Abuse Reporting Policy
01.Purpose and Abuse Contact
This policy outlines how network operators, affected third parties, infrastructure providers, and authorities can report abusive activity originating from NADI VPN relay IP addresses, what evidence is required to act, and what technical measures our architecture permits.
All reports must be submitted directly to our designated abuse desk at [email protected].
02.Who Can Submit a Report
Anyone affected by suspected malicious activity may submit a report. This includes system administrators, internet service providers (ISPs), data center transit hosts, intellectual property rights holders, and public authorities. You do not need to be a customer of NADI VPN to submit an abuse notice.
03.Required Information in Reports
To enable technical review, an abuse report should provide:
- The exact date, time, and time zone (preferably UTC) of the incident.
- The observed NADI VPN relay IP address and destination port.
- A concise technical description of the abusive behavior (e.g., brute-force logs, port scans, or DDoS attack telemetry).
- Relevant supporting technical evidence (such as firewall logs, packet captures, email headers, or server syslog extracts).
- Your verified contact details for follow-up verification.
04.Intake and Handling Procedures
Upon receipt of an abuse notification, NADI VPN takes the following steps:
- Acknowledge receipt to the reporting entity when contact details are provided.
- Log the administrative case details (timestamp, reported relay IP, and action taken) in an internal abuse tracking log that contains no user traffic content.
- Assess the technical credibility and proportionality of the evidence submitted.
- Execute proportionate technical remediation or host communication.
05.Technical Capabilities and Inherent Limitations
What We Can Do: Where corroborated technical evidence identifies a specific breach of our Acceptable Use Policy, we can issue warnings, block specific WireGuard public keys, terminate active passes, or notify our upstream data center hosts.
06.Urgent Child Safety (CSAM) Escalation
Reports involving child sexual abuse material are treated as emergency criminal incidents. They are immediately escalated for server blacklisting, infrastructure provider notification, and direct coordination with statutory law enforcement authorities under our Law Enforcement Policy. Do not attach illegal media files to abuse reports; technical descriptors and URLs should be provided instead.