Acceptable Use Policy

Draft. This text was prepared as a starting point and has not been reviewed by a lawyer. Croco IT will replace it with the reviewed version; the version number on this page changes when that happens.

This policy says what you may not do with a Croco IT server. It exists to keep the network usable for every customer and to keep our address space off blocklists. It is part of the Terms of Service.

Not allowed

• Unsolicited mail. Sending spam, running open relays, or sending bulk mail without verifiable opt-in. Outbound port 25 is closed by default on every server; it is opened on request for customers who run a mail server with correct SPF, DKIM and reverse DNS.
• Attacks and scanning. Denial-of-service attacks, port scanning or vulnerability scanning of systems you do not own, brute-forcing logins, or hosting command-and-control infrastructure.
• Malware and fraud. Hosting or distributing malware, phishing pages, fake login pages, or anything designed to steal credentials or money.
• Illegal content. Content that is illegal in Egypt or in the country it is served to, including material that infringes copyright or trademarks when the owner has complained.
• Cryptocurrency mining and other sustained 100% CPU workloads on shared plans; they take resources from neighbours.
• IP and network abuse. Spoofing addresses, using addresses not assigned to you, running public open resolvers or proxies that are abused, or selling raw server resources on to others in a way that hides who is responsible for them.
• Harm to the platform. Attempting to access other customers' servers, the control panel's internals or the host nodes.

Fair use

Resources are dedicated per plan where the plan says so. Traffic allowances are per calendar month; when a plan has a limit, you are told by email at 80% and at 100%. Sustained use that degrades the service for others may be rate-limited after we contact you.

Reports and what happens

Anyone can report abuse through the abuse form. We look at every report. Depending on severity we will: ask you to fix it (usually within 24 hours), suspend the server until it is fixed, or terminate the service for serious or repeated breaches. Where the law requires, we cooperate with the authorities. Fees for a period in which a server was suspended for abuse are not refunded.