Acceptable Use Policy
You may use the server for any lawful purpose: RDP and software running 24/7, bots, websites, scrapers, development and testing, a VPN for yourself and people close to you. Below is what is prohibited and what happens on violation.
1Prohibited
- Spam of any kind (email, messengers, forms, comments). Outbound port 25/tcp is closed on all servers.
- DDoS attacks, stress tests of third-party resources without the owner's written consent, "stressers" and botnets.
- Scanning third-party networks and ports, password brute-forcing, exploiting vulnerabilities of other systems.
- Phishing, fraud, imitation of other people's websites and brands.
- Distributing malware, running botnet command-and-control (C2), mining pools for infected third-party devices.
- Child sexual abuse material (CSAM) — immediate deletion, account ban without refund, report to the relevant organisations.
- Disguising traffic as other people's domains and services: using a third-party domain in SNI, dest/target or a certificate (including in Reality and similar). Use your own domain (SelfSteal). Third-party SNI is the main reason whole subnets get blocked, which hurts every customer.
- Open proxies, open DNS resolvers and other services anyone can abuse for attacks.
- Tor exit nodes. Middle relays and bridges are allowed.
- IP spoofing and using addresses not assigned to your server.
- Copyright infringement when the rights holder sends a substantiated complaint.
- Any activity that is illegal in the country where the server is located.
2Resources and traffic
- Port speed and traffic allowance are stated in the plan. If the port is shared, constant full utilisation that disturbs neighbours may be temporarily rate-limited with notice.
- Cryptocurrency mining is prohibited on plans with shared cores: it takes CPU from neighbours.
- Constant 100% load on all cores that disturbs neighbours is a reason for support to contact you and offer a suitable plan.
3Complaints (abuse)
- Complaints are accepted at abuse@rubyhost.org and reviewed within 24 hours.
- When a third party complains, the Provider notifies the Customer in the bot. The Customer has 24 hours to respond and fix the cause.
- If there is no response or the violation continues, the server is powered off until resolved.
- The server is powered off immediately and without notice for: outbound DDoS, mass mailing, phishing, CSAM, malware distribution, or if the server is compromised and attacking others.
- Repeated or serious violations — termination and account ban. The paid term is not refunded in this case.
4New accounts
To prevent abuse, new accounts may have limits on the number of servers, IP changes and rental term. Limits are lifted over time or on request to support (@rubysupport, support@rubyhost.org).
5Responsibility
The Customer is responsible for everything that happens on their server, including actions of people they gave access to and consequences of a break-in due to a weak password. Ready-made install scripts (3x-ui, Amnezia, etc.) are only a tool; the Customer is responsible for how they are used.