Abuse Reports
Where to send abuse reports about a Neckrez server, and what happens after one reaches us. This page supplements our Acceptable Use Policy.
How reports reach us
Send abuse reports to abuse@neckrez.tech. Include the IP address, a timestamp with the time zone (UTC preferred), and the raw evidence — log lines, headers or a link. That is enough for us to tie the report to a single server and act on it; anything vaguer takes a round-trip and costs everyone a day.
Reports can also reach us forwarded by the underlying cloud provider — spam complaints, scanning detections, copyright notices, attack reports. Whichever way a report arrives, we tie it to a specific server by IP address and timestamp.
What we do with a report
We investigate each report and judge how serious it is. Critical abuse — active attacks, malware command-and-control, phishing pages — can lead to immediate suspension of the server, because every minute it stays online hurts other customers and the reputation of the shared IP space.
Everything else — a copyright notice, an open resolver flagged by a scanner, a single spam complaint — starts with a notification, not a takedown. Depending on the case we may:
- ask you to fix the problem or explain it;
- throttle or suspend the server;
- terminate the server or the account, and remove content;
- preserve or disclose information where the law or a provider’s policy requires it.
Non-critical reports: 24 hours to act
For non-critical reports you receive an email with the complaint details and a 24-hour deadline to remove the reported content or reply with your side. Fix it in time and the case is closed. If the deadline passes with no response and no action, the server may be suspended or deleted. Before a server is deleted we take a full snapshot of its disk and keep it for 7 days.
Critical abuse is acted on without notice, and no refunds are issued for terminations caused by violations of the policy.
If your server was reported
Reply to the notice, or write to support@neckrez.tech, with your side: logs, context, evidence that the report is mistaken. False positives happen — scanners flag legitimate Tor relays, VPN endpoints and game servers — and we review what you send.
Your backup: 7 days, one click to a new server
The snapshot is a complete copy of the deleted server’s disk. For 7 days after deletion you can restore it onto a new server in one click from your dashboard (Backups): same plan, same location, with all files, configs and software exactly as they were. Restoring costs nothing beyond the new server’s normal hourly price. After 7 days the snapshot is permanently deleted.
One honest caveat: if the restored server resumes the same abusive behaviour, the next report skips the warnings and goes straight to account review.
Sanctions and restricted jurisdictions
We do not accept payments from Cuba, Iran, North Korea, Syria, Russia, Belarus or the occupied regions of Ukraine (Crimea, Donetsk, Luhansk), and the service may not be used from or on behalf of those jurisdictions, or by anyone subject to sanctions.
If we find that an account was funded or used in breach of this section, we suspend it and stop the servers.
What leads to termination
Spam infrastructure, phishing, malware distribution or command-and-control, botnets, DDoS attacks and child sexual abuse material lead to termination, not a warning. CSAM is reported to the authorities immediately. We are privacy-friendly, not abuse-friendly: this line keeps the platform’s IP space clean for everyone else.
How to avoid reports
Most reports against honest users come from misconfiguration: open DNS resolvers, open SMTP relays, unsecured proxies that get found and exploited. Close what you do not use, keep software updated and rate-limit anything public-facing. Outbound SMTP may be restricted by default to protect IP reputation; see the FAQ.