Kiwi Farms ISP and Service Provider Tier List

Post #1 • c0mmando Created: 2025-03-19 00:29 Updated: 2025-03-19 00:29

shamelessly copied from:

https://kiwifarms.st/threads/nulls-tier-list-for-internet-services.129513/#post-12948741
https://kiwifarmsaaf4t2h7gc3dfc5ojhmqruw2nit3uejrpiagrxeuxiyxcyd.onion/threads/nulls-tier-list-for-internet-services.129513/#post-12948741

The Kiwi Farms is a high-risk service due to its enormous complaint volume, abysmal reputation, and the unwanted media attention it brings on its hosts and associated services. Even though we are 100% US legal, it is very difficult to stay online. In the last ten years as admin of this website, I have navigated an increasingly small pool of Internet service providers. I’ve decided to share some of my experiences with different companies. My intention is mostly to drive positive attention to the people and companies who deserve trust.

This is a tier list organized by how I feel their service handled complaint volume professionally. In general:

S : Services we still use
A : Great companies that went above and beyond
B : Good companies with some service limitations out of their control
C : Professional companies that may offer good services with restrictive AUPs
D : Unreliable services that at least tried to be professional
F : Unprofessional, emotional conduct indicating a provider that cannot be trusted
X : Companies which are openly hostile or malicious—avoid by any means necessary

ISPs

S-Tier

Exatel
Exatel is a Polish ISP owned directly by the government of the Republic of Poland. They have never caused problems.
Orange
Orange is a large European ISP with which we have had no conflicts.
Telia (Arelion)
Telia is a large Nordic ISP that has never interfered with Kiwi Farms. In fact, when Terrahost’s upstreams were threatened into blocking our announcement one-by-one, Telia was the last ISP standing. There was a period where only Finnish people were able to natively route to the forum (the horror!).
Liberty Global
Liberty Global is a Dutch ISP with which we have had no conflicts. An anomaly where a company with “Liberty” in its name isn’t just using it for marketing.

A-Tier

NTT Global / North America
NTT Global / North America is the only Tier 1 ISP (directly or indirectly) we have used which has not interfered with the right of a US legal website to have Internet access. Supposedly, NTT APAC does block my subnets.

C-Tier

GTT
GTT, as our upstream’s upstream, blocked announcements and blackholed out our network. Only after some negotiations did GTT lift the blackhole. For some reason, they continue to provide announcement at a different PoP. This strange behavior makes me believe there is a North America/EU rift in the company, where the Europeans are more censorious than the Americans.
GTT (North America) appears to be a competent and hands-off ISP.

D-Tier

Hurricane Electric
Hurricane Electric, one of the largest ISPs in the world, blocked 1776 Solution’s public IPv6 from routing through their network to their customer’s customer’s customer (Liberty Lake Datacenter, CrunchBits, Incognet). This is unbelievable and a serious blow to the health of the Internet. The move triggered criticism from the EFF and is probably illegal in Washington, where the censorship took place.
Instead of simply undoing their mistake, Hurricane Electric continues to block any direct announcements to my ASN’s subnets. They have opted to fight the Attorney General’s Office in Washington, and I believe they have infringed my rights.
However, Hurricane has never blocked the Kiwi Farms on provider subnets; they just refuse to announce my subnets. As long as your own company’s reputation is strong enough, they don’t seem to censor your customers on your own IP space.

F-Tier

iFog
iFog is a Swiss datacenter provider with locations in Switzerland, Germany, Netherlands, and Spain. They are easily persuaded to pressure downstream providers relying on them into acting as a direct instrument of censorship.
Avoid.
Lumen / CenturyLink
Lumen (parent company of consumer ISP CenturyLink, formerly known as Level 3) blocked announcements and blackholed connections to our network. Even once Lumen was removed as an upstream, CenturyLink customers were prohibited from accessing the Kiwi Farms or any other website I hosted. Many domestic ISPs using Lumen were also impacted.
During the 𝕿𝖔𝖙𝖆𝖑 𝕽𝖊𝖙𝖆𝖗𝖉 𝖂𝖆𝖗, customers complained to both Lumen and the FCC (along with state-level counterparts), finally compelling CenturyLink to lift these blackholes. They are still not willing to announce our network, and the company is clearly unprofessional and should not be trusted.
If you have multiple consumer broadband options, do not go with CenturyLink.
Zayo
Zayo was contacted in December 2021 to provide a 1Gbps uplink with DDoS protection that was going to run us $2,000/month. It took until August 2022 for this service to come into effect. Within 12 hours of being used as our primary transit, our service was unilaterally severed on a Sunday, blacking out all services for over a week.
I have never received an explanation for this termination from any employee; I had to find out by looking at a ticket they unknowingly made available to me. One employee in Zayo France made the decision and there was no appeals process.
Zayo’s right hand doesn’t know what the left is doing. To this day, Zayo tries to bill me. I have protested their billing emails every month.
Do not use Zayo. Their reviews are universally negative.

X-Tier

Voxility
Voxility is a politically active ISP that should be avoided whenever possible. They have blocked several websites from their network and openly gloat about it on Twitter.
Unfortunately, Voxility almost holds a monopoly in Eastern European countries, including Ukraine and Romania. Vsys out of Kyiv provides us an uplink, but not to the global Internet, because Voxility blocks our announcement.
Cogent Communications
Cogent is one of the most aggressively poor ISPs in the world. They advertise themselves as a Tier 1 ISP despite not meeting the standard definition of such. Their marketers are so aggressive that they have been warned by ARIN to stop using WHOIS databases to find people to sell to. They have been kicked out of conventions for planting sales reps in the crowds.
Despite their poor reputation and historic facilitation of piracy, Cogent’s CEO Dave Schaffer is personally involved in trying to shut down this website. I have been informed by sales reps that he personally shut down deals to 1776 Solutions, LLC. They have pressured datacenters into evicting hosts that provided us a VPS. As of October 29th, 2023, they are blackholing a third-party provider whose IPs we are using for transit in a way which may be illegal BGP hijacking.
Needless to say, never do business with these retards.
Path.net
Path.net is an ISP that provides DDoS protection. They unilaterally stopped providing services to my IP subnets without warning and were the first ISP to block my IP addresses, as early as 2021. This is because their CTO either is or was Corey Barnhill, a pedophile. Corey does not like our site and has tried to change his name several times to hide his association with audio of him directly confessing to watching child pornography. People in his company are aware of this and cover for him. When pressed about Corey, they have slyly said “nobody by that name works at Path” – which is only technically true because he now goes by Corey Shiratori.
Later, Path.net sent one of our datacenters a phony sealed court order demanding that any information about Corey working for Path be removed from the site. I hid the posts, but demanded a copy of the court order. When they did not provide a copy, I restored the posts. They then demanded (with a bullshit cease and desist) that my datacenter PHYSICALLY SEIZE MY HARDDRIVES. Path tried to directly harvest my database and site content because they are fucking criminals.
To this day, I have received no direct contact from Path, and my lawyer never got a real response from theirs.
There are many rumors about the management at Path—the CEO is rumored to be a federal informant, and the company is rumored to launch DDoS attacks to punish people trying to leave their service.
DO NOT EVER USE PATH, and ask your datacenter if they use Path for DDoS mitigation before signing contracts with them.

Colocation

A-Tier

Fiberhub
Operated by a Nevada congressional candidate from the Libertarian Party, FiberHub colocated resources for 1776 Solutions for years despite intense deplatforming efforts, unbelievable personal defamation, being directly named by organized harassment campaigns as a primary target, and having to deal with fake court orders by Path.net (see below).
Fiberhub’s colocation only fell short because of its Nevada datacenter’s limited upstream offerings—which will be a problem for nobody except Kiwi Farms—and is actively being remedied by their aspiration to become a full-fledged regional IX.
If you have hardware and want it on the west coast, try Vegas before you try California.

D-Tier

WorldStream
WorldStream directly demanded a service provider stop facilitating us in any way. Their reason was that our Wikipedia page was very negative and that “proposed legislation” in the Netherlands could potentially make some posts on Kiwi Farms illegal there. This logic does not make sense and basically conveys only one thing: “we got complaints, and we don’t want to deal with it.”
They didn’t pull service without warning, but I also did not have a direct relationship with them. I will still give them a D instead of an F.

F-Tier

Equinix
Equinix WA1, along with CogentCo, forced S-tier provider HosTeam PL to remove Kiwi Farms.
ColoCrossing
ColoCrossing was a datacenter I lived near in Buffalo, NY. They were the first datacenter I used. Unfortunately, they physically pulled the plug on our devices and told us to move on with zero notice. This was due to complaints to Jonathan Yaniv (now known as Jessica Simpson) – an infamous Canadian transgender who sued women for not waxing his balls. They also charged me $700 for the overnight shipping.
Vantage
Vantage forced a large, long-term customer—a transit provider for the forum—out of their datacenter. Despite not even using their networks, Vantage would not tolerate their presence for facilitating the forum.
Do not do business with Vantage.

DDoS Mitigation

A-Tier

Haproxy-Protection
Haproxy-Protection is an FLOSS project for Layer 7 DDoS mitigation and is the algorithmic basis of KiwiFlare, which has supported Kiwi Farms through a multitude of attacks after being dropped by Cloudflare. It is developed by Thomas Lynch, a true veteran of hosting weird Internet content, and he currently operates for-profit BasedFlare.
C0nW0nk’s DDoS Mitigation Script
This script works out of the box with OpenResty (a Chinese fork of NGINX with built-in Lua scripting) and is free, open source software that works surprisingly well for some shit I downloaded off GitHub.

D-Tier

DDoS-Guard
DDoS-Guard was our second choice after Cloudflare, and they lasted less than a day. Despite being from Based Russia!!!, DDoS-Guard is deathly afraid of U.S. law enforcement. When the people trying to deplatform the site claimed we were illegal, they immediately terminated service without warning.
Despite their claims that Kiwi Farms was a new customer that blindsided them—the kiwifarms.ru domain had been protected by DDoS-Guard for at least a year—I give DDoS-Guard a D instead of an F because, unlike others, they did not take kiwifarms.ru and make it a groveling PR statement for their company.

F-Tier

Cloudflare
As much as I want to give Cloudflare some praise for standing by for almost a decade, I can’t. When they terminated service, they:
- Provided no direct communication with me, before or after service termination.
- Gave me no time to move off before the domain went down.
- Issued a strong statement in objection to private company censorship, only to immediately backtrack.
- Hijacked our domain to issue a defamatory, almost legally actionable statement.
- Allowed one of my email domains to expire, causing me to lose that domain (and those email users) to squatters.
- Posted a flailing blog post accusing us of being the worst site they’ve ever hosted, alluding to violent threats that have not been substantiated.
  Cloudflare just isn’t professional for a company its size.
DiamWall
DiamWall is Portuguese. They lasted for only a few hours. I’d give them a higher mark for being highly communicative, but they dropped service in the early morning hours without warning and let the person deplatforming the site spellcheck their statement. Like Cloudflare, they hijacked our domain to issue this statement.
These are young college students who are not ready to run a company with the kind of exposure that DDoS mitigation creates.

U-Tier

Koddos
Koddos replied to my email saying they did not want to be involved.

DNS

S-Tier

DNSPod
DNSPod is a DNS operated by Chinese conglomerate Tencent. DNSPod is a proper enterprise service with offerings that far exceed our requirements. They are also highly complaint resistant. In particular, Liz Fong-Jones has been desperately crying to them in both English and Chinese for months to try and get us deplatformed at a DNS level again, without success (knock on wood).

F-Tier

Hurricane Electric (DNS)

Hurricane Electric offers DNS for domain zones and APRA at dns.he.net – and by “free”, I mean: “they will kick you off without so much as an email if they don’t like you.”
ClouDNS
ClouDNS was suggested as a way to intelligently round-robin various reverse–proxies to the Kiwi Farms using their healthchecks. While it was a very effective system, ClouDNS lasted only a few days before routing kiwifarms.st to their branded parking page. They provided no warning to me as a customer before doing so. (Path is their upstream, so this is not surprising in retrospect.)
Reserved
This space reserved for consumer DNS providers blocking us. Currently, no open DNS provider blocks us.

Domain Registrars

S-Tier

.ST Registry
.ST is operated by the NIC for São Tomé and Príncipe, an island nation off the coast of West Africa. They have endured an insane amount of complaints and network–level attacks levied against their central DNS and, despite all of that, have allowed us to stay up. They are what we call in the industry “gigachads.”

A-Tier

Dreamhost
Dreamhost was the first domain registrar I ever used, years before I hosted Kiwi Farms. It remained my go–to for over ten years. Dreamhost only asked us to move after Byuu faked his death, and gave us plenty of time.

F-Tier

Epik
Epik domain registrations were bought out by Epik LLC, a mysterious Wyoming corporation with no transparent ownership structure. On December 12th, 2023, they seized kiwifarms.net without warning. However, they did eventually offer transfer codes after sufficient public complaining.
Months later, Epik began responding on Twitter to negative posts they had received for putting a clientHold on our domain. They lied and claimed they had received a law enforcement request to seize our domain. When confronted on this lie, they made a snippy remark:

“I think you caught us. It was woke liberal employees here cancelling you because they didn’t like the hate speech on your site.”
(See archive references.)

Key–Systems GmbH
Key–Systems GmbH, as an intermediary registrar for Epik used to secure kiwifarms.pl, stole the domain from both me and Epik without notice. They have since refused to answer emails and government inquiries from the .pl NIC, and are generally behaving like criminals for no reason instead of just letting me transfer their domains.
Do not ever use Key–Systems GmbH. Ensure that whatever registrar you use for European TLDs does not use them.

U-Tier

1984.is
1984 is a “free speech” domain registrar that went to court to protect its customers on different occasions, which gave them a strong reputation. However, 1984 has in their Terms of Service what they call a “Nazi clause” which basically says they can terminate service for any reason—or no reason—while calling you a Nazi for the privilege. They did not want to serve the domain.
Tucows
Tucows/2cows is an ancient registrar that is the registrar for 4chan.org. In response to emails, their Trust & Safety executive said they would not permit us to transfer our domain to their service—even for the purpose of redirecting to another domain. Tucows (via Njalla) has recently (Jan 2024) frozen a Nitter instance (an X/Twitter proxy) without warning.
Njalla
Njalla is a Tucows reseller. The owner is ANTIFA and ex–Pirate Party. Due to his association with online piracy, he was not permitted by ICANN to become a full–flledged registrar.

TLDs

S-Tier

Verisign
Verisign is the owner of .COM, .NET, and .TV. It is one of the oldest NICs and understands its importance in the web of trust that builds the Internet. Verisign is an American company and responds to US court orders, making it bad for piracy, but good for speech.

F-Tier

Icelandic TLDs
The descendants of Vikings, the modern Icelander chugs soy and fucks their cousin. ISNIC and .IS (Iceland’s national TLD) imbibe the traditional Scandinavian concept of speech. Namely, journos and pirates are protected, but bad words are not. They froze kiwifarms.is without warning, demanded passport scans and proof of address, and now are holding the domain hostage waiting for the US embassy to verify my passport is real. (Update: After more than 6 months, this company has not followed up.)
Identity Digital
Identity Digital, formerly Donuts, owns a significant number of new novelty gTLDs. When Kiwi Farms was first returning to clearnet, we used sneed.today—which was seized by Identity Digital, with zero contact or warning. This company should not be trusted.

VPS / VDS / Dedicated Servers

Current Frontends

When I buy a dedicated server, I am primarily looking at bandwidth, not the specs. These are just TCP proxies. (If you do nslookup kiwifarms.net, you’ll see this anyway. Might as well give some kudos.)

S+ Tier

Mevspace
Mevspace is a Polish host in Warsaw with their own datacenter, which liberates them from having to comply with another AUP. They were willing to ignore Cogent’s demands to censor Kiwi Farms, which resulted in the ISP announcing and blackholing the IP address we were leased.
Surviving the storm since October 8th, 2023. Mevspace is our longest lasting provider and has never completely broken to deplatforming pressures—even from their T1 upstreams.

S Tier

PrivateLayer
PrivateLayer is Swiss. They’re good, have a good datacenter, solid support, and tolerate our complaint volume. They’re a bit expensive, but they take crypto.
Surviving the storm since December 15th, 2023.
Evoluso
Evoluso is an “offshore” provider with locations throughout Europe. We use their Swedish location due to the presence of multiple advantageous upstreams (i.e., assholes like Cogent or RETN). There have been no problems with them, and they take crypto.
Surviving the storm since January 13th, 2024.
Affiliate URL: https://evoluso.com/u/?affid=257
Incognet
Incognet is an American host with options in the US and the Netherlands. A small, privacy–focused organization offering native IPv6 support, a permissive AUP, and cryptocurrency payment options. Although forced to remove us by their datacenter (Worldstream, NL), Incognet has since opened two new locations: Liberty Lake, WA and Kansas City, Missouri. Hurricane Electric blocked us in Washington, but we maintain connections in Kansas City. They are working on transit in Indochina and DDoS mitigation through other US providers.
Survived the storm from October 13th, 2022, to October 19th and became the first host to try again on September 26th, 2023.

S– Tier

Rumble Cloud
Rumble Cloud is a startup competitor to AWS. They have DDoS mitigation through Path(!!) and transit with Cogent(!!), yet Kiwi Farms manages to stay up with them. I have repeatedly tried to pressure them for better transit, but they don’t return my emails.
Surviving the storm since April 24th, 2024.

Previous Hosts

A-Tier

Virtual Systems (vsys.host)
Virtual Systems is a Ukrainian host based out of Kyiv. They are total chads. When Kiwi Farms went down after Cloudflare dropped us, I pointed the domain at a very cheap vsys VPS with a static error page. The troons on Twitter went absolutely nuts—accusing me of being a Putin shill, trying to get the Ukrainian Ministry of Defense to force Vsys to shut us down, and posting their address as if to rally Ukrainian nationalists against a Ukrainian company in the capital. Despite all the nonsense, they’ve continued to allow us to host forward–facing services. We don’t currently use them, but I would use them again.
Surviving the storm since August 25th, 2022.
Referral URL: https://vsys.host/aff.php?aff=166
HostSlick
HostSlick has provided support for my hosting efforts in various forms for almost a year. They have been seriously hampered by very censorious datacenters and ISPs, but the owner remains unshaken by controversy and has not allowed his business partners to act as lawmakers.
We don’t currently use HostSlick because they did not have DDoS protection to deal with the attacks we receive, though they have since moved datacenters.
Surviving the storm since September 15th, 2022.
Referral URL: https://hostslick.com/clients/aff.php?aff=517
Terrahost
Terrahost is an Epik partner with a high variety of VPS locations offering DDoS protection out of the box, complementary IPv6, and “Enigma” – one of the best VPS management GUIs I’ve seen. Unfortunately, we are no longer with Terrahost because trannies threatened every single one of their upstreams into removing our subnets from their announcements.
BuyVM
BuyVM was one of the longest lasting VPS providers we used before Kiwi Farms had its own Internet resources. The owner only relented when the world’s biggest Evanescence fan (a lonely old man who is literally demented) imported a UK defamation suit to Canada using an exploit with the Commonwealth. Despite this, they lasted over a year, communicated, and gave us time to move off. They hold a stellar reputation among hobbyists and I would strongly recommend them for anyone hosting anything less difficult than Kiwi Farms. They offer many networking services that are hard to find elsewhere.
Versaweb
Versaweb provided our first dedicated server on a rent–to–own scheme. I still have this server and use it for smaller websites. Versaweb and BuyVM share many of the same datacenters and libertarian philosophies. Their Las Vegas location makes them ideal for a west coast PoP without actually being in California, although their parent company (FiberHub) has limited upstream options.
HosTeam
HosTeam is a Polish company that silently provided exceptional uptime for Kiwi Farms over several months—until Cogent and Equinix Warsaw forced them to ask that Kiwi Farms be removed (with 24 hours’ notice, which is a step above almost everyone else). They also endured DDoS attacks that no one else could; I suspect they filter it themselves since they are a large provider with important Polish clients.

B-Tier

Alexhost
Alexhost is a Moldova–based provider that owns its own datacenter. However, their upstreams are Voxility and Cogent, which politically ban Kiwi Farms. They have recently opened a presence in the Netherlands in a third–party datacenter, avoiding the more censorious ISPs.
Survived the storm between September 13th, 2022 to October 2023 (forced to censor by Serverius), and again between May 2024 and March 2025 (forced to censor by iFog).
NiceVPS
NiceVPS operates out of the Netherlands and Switzerland. Unlike many hosts, they provide IPv6 by default, which is really nice. Sitting in the heart of Europe, their networking is extremely fast, and they offer tiered levels of DDoS protection—a rare offering.
They were willing to work with us but wanted money for 1Tbps of DDoS protection (around $900/mo), which was more than I was willing to pay since I already pay for DDoS protection elsewhere. I’m keeping them on the table.
Surviving the storm since October 7th, 2022.
Referral URL: https://nicevps.net/index/?aff=019135a2
Shinjiru
Shinjiru offers VPS and dedicated servers out of Malaysia. Its international connectivity is lacking (typical of any host outside of HK/SG in Asia/Oceania). Their 12–core 1Gbps unmetered dedicated server is $90/mo. Shinjiru has a strong reputation for offshore hosting, but I believe they null–routed us more often than not—likely due to DDoS attacks. Since our DNS presently doesn’t correctly navigate downed nodes, I’ve pulled them out of rotation.
Surviving the storm since September 9th, 2022.
Referral URL: https://billing.shinjiru.com/aff.php?aff=320

C-Tier

iHostArt
iHostArt is a Romanian service operated by a one–guy named Calin. He repeatedly offered to help Kiwi Farms but, until recently, hosted out of his basement. It is hard to rate iHostArt because he really wants to host us but has issues every time we try him.
Linode
Linode was our first host and was not put through the same tests as others. They dropped at the first sign of heat. However, they communicated well and gave us time to move. My account was left active with them and I still use them for small, normal projects because their service is quite good.
DigitalOcean
We briefly used DigitalOcean for hosting. Like Linode, they gave us professional notice and we moved on without incident; my account still remains active for some regular projects.

D-Tier

TransIP
I put Lolcow Email and Kiwi Farms’ outbound email on a CloudVPS installation many years ago (maybe 8 years). CloudVPS was later acquired by TransIP, which initially worried me—especially since Liz Fong-Jones used his lizf@google.com email to try and scare CloudVPS into taking down our email server. That attempt failed.
Fast forward 6 years, and TransIP sent me an email saying we violated their ToS by getting DDoS attacked; they were terminating service immediately (on a Friday). I asked for time to move since we had been on their service for almost a decade. After consulting their legal team, they relented the following Monday.
I give them a D instead of an F because they provided a window, but I shouldn’t have had to ask given our long-standing relationship.

F-Tier

vShield.pro
vShield.pro dropped after 2 weeks without warning or communication.
Survived the storm between September 15th, 2022 and October 6th.
Gandi
Gandi was the second host we used after Linode dropped us. I hadn’t figured out reverse proxies yet, so this was a big deal. A French company, Gandi lived up to the reputation of surrender monkeys and dropped service almost immediately. In their disorganized retreat, they did not even bother to warn us before dropping service. This caused me to rely on a stale archive and lose days of activity.
Gandi also lied and said we hosted child abuse material—based on hosting a clip of Goosh Goosh (an anime meme on YouTube). This lie has seriously damaged our reputation and is still being spread.
I would recommend Gandi to literally no one.

Miscellaneous

S-Tier

Telegram
After Kiwi Farms started having uptime difficulties due to brigades against our service providers, I turned to Telegram for announcements. Despite immense public pressure to delete my channel and chat room for Kiwi Farms, Telegram did not relent. They have blocked our Telegram channel from appearing in web previews, so you will need an account to view it. I’m not sure of the purpose of this restriction, and it does annoy many users who do not want to create a Telegram account.

X-Tier

honeycombio
I don’t know what honeycomb.io even does, but its CTO is Liz Fong-Jones, who has been accused of rape - or a “consent accident”, as they put it.
Liz is insane and uses their honeycomb email address to threaten ISPs to deplatform us. Do not support this business.