1. Scope
This Acceptable Use Policy ("AUP") forms part of the Terms of Service. It applies to every account and server provided by Sylox Tech (OPC) Private Limited, and to everyone who uses them, including your customers, employees and contractors. Our upstream data-centre providers apply their own network and abuse policies, which we enforce on their behalf.
2. Prohibited Content
You must not host, store, transmit or link to:
- child sexual abuse material, in any form;
- content that infringes copyright, trademark or other intellectual property rights, including pirated software and media;
- phishing pages, fraudulent shops, fake banking or payment pages, or any content designed to deceive people into giving up credentials or money;
- malware, ransomware, exploit kits, botnet command-and-control or credential-stealing tools used against systems you are not authorised to test;
- content that promotes terrorism or violent extremism, incites violence, or is defamatory, harassing or threatening;
- stolen data, including leaked personal data, payment card data or credentials; or
- any content or service that is illegal in India or in the country where the server is located.
3. Email and Spam
- You must not send unsolicited bulk or commercial email, or email to purchased, rented or scraped lists.
- Bulk email must go only to recipients who have opted in, and must include a working unsubscribe link.
- You must not operate open mail relays or open proxies, or forge email headers.
- You must not advertise a website hosted with us through spam sent from elsewhere.
4. Network and Security Abuse
You must not use a server to:
- launch or take part in denial-of-service attacks, or operate "booter" or "stresser" services;
- scan ports, probe for vulnerabilities, or attempt to access any system without the owner's written permission;
- spoof IP addresses or use IP addresses not assigned to your server;
- run open DNS resolvers, open NTP, SSDP, memcached or similar services that can be used for amplification attacks;
- brute-force logins, crack passwords, or distribute tools for doing so against third parties; or
- interfere with our network, our upstream providers' networks, or other customers' services.
Security testing of systems you own, or have written permission to test, is allowed provided it does not affect third parties.
5. Resource and Service Use
- Cryptocurrency mining requires our prior written approval.
- Public proxy, VPN or Tor exit services require our prior written approval, and you remain responsible for all traffic that leaves your server.
- You must not resell or sublet a server for any activity prohibited by this AUP.
- Bandwidth use must stay within the limits of the configuration you ordered.
6. Compromised Servers
If your server is compromised and used for abuse, you remain responsible for it. We may isolate it from the network until you have secured and cleaned it, normally by reinstalling the operating system. Keep your software patched and your credentials strong to avoid this.
7. Enforcement
When we become aware of a possible breach, from an abuse report, an upstream provider, a law-enforcement request or our own monitoring, we may take any of the following actions:
- notify you by email and require the abuse to stop within a stated time;
- suspend the server or account immediately and without notice, where the activity is serious, ongoing or affects third parties;
- null-route or filter IP addresses;
- terminate the server or account permanently; and
- preserve and disclose information to law-enforcement authorities where required by law.
No refund or service credit is due for any suspension or termination under this AUP. Costs we incur because of your breach, including fees charged to us by upstream providers, may be invoiced to you. Child sexual abuse material is reported to the competent authorities, and the account is terminated permanently.
8. Reporting Abuse
To report abuse coming from a server on our network, email [email protected] with the IP address, the date and time (with time zone), and evidence such as log extracts or email headers. Each report is reviewed, and we act on confirmed abuse.