Acceptable Use Policy

Version 2 · Last updated 6 October 2026

What changed: Each topic now lives in one place. Account security and the indemnity are covered by our Terms, and the warning steps that were in our Terms are now in section 12. VPS vCPUs and ports are described as shared, and we now say we aim to acknowledge abuse reports within one business day.

This Acceptable Use Policy ("AUP") governs your use of services provided by OzVPS (ABN 58 947 584 850), including our VPS hosting and our Enhance-powered Web Hosting. It exists to protect our network, our customers, our upstream providers and the wider internet community. Section 12 explains how we enforce it.

OzVPS determines whether conduct or content breaches this AUP at our sole and reasonable discretion. Where this AUP gives examples (using "including", "such as", or similar), those examples are illustrative and not exhaustive. If you are unsure whether a planned use is acceptable, ask us in writing before signing up.

1. Prohibited activities

You agree not to use OzVPS services, or to permit any other person to use them, for any of the following:

• Denial of Service (DoS) or Distributed Denial of Service (DDoS) attacks, including reflection / amplification participation
• Attempting to bypass, overwhelm or test rate limits or any other security control of OzVPS or our upstream providers
• Port scanning, vulnerability scanning, fuzzing or brute-force attacks against any third-party system without prior written authorisation from the system owner
• Penetration testing, security research or red-teaming against OzVPS infrastructure (network, control panels, billing systems) without our prior written authorisation
• Circumventing the security measures of any system, including credential stuffing, session hijacking, exploitation of disclosed or undisclosed vulnerabilities
• Any activity that materially degrades network performance, hypervisor performance or storage performance for other customers
• Account fraud, identity misrepresentation, providing false ABN/registration details, or chargeback fraud
• Sending unsolicited bulk email (spam), operating as an open relay, laundering mail through third-party SMTP services, or any practice contrary to the Spam Act 2003 (Cth)
• Hosting links, redirectors, "drop sites" or staging infrastructure for phishing, scam, malware or social-engineering campaigns
• Automated scraping, harvesting or crawling of third-party services in breach of their terms or applicable law
• Harassment, stalking, doxxing, intimidation or coordinated targeting of any individual or group
• Running services explicitly listed in the box above
• Selling, advertising, brokering or facilitating illegal goods or services, including illicit drugs and controlled substances, weapons, firearms, ammunition or explosives, counterfeit goods, forged or fraudulent documents and identification, or pirated software and licence keys
• Trading in stolen, leaked or unlawfully obtained data, including payment-card data, "fullz", carding services, or compromised account credentials
• Selling, brokering, publishing or otherwise distributing other people's personal information (including compiled mailing lists, scraped contact databases or bulk identity records) without the consent or other lawful basis required under the Privacy Act 1988 (Cth) and the Australian Privacy Principles
• Money laundering, terrorism financing, sanctions evasion, or facilitating any of these
• Dealing with, or directing services or content at, persons, entities or jurisdictions subject to Australian or applicable international sanctions, or supplying age-restricted goods or services (such as alcohol, tobacco, gambling or adult goods) without the age and identity verification required by law
• Operating an unlicensed gambling, lottery, wagering or "investment" scheme, including any such service targeting Australian residents without the licence required under Australian law
• Developing, selling or distributing malware, ransomware or exploits, or offering "hacking-as-a-service", "spam-as-a-service" or attack-for-hire in any form
• Circumventing, or making, selling, distributing or providing a service to circumvent, a technological protection measure (such as DRM, copy-control or access-control on software, games, films or other works) in breach of the Copyright Act 1968 (Cth)
• Any activity that is unlawful in Australia or in the jurisdiction where the service is delivered, or that is reasonably likely to expose OzVPS to legal, regulatory or reputational risk

2. Prohibited content

The following content is strictly prohibited on our network:

• Child sexual abuse material (CSAM) or any child-exploitation content. This is reported to the Australian Centre to Counter Child Exploitation (ACCCE) and other authorities
• Content that incites violence, terrorism or genocide, or that promotes a designated terrorist organisation
• Content that infringes copyright, trade mark, patent, design or other intellectual property rights you do not own or have a current licence to distribute
• Malware, command-and-control infrastructure, exploit kits, phishing kits, infostealers, RATs and remote-access trojans
• Material classified RC (Refused Classification) or X 18+ under the Australian Classification scheme
• Non-consensual intimate imagery, "deepfake" intimate imagery, or any image-based abuse covered by the Online Safety Act 2021 (Cth)
• Defamatory, knowingly false or grossly misleading material directed at an identifiable person or business
• Personal information (including health, financial or identity records) processed in breach of the Privacy Act 1988 (Cth) or comparable laws

3. Customer responsibility

You are solely responsible for everything that happens under your account and on any service you operate using OzVPS infrastructure, whether the activity is performed by you, your employees, your contractors, your customers, your end-users or by anyone who has obtained access to your services (whether authorised or not).

If you resell, host third-party customers or operate a multi-tenant application on OzVPS, you must enforce an acceptable-use standard with your own users that is at least as strict as this AUP, and you are responsible for promptly investigating and remedying abuse complaints relating to those users.

4. IP and network reputation

OzVPS allocates IP addresses to customers from address space we have a responsibility to keep clean. You agree not to engage in conduct that causes our IP space to be listed on public blocklists (e.g. Spamhaus, SORBS, abuseipdb), to be filtered by major email providers, or to be subject to upstream null-routing requests. If an allocated IP becomes listed as a result of your activity, you must cooperate with our delisting process and we may reclaim that IP and reissue you a new one at our discretion. What delisting costs, and who pays, is in clause 17 of our Terms of Service.

5. Resale and account sharing

Sub-letting, white-labelling or reselling OzVPS services to third parties is permitted only with our prior written consent. Account sharing is limited to your immediate organisation. You may not advertise an OzVPS service as your own without identifying OzVPS as the underlying provider where reasonably required.

6. Copyright complaints and takedown

OzVPS responds to credible copyright-infringement complaints under the Australian Copyright Act 1968 (Cth) and to comparable notices from international rights-holders where appropriate. Complaints must identify:

• The copyrighted work allegedly infringed
• The specific URL(s) or content on our network claimed to infringe
• Your contact details and authority to act for the rights-holder
• A statement, made in good faith, that the use is not authorised

Send complaints to abuse@ozvps.com.au. Repeat infringers will have their services terminated.

8. Resource use on VPS plans

Each VPS gets the vCPU, memory, disk and port speed of its plan. vCPUs and network ports are shared fairly between the servers on a host, so sustained heavy use that affects other customers (for example CPU steal or heavy disk I/O) may lead us to throttle your VPS, move it to a less crowded host, or ask you to upgrade.

9. Immediate termination

Certain violations result in immediate termination without warning, including:

• Child exploitation material, reported to law enforcement
• Outbound DDoS attacks, "booter / stresser" services or participation in attack-for-hire
• Operation of botnet command-and-control infrastructure
• Hosting of phishing kits or active phishing campaigns
• Knowingly hosting malware, infostealers or remote-access trojan infrastructure
• Repeat or wilful breach of this AUP after a prior warning
• Use of the service that places OzVPS or its upstream providers at material legal or regulatory risk

A Service terminated for breach is not refundable (clause 5 of our Terms of Service).

10. Reporting abuse

To report a violation of this AUP, contact abuse@ozvps.com.au. We investigate every report and aim to acknowledge it within one business day. Please include the affected IP address or domain, the nature of the abuse and any relevant timestamps (AEST preferred).

11. Cooperation with authorities

We cooperate with Australian and international law-enforcement agencies and regulators investigating unlawful activity on our network. Where the law requires it, or on a lawful direction, we may preserve, access or disclose customer data and content without notifying you first. How we handle the personal information involved is set out in section 3 of our Privacy Policy.

12. How we enforce this policy

Mistakes. Where a breach is the result of a genuine error, our normal approach is to tell you what happened, explain what needs to change, and give you a reasonable opportunity to put it right. Most problems are resolved at that point and go no further. We would rather help you fix something than lose you as a customer.

Repeat incidents. Repetition is treated differently. Where the same problem occurs again after we have raised it with you, or where you do not act on a warning within the time we give you, we may suspend the Service, terminate it, and decline to provide any service to you, or to any related account or person, in future. That refusal may be permanent.

Deliberate conduct. Nothing in this section requires us to give a warning or an opportunity to remedy where the conduct is deliberate, fraudulent, unlawful, or falls within section 9. In those cases we may terminate immediately and impose a permanent ban without prior notice.

Depending on what we find, and without prior notice where the situation calls for it, we may:

• Suspend or terminate any service that we reasonably believe is being used in breach of this AUP
• Null-route, filter or rate-limit traffic to or from a customer service
• Remove or quarantine specific content
• Reclaim and reissue IP addresses
• Decline to restore a terminated service
• Decline to provide future services to a customer who has breached this AUP

Action taken under this AUP does not entitle you to any refund, credit or other compensation.

13. Changes to this policy

Changes to this policy follow clause 25 of our Terms of Service.