Acceptable Use & Network Abuse Policy

NetWest services may be used for lawful business, Internet, hosting, computing, communications and network applications consistent with the customer’s service agreement and this policy.

Legitimate activities may include, depending upon the service purchased and any applicable approval requirements:

• Business Internet services
• Web hosting
• Application hosting
• Dedicated servers
• Virtual private servers
• Virtualization
• Cloud infrastructure
• Colocation
• Managed IPv4 infrastructure
• BGP routing
• Web applications
• APIs
• Business research
• Search and market research
• Web monitoring
• Data collection
• Advertising verification
• E-commerce applications
• Enterprise network applications
• Other legitimate computing and Internet services

The existence of automated traffic, virtualization, multiple IPv4 addresses or high-volume network activity does not by itself constitute abuse.

However, all activity must comply with applicable law, contractual requirements and this policy.

Customers may not use NetWest services directly or indirectly for activities including, but not limited to:

• Phishing
• Malware distribution
• Ransomware
• Botnets
• Command-and-control infrastructure
• Credential theft
• Credential stuffing
• Brute-force attacks
• Password attacks
• Unauthorized access to systems or accounts
• Exploitation of systems without authorization
• Unauthorized vulnerability scanning
• Malicious port scanning
• Distributed denial-of-service attacks
• Denial-of-service attacks
• DDoS-for-hire or booter services
• Fraud
• Payment fraud
• Identity theft
• Impersonation intended to facilitate fraud
• Distribution or operation of malicious software
• Hosting infrastructure primarily intended to facilitate unlawful activity
• Deliberate interference with another network, service or computer system
• Activities intended to conceal the source of prohibited conduct
• Activities prohibited by applicable federal, state or local law

NetWest reserves the right to investigate activity reasonably believed to threaten the security, integrity or reputation of its network or Internet number resources.

Customers may not use NetWest services to transmit unsolicited bulk email, spam, phishing email or other abusive electronic messaging.

Operating open mail relays is prohibited.

Customers operating legitimate mail servers must maintain appropriate security controls and respond promptly to abuse complaints.

For certain Managed IPv4, hosting, VPS or specialized network deployments, NetWest may restrict outbound SMTP or other mail-related ports.

Any customer requiring outbound SMTP capability where it is otherwise restricted must obtain authorization from NetWest.

NetWest may immediately restrict mail-related traffic when necessary to protect network or IPv4 reputation.

Unauthorized scanning, probing, exploitation or attacks against third-party systems are prohibited.

Customers may not use NetWest services for:

• Unauthorized port scanning
• Credential attacks
• Vulnerability exploitation without authorization
• DDoS activity
• Network flooding
• Reflection or amplification attacks
• Malicious automated traffic
• Attempts to compromise third-party networks or systems

Legitimate security testing performed against systems owned by the customer or where the customer has documented authorization is not prohibited, provided that such activity does not adversely affect the NetWest network or other customers.

NetWest may apply port filtering, rate limiting, traffic filtering or other technical controls when appropriate.

IPv4 resources provided through NetWest services remain under the ownership, registration or administrative control of NetWest or the applicable Internet number resource holder.

Assignment of IPv4 resources to a customer provides a limited contractual right to use those resources during the applicable service term.

Assignment does not transfer ownership of the IPv4 addresses to the customer.

Customers may not sell, transfer, assign, sublease or otherwise convey rights to NetWest IPv4 resources except where downstream use has been specifically authorized by NetWest.

Upon termination or expiration of the applicable service, all rights to use NetWest-provided IPv4 resources immediately cease.

NetWest may reclaim, renumber or replace IPv4 resources when reasonably required for technical, operational, security, regulatory or network-management reasons, subject to any applicable contractual commitments.

Unless specifically authorized in writing, IPv4 prefixes provided by NetWest will remain originated and routed through the NetWest network and applicable NetWest Autonomous System Number.

Customers may not announce or authorize the announcement of NetWest IPv4 resources through another ASN without prior written authorization.

Customers may not independently issue or modify:

• Letters of Authorization (LOAs)
• Route Origin Authorizations (ROAs)
• RPKI records
• IRR routing records
• BGP routing authorizations

for NetWest-controlled IPv4 resources without NetWest authorization.

NetWest retains authority over routing configuration associated with NetWest-controlled Internet number resources.

Reverse DNS and PTR records for NetWest-provided IPv4 resources remain under NetWest administrative control unless specifically delegated.

NetWest may provide or delegate reverse-DNS management where technically appropriate.

PTR records may not contain fraudulent, deceptive, abusive or misleading information.

NetWest may remove or modify reverse-DNS entries associated with abuse or policy violations.

NetWest operates a legitimate Internet Service Provider network.

However, NetWest does not control how independent third parties classify, categorize, geolocate, score or otherwise treat an IPv4 address or network.

NetWest therefore makes no guarantee regarding classification by:

• Search engines
• Streaming platforms
• Advertising platforms
• Security companies
• IP intelligence databases
• Geolocation providers
• Anti-fraud services
• Email reputation services
• Hosting or proxy detection services
• Social media platforms
• E-commerce platforms
• Other third-party systems

NetWest does not guarantee that any address will be categorized as “ISP,” “residential,” “business,” “hosting,” “datacenter” or any other particular classification by a third party.

NetWest also does not guarantee access to any particular website, platform, application or online service.

Third-party classification may change without notice and is outside NetWest’s control.

Customers must use NetWest-provided IPv4 resources in a manner that reasonably protects their reputation.

Activities that repeatedly result in material abuse complaints, security listings, blocklists or network reputation damage may constitute a violation of this policy.

NetWest may investigate listings or complaints involving organizations including recognized network security, anti-abuse and reputation providers.

A listing or complaint does not automatically establish a violation. NetWest may consider the nature of the activity, available evidence, severity, frequency and customer response.

However, NetWest may take immediate action where necessary to protect the network or prevent significant reputational harm.

Customers may be required to remediate the affected service, user, server, application or IP address.

NetWest may authorize customers to operate hosting, VPS, virtualization, dedicated-server or similar services using NetWest network resources.

Downstream customer use must be disclosed to and authorized by NetWest where required by the applicable service agreement.

A NetWest customer providing services to downstream users remains fully responsible to NetWest for activity associated with the network and IPv4 resources assigned to that customer.

A customer may not avoid responsibility for abuse by asserting that prohibited activity was performed by its own customer, VPS user, subscriber, contractor, reseller or other third party.

Hosting and VPS providers using NetWest resources must:

• Maintain an enforceable Acceptable Use Policy for their customers.
• Require downstream customers to comply with rules at least as protective of the NetWest network as this policy.
• Maintain accurate customer account and contact information appropriate to the service provided and applicable law.
• Maintain sufficient records to reasonably determine which downstream customer controlled or used an assigned IPv4 address at a particular time.
• Maintain a functioning abuse contact.
• Investigate legitimate abuse complaints promptly.
• Suspend or terminate downstream customers responsible for serious or repeated abuse when appropriate.
• Cooperate with NetWest investigations concerning activity originating from assigned network resources.

Unless specifically authorized by NetWest, downstream customers may not further resell, sublicense or redistribute NetWest-provided IPv4 resources to additional hosting providers or resellers.

The default permitted structure, when downstream hosting is authorized, is:

NetWest → Approved Hosting/VPS Provider → End Customer

Additional levels of redistribution require written NetWest authorization.

Operation of proxy, VPN, relay, web-research, automated data-collection or similar applications is not automatically prohibited.

However, such applications must comply with this policy and may be subject to additional review or technical controls.

NetWest does not provide unrestricted “bulletproof” hosting or infrastructure intended to facilitate anonymous abusive activity.

Open proxies, publicly accessible relays or services that permit uncontrolled anonymous third parties to generate traffic through NetWest resources may be restricted or prohibited unless specifically approved.

NetWest may require additional filtering, logging, customer identification, rate limiting or abuse controls for higher-risk applications.

The NetWest customer named on the service agreement is responsible for all use of the services provided to that customer, including use by:

• Employees
• Contractors
• Applications
• Customers
• VPS users
• Hosting customers
• Authorized users
• Resellers where specifically permitted
• Other third parties obtaining access through the customer

Customers are responsible for securing their systems and credentials.

Compromise of a customer’s server, account or application does not eliminate the customer’s responsibility to respond to abuse originating from that resource.

Customers operating hosting, VPS, managed IPv4 or similar network infrastructure must maintain current administrative and abuse contact information with NetWest.

NetWest may require an emergency contact capable of responding to serious network or security incidents.

Customers must notify NetWest when designated abuse or technical contacts change.

NetWest evaluates abuse based on severity and available evidence.

Routine Abuse:

Examples may include isolated complaints, non-critical policy issues or activity that does not present an immediate security threat. Customers may be asked to investigate and respond within 24 hours or another reasonable period specified by NetWest.

Urgent Abuse:

Examples may include repeated attack traffic, credential attacks, significant scanning, phishing, active compromise, serious spam activity or events presenting material reputation risk. NetWest may require action within a shorter period depending upon severity.

Emergency Abuse:

Examples may include active DDoS attacks, malware command-and-control, active phishing infrastructure, attacks threatening NetWest infrastructure, significant ongoing security incidents or activity creating immediate risk to NetWest or third parties. NetWest may take immediate protective action without waiting for customer authorization.

When reasonably necessary to protect customers, infrastructure, upstream providers, Internet number resources or network reputation, NetWest may:

• Filter traffic
• Block ports
• Rate limit traffic
• Null-route an individual IPv4 address
• Null-route a subnet
• Disable a network interface
• Temporarily suspend a server or service
• Require removal of a downstream user
• Require remediation
• Suspend an affected service
• Terminate service in cases of serious or repeated violations

Whenever reasonably possible, NetWest will attempt to limit intervention to the affected resource rather than unrelated customer services.

However, immediate broader action may be taken where necessary to stop an active threat.

NetWest is not required to wait for customer authorization before taking emergency action reasonably necessary to protect the NetWest network, other customers, upstream providers, Internet number resources or network reputation.

Repeated abuse involving multiple addresses, repeated failure to respond to complaints, continued reappearance of prohibited activity or failure to control downstream users may be considered systemic abuse.

NetWest may suspend expansion of IPv4 allocations, reduce services, require additional safeguards, require removal of downstream users or terminate services where systemic abuse continues.

NetWest recognizes that abuse reporting systems can themselves be misused.

Receipt of an allegation does not automatically establish that a customer violated this policy.

NetWest may request logs, timestamps, headers or other supporting evidence and may decline to take action on complaints that are clearly unsupported, fraudulent, duplicative or lacking sufficient technical information.

NetWest will respond to valid legal process as required by applicable law.

Nothing in this policy requires NetWest to disclose customer information to a private complainant except where authorized by the customer or required by law.

Serious, repeated or intentional violations of this policy may result in suspension or termination.

NetWest may terminate services immediately where continued operation creates an unacceptable security, legal, operational or network-reputation risk.

Termination does not convey any continuing right to use NetWest-provided IPv4 resources.

NetWest takes reasonable measures to protect its network and Internet number resources.

However, Internet reputation is determined by numerous independent organizations and systems.

NetWest does not warrant or guarantee that an IPv4 address will remain free from all blocklists, reputation flags, CAPTCHA systems, access restrictions or classification changes.

NetWest will investigate legitimate reputation concerns associated with NetWest-controlled resources and may take appropriate corrective action.

NetWest may update this policy periodically to address changes in technology, security threats, Internet standards, legal requirements or network operations.

The current version will be published on the NetWest website.

Material changes affecting existing contracted services will be handled in accordance with the applicable service agreement.

Questions regarding this policy may be directed to NetWest Online, Inc.

General Website: netwest.com

Abuse Reports: abuse@netwest.com