1Scope
This policy covers every virtual machine, IP address and service HiMem.si provides. By using a VM you agree to it. You are responsible for everything that happens on your VM, including activity by your own users and by anyone who gets in because the VM was left insecure.
2Illegal content and activity
- Nothing illegal under United States federal law or the law of Ohio.
- Child sexual abuse material is never tolerated. Accounts are terminated immediately and reported to NCMEC and law enforcement.
- No hosting or distributing material that infringes copyright or trademark. We forward copyright notices to you and expect a response within 48 hours.
3Email
- No unsolicited bulk or commercial email, from our network or advertising anything hosted on it.
- Outbound port 25 is closed by default. We open it on request for accounts in good standing that run a real mail server with matching reverse DNS, SPF and DKIM.
- If your traffic gets one of our addresses listed on a major blocklist, we may close port 25 or suspend the VM until it is resolved.
4Network abuse
- No scanning of networks or hosts you don't own or have written permission to test.
- No denial-of-service attacks, of any size, against anyone.
- No brute-force login attempts, credential stuffing or exploit attempts against other systems.
- No forged packet headers or spoofed source addresses.
- No botnet command and control.
- No open mail relays, open DNS resolvers or open proxies. Services that can be used for traffic amplification, such as memcached, NTP, SSDP and SNMP, must not answer the public internet.
Testing your own systems is fine. If you plan a load test or security test against your own VM from outside our network, email us first so we don't treat it as an attack.
5Malware and fraud
- No phishing pages or sites that impersonate another organization.
- No hosting or distributing malware, ransomware or exploit kits.
- No carding, payment fraud or identity theft.
6Resource use
- Your memory is reserved for you. Use all of it.
- You may run your vCPUs at full load.
- No cryptocurrency mining or proof-of-space farming. This hardware is poorly suited to it and the power draw affects everyone in the building.
- Your port is 1 Gbps. Traffic that harms the network for other customers may be rate-limited while we work it out with you.
7Tor, VPNs and proxies
- Tor relays and bridges are allowed. Tor exit nodes are not.
- Personal VPNs and proxies for your own use are allowed.
- If you resell VPN or proxy access, you must answer abuse reports about your users within 24 hours.
8Keeping your VM secure
Keep your operating system and software patched, and use strong passwords or SSH keys. If your VM is compromised and is attacking others, we will cut it off from the network until it is cleaned up. We'll tell you when we do, and give you console access to fix it.
9Enforcement
We start with the lightest step that solves the problem:
- A notice by email, with a deadline to fix the issue.
- Blocking the offending traffic or suspending the VM.
- Terminating the account.
For serious violations, such as child abuse material, active attacks or fraud, we act immediately and without notice. Accounts terminated for violating this policy are not refunded. We respond to valid legal process from law enforcement.
10Reporting abuse
Email abuse@himem.si. Include the IP address involved, the date and time with time zone, and logs or headers that show what happened. We aim to respond within one business day.
11Changes
We may update this policy. The new version is posted here with a new effective date. For changes that limit what you can do, we email customers at least 14 days before they take effect.