act (17 U.S.C. § 512). Send notices to:

Copyright Agent, White Label Services, LLC, 1308 Coffeen Ave, Sheridan, WY 82801, USA. Email: [email protected], with “DMCA notice” in the subject line.

Your notice must include:

  1. the physical or electronic signature of a person authorized to act for the copyright owner;
  2. identification of the copyrighted work you say is infringed;
  3. identification of the infringing material and enough information for us to find it, such as the URL and IP address;
  4. your contact information: postal address, telephone number and email address;
  5. a statement that you believe in good faith that the use is not authorized by the copyright owner, its agent or the law;
  6. a statement that the information in the notice is accurate and, under penalty of perjury, that you are authorized to act for the copyright owner.

What we do. We forward a complete notice to our customer and require them to remove the material or send a counter-notice. Because we provide whole servers, we usually cannot remove a single file ourselves; if the customer does not act, we disable access at the server or IP-address level.

Counter-notices. A customer who believes the material was removed by mistake or misidentification can send us a counter-notice containing:

  1. their physical or electronic signature;
  2. identification of the material that was removed or disabled, and where it appeared before;
  3. a statement under penalty of perjury that they believe in good faith that the material was removed or disabled as a result of mistake or misidentification;
  4. their name, address and telephone number, and a statement that they consent to the jurisdiction of the federal district court for the judicial district of their address (or, if their address is outside the United States, of any judicial district in which we may be found) and will accept service of process from the person who sent the notice or that person’s agent.

We send the counter-notice to the person who sent the original notice. Unless that person tells us within 10 business days that they have filed a court action, we may restore the material 10 to 14 business days after we received the counter-notice.

Anyone who knowingly and materially misrepresents that material is infringing, or that it was removed by mistake, may be liable for damages under 17 U.S.C. § 512(f). In appropriate circumstances, we terminate the accounts of repeat infringers. Copyright complaints under other countries’ laws follow the same general process.

8. Child sexual abuse material

  • Never send us images or videos, not even as evidence. Send only the URL or IP address and the time you saw the material.
  • Please also report it to the NCMEC CyberTipline at report.cybertip.org or, outside the United States, to a national hotline listed by INHOPE.
  • We handle these reports with the highest priority, disable access, preserve data as the law requires and report to NCMEC as US law requires. You do not have to give your name.

9. Law-enforcement and government requests

Authorities can send official requests to [email protected] with “Law enforcement request” in the subject line. If there is an imminent risk of death or serious injury, say so in the subject line and we will treat it as urgent. Our Transparency page explains which legal process we require and when we notify customers. Our Privacy Policy describes how we handle personal data.

10. What we can and cannot do

  • We can restrict, suspend or terminate services on our own network, forward reports to our customers and preserve data when the law requires it.
  • We cannot remove content hosted on other networks or edit a customer’s website.
  • We do not give out our customers’ identity or contact details without valid legal process or the customer’s consent.
  • We cannot act on a report that lacks the information listed in section 3.

11. Misuse of the reporting process

If someone often sends reports that are clearly unfounded, we may warn them and then process their reports with lower priority or stop processing them for a reasonable period. Knowingly false reports may make the sender liable.

12. Your personal data as a reporter

We use the details in your report to handle it and to keep a record of our decision, as described in our Privacy Policy. We keep abuse reports for 3 years after the case is closed.