According to your own ticket system, the first abuse complaint came in "04/25/14 at 16:10" and the 50 complaints (I did not count) came in rapid-fire succession, several per minute. Do you want a screenshot? I did not see the auto-generated emails you sent till after the client's server was shut down.
I became aware of the problem Fri, Apr 25, 2014 at 12:12 PM thanks to Hyperspin, which is when you shut down the server. Not sure of the timezone difference but where are you getting 4 days? Did you even read the tickets?
You can see my tweet on the 25th here:
"@digitalocean turns out, nothing to do w/ DNS. Account locked due to abuse." 12:43 PM - 25 Apr 2014
https://twitter.com/php_austin/status/459749518464937984
I checked your status website which said you were having DNS issues. This client recently dropped your DNS servers due to errors so that wasn't the problem.
Within a few minutes I found out the account was locked due to some images automatically pulled from "open graph" and Twitter meta tags. (In other words, images that were intended to be shared, but whatever that's another tangent.)
Fri, Apr 25, 2014 at 12:44 PM told the client you allowed me to power on the server to delete the images. Then I had to upgrade MySQL because you didn't shut down the server properly.
Fri, Apr 25, 2014 at 1:47 PM spoke with the client and he wants to delete the entire category of images so this would never happen again. All the images were in the same directory "rm -rf" was all I needed. So within about one hour of discovering there was a problem it was taken care of.
Posted on 04/25/14 at 18:44 (support ticket time) "Thank you for responding to this manner quickly. Please let us know if there is anything else we can do to help."
So everything was fine, until (To be continued...)