Cogent Communications AUP Enforcement - ISP Acceptable Use Policy Guide

Breadbassket

True & Honest Fan
kiwifarms.net
Joined
Nov 22, 2021
Kiwi Farms as of this is having a bit of an issue with Cogent as stated in a thread by Operator Null:
Cogent Communications is one of the largest ISPs in the entire world, powered by billionaire Dave Schaeffer who incorporated the company directly in Washington D.C. in the 1990s. It is one of the most silently powerful and influential organizations in the entire world. Cogent must be compelled to stop their active participatory censorship of my website.

They are actively following our A records. Any IP that serves the Kiwi Farms is being nullrouted by Cogent. There is someone in their company, likely from the top-down, that has devoted themselves to destroying this community.

I am open to ideas as to how we protest this obstruction of our rights.


Please note: I am not encouraging any harass, abuse, defame, threaten, or otherwise forcibly interfere with Cogent or any of their employees. If you have a good samaritan concern regarding online content you have sent to Cogent, the good will of knowing you have done your duty and reported it should be enough - you don't need to post it. Thank you!


Cogent has proven they are willing to enforce their AUP on any content anywhere on the Internet, including content that is not directly on their network. If you believe that there is content hosted online at any place that violates Cogent's AUP, they are willing and able to help you remove that content.

If you believe there is content violating the AUP of Cogent, you may report it at this address:
abuse@cogentco.com
https://www.cogentco.com/en/acceptable-use-policy

If you do decide to help Cogent enforce their AUP, please consider what elements are important to helping them identifying infringing content. Provide the following elements:
- A link to the infringing content.
- A description of the content and how it violates their AUP.
- If you are able, provide them technical information, such as an IP address.

Thank you for helping Cogent help you help us all.

As mentioned in that post Cogent is willing to enforce their AUP on any content anywhere on the Internet, including content that is not directly on their network.

Perhaps it would be a good to know how to effectively send a message to Cogent regarding AUP violations. This thread is to serve as a guide for that.

Here is what their Acceptable Use Policy is:

Acceptable Use Policy​


This Acceptable Use Policy applies to all persons and entities (collectively, "customers") using the products and services of Cogent Communications, Inc., ("Cogent") including Internet service. The policy is designed to protect the security, integrity, reliability, and privacy of both the Cogent network and the products and services Cogent offers to its customers. Cogent reserves the right to modify this policy at any time, effective immediately upon posting of the modification. Your use of Cogent's products and services constitutes your acceptance of the Acceptable Use Policy in effect at the time of your use. You are solely responsible for any and all acts and omissions that occur during or relating to your use of the service, and you agree not to engage in any unacceptable use of the service.

What Uses are Prohibited?​

Unacceptable use includes, but is not limited to, any of the following:
1. Posting, transmission, re-transmission, or storing material on or through any of Cogent's products or services, if in the sole judgment of Cogent such posting, transmission, re-transmission or storage is: (a) in violation of any local, state, federal, or non-United States law or regulation (including rights protected by copyright, trade secret, patent or other intellectual property or similar laws or regulations); (b) threatening or abusive; (c) obscene; (d) indecent; or (e) defamatory. Each customer shall be responsible for determining what laws or regulations are applicable to his or her use of the products and services.
2. Installation or distribution of "pirated" or other software products that are not appropriately licensed for use by customer.
3. Resale of Cogent's products and services without the express prior written consent of Cogent (unless you are an authorized wholesaler).
4. Deceptive marketing practices.
5. Actions that restrict or inhibit anyone - whether a customer of Cogent or otherwise - in his or her use or enjoyment of Cogent's products and services, or that generate excessive network traffic through the use of automated or manual routines that are not related to ordinary personal or business use of Internet services.
6. Introduction of malicious programs into the Cogent network or servers or other products and services of Cogent (e.g., viruses, trojan horses and worms).
7. Causing or attempting to cause security breaches or disruptions of Internet communications. Examples of security breaches include but are not limited to accessing data of which the customer is not an intended recipient, or logging into a server or account that the customer is not expressly authorized to access. Examples of disruptions include but are not limited to port scans, flood pings, packet spoofing and forged routing information.
8. Executing any form of network monitoring that will intercept data not intended for the customer.
9. Circumventing user authentication or security of any host, network or account.
10. Interfering with or denying service to any user other than the customer's host (e.g., denial of service attack).
11. Using any program/script/command, or sending messages of any kind, designed to interfere with, or to disable a user's terminal session.
12. Failing to comply with Cogent's procedures relating to the activities of customers on Cogent-owned facilities.
13. Furnishing false or incorrect data on the order form contract (electronic or paper) including fraudulent use of credit card numbers or attempting to circumvent or alter the processes or procedures to measure time, bandwidth utilization or other methods to document "use" of Cogent's products or services.
14. Sending unsolicited mail messages, including the sending of "junk mail" or other advertising material to individuals who did not specifically request such material, who were not previous customers of the customer or with whom the customer does not have an existing business relationship (e.g., E-mail "spam"); or distributing, advertising or promoting software or services that have the primary purpose of encouraging or facilitating unsolicited commercial E-mail or spam.
15. Harassment, whether through language, frequency, or size of messages.
16. Unauthorized use or forging of mail header information.
17. Solicitations of mail or any other E-mail address other than that of the poster's account or service, with the intent to harass or collect replies.
18. Creating or forwarding "chain letters" or other "pyramid schemes" of any type.
19. Use of unsolicited E-mail originating from within the Cogent network or networks of other Internet Service Providers on behalf of or to advertise any service hosted by Cogent or connected via the Cogent network.
20. Exporting, re-exporting, or permitting downloads of any content in violation of the export or import laws of the United States or without all required approvals, licenses and exemptions.
No failure or delay in exercising or enforcing this policy shall constitute a waiver of the policy or of any other right or remedy. If any provision of this policy is deemed unenforceable due to law or change in law, such a provision shall be disregarded and the balance of the policy shall remain in effect.

Abusable Resources​

Upon notification of the existence of an abusable resource (e.g., open news server, unsecured mail relay, or smurf amplifier), the customer shall immediately take all necessary steps to avoid any further abuse of such resource. Any abuse of an open resource that occurs after the customer has received such notification shall be considered a violation of this policy and enforced as such.

Enforcement​

Cogent may immediately suspend and/or terminate the customer's service for violation of any provision of this policy upon verbal or written notice, which notice may be provided by voicemail or E-mail. Prior to suspension or termination, Cogent attempts to work with our customers to cure violations of this policy and ensure that there is no re-occurrence; however, Cogent reserves the right to suspend or terminate based on a first offense. Cogent reserves the right to charge fees arising from management or handling of complaints related to alleged violations of the AUP.

Electronic Communications Privacy Act Notice​

Cogent makes no guarantee of confidentiality or privacy of any information transmitted through or stored upon Cogent technology, and makes no guarantee that any other entity or group of users will be included or excluded from Cogent's network. In addition, Cogent may periodically monitor transmissions over its network for maintenance, service quality assurance or any other purpose permitted by the Electronic Communications Privacy Act, P.L. No. 99-508, as amended.

Questions?​

If you are unsure of whether any contemplated use or action is permitted, please contact Cogent at abuse@cogentco.com or call (877) 7-COGENT


If you find any material that may violate the Cogent Acceptable Use Policy send it to abuse@cogentco.com

Here is an email template (the quote within a quote) and some words of advice from user @777Flux when sending AUP complaints :
You can pretty effectively use ChatGPT / other language models to generate quick copy for a abuse email template.
Free ChatGPT providers:
anonchatgpt.com
rebbe.io (just prompt it with the default prompt)

Dear Cogent Abuse Team,


I am writing to report a concerning issue related to the website {Site URL}, which is hosted on your network. It has come to my attention that this website may be involved in abusive activities that violate acceptable usage policies and potentially infringe upon the rights of others.


I have observed the following abusive content or behavior on {Site URL} :


[Describe the abusive content or behavior in detail. Include specific URLs, timestamps, and any other relevant information that can help identify the issue.]


This content or behavior is not only contrary to your acceptable use policy but may also have legal implications. The abusive nature of the content poses a threat to the well-being and safety of individuals or the larger online community.


I kindly request your immediate attention to this matter. I urge you to thoroughly investigate the reported abuse and take appropriate action following your established procedures.


If required, I am willing to provide any additional evidence or information that can assist in addressing this issue promptly. Please acknowledge this report and provide me with any updates or resolution pertaining to it.


Thank you for your prompt attention to this matter, and I trust that you will take appropriate action to address this report of abuse.


Sincerely,

[Your Name]

Harassment, abuse, defamation, threatening or forceful interference with Cogent or their employees is not encouraged here. If you would like to message Cogent Communications about sites using their services that violate the AUP here is a guide link.
 
Last edited:
If you know of any sites you think violate the Cogent Communications AUP put them down in the thread and detail what parts of it they violate.
I'd remove this tbh. It's probable that someone at cogent is watching here and it's definite that LFJ and his cronies are. It would make things a lot easier for them if they instantly knew which tickets to close.
 
If you really want to be efficent, my advice would be to spin up a cluster of VMs that can load Wizard 30B into a GPU and run Text generator webui. Just hit it with a python script to generate copy after loading a context for this and you could be shitting out 20 emails worth of copy per minute from each instance.

Edit: You could probably do this for less than $1 an hour per instance. It also gets around GPT4 getting pozzed and preventing you from engaging in this behavior.
 
Last edited:
Weedmaps.com is an aggregation site for Cannabis Dispensaries. Per the Cogent AUP, cannabis is illegal at the US federal level as a scheduled controlled substance.
weedmaps.com uses Fastly(AS54113) as their hosting provider which uses Cogent as one of their upstreams.
 
If someone can ELI5 a set of parameters for content you're looking for that violates AUP I can probably make a tool that automates searching for this said content.

How would I know this content is on the Cogent network?
 
If someone can ELI5 a set of parameters for content you're looking for that violates AUP I can probably make a tool that automates searching for this said content.

How would I know this content is on the Cogent network?
Cogent is enforcing their AUP on things that AREN'T on their network if you use their network to get to those things. That's part of the issue here that Null is pointing out.
1703095126387.png
So, like @davids877 pointed out, WeedMaps.com is in violation of the AUP, because
1703095224956.png
1703095268690.png

This is so broad, however that any hentai site would fall into it, as would other gossip sites besides the Farms.
 
Cogent is enforcing their AUP on things that AREN'T on their network if you use their network to get to those things. That's part of the issue here that Null is pointing out.
View attachment 5578730
So, like @davids877 pointed out, WeedMaps.com is in violation of the AUP, because
View attachment 5578731
View attachment 5578732

This is so broad, however that any hentai site would fall into it, as would other gossip sites besides the Farms.

Time to start reporting hentai sites, then. Including subreddits and other forums that allow image posting boards.

Edit: thanks to their dumbass ticket software, Cogent themselves are now hosting ASCII hentai, copyright violating material, and every kind of hate speech.

 
Last edited:
Oh my god I love this thread already, you guys are evil.

I think it might be good to make, like a list of the type of sites to target. Another user made a good point that we shouldn't directly name the sites we intend to send in complaints about publicly but a list of categories could give users a general baseline for which sites to fuck with without having to read through the AUP.

- Marijuana dispensary directories, storefront websites and blogs
- Mainstream social media platforms
- Pornography websites without ID verification
- DeviantArt and Furry Communities
- Fetish communities
- NSFW Subreddits
- Journo's personal blogs and websites
- Mainstream news websites
- Mainstream Musicians' Websites - Specifically ones with a reputation for vulgarity ie. most rappers
- Sex toy store websites
- Gun, Ammo and Trump Fanboy Swag Store sites
- Controlled Opposition Media sites ie. DailyWire
 
Crossposting from another thread with a post made by @Softdrinks who brought a DIY HRT site to the attention of their host.

Hello everyone i have a nice special early christmas gift. I shared this gift with josh via email and now i will share it with you, its called how i got a DIY HRT sites host to drop them. heres how i did it. they originally used webzilla but now they have changed cause they being webzilla are scared shitless of cogent.
  1. find a site that clearly violates some kind of AUP
  2. use BGP tools to find their host and their abuse email.
  3. make sure you give them all the info they need listed on their abuse page,
  4. send a email. using all info they ask and link everything needed. multiple links help extremely as they usually only take a precursory glance
  5. Remember to sound like you're worried and in good faith, being extremely rude will not help you at all.
  6. heres the most important part. if they are using cogent tell them in the end of the email you already contacted cogent communications or their tier1/upstream and are waiting for a email back from them. and give them your email as contact info at the bottom.
  7. ???? (wait for response)
  8. profit, site is offline
the response from webzilla was "Hello, The reported website was blocked by the customer." see example of https://bgp.tools/prefix/80.78.16.0/20#connectivity, they originally had to only use one asn which was webzilla then to their tier one but now they have to use two. i will upload a template of my email below to webzilla. you do not have to email cogent at all for this. Please remember to use a burner and VPN when sending these emails. Remember these guys think they can moderate the whole internet. They wanted this. Please remember to use this only for good Samaritan reasons, if you have any questions feel free to ask. We didnt start the fire.

part1.pngdropped by webzilla.png
 
One thing to note for the DIY HRT stuff, is while selling stuff without a prescription is illegal. Testosterone is a controlled substance and really illegal(Schedule III) in the US.
So one may look at sites like:
diyhrt.wiki (Cloudflare, Porkbun as registrar)
roidbazaar.me (Cloudflare, Netim.com as registrar)
Obviously if the registrars aren't helpful then you can look up the TLD registry(Godaddy for .wiki, doMEn domain.me for .me)
 
One thing to note for the DIY HRT stuff, is while selling stuff without a prescription is illegal. Testosterone is a controlled substance and really illegal(Schedule III) in the US.
So one may look at sites like:
diyhrt.wiki (Cloudflare, Porkbun as registrar)
roidbazaar.me (Cloudflare, Netim.com as registrar)
Obviously if the registrars aren't helpful then you can look up the TLD registry(Godaddy for .wiki, doMEn domain.me for .me)
Elliot DongLongGone, may he go blind today, broken branch ancestor cry, has his disgusting troon group just constantly send emails up the chain, from the hosts to the ISPs to the Tier 1's.
So BGP map, get some phone numbers of the execs for "girl talks".
If it is all to be burned, let us make the fires bright and to the heavens.


Plus there was that one site that ol' chinky squarejaw used, run by a proud troonlover. Would love to use that tool against the faggots.
 
Check IP of the website on https://bgp.tools/, paste just the domain without https:// etc.
If its on Cloudflare, proceed with steps below, If you cannot find it there its worth sending an abuse report anyways because they forward it to the host, and most big providers will care about it. https://abuse.cloudflare.com/

If the E-Mail is selfhosted, there is a great chance they will put it on the same server as backend and use for receiving. You should be able to see the IP in MX records.

Alternatives to Censys, all can be used for free, with or without limits:
https://www.shodan.io/
https://en.fofa.info/
https://www.onyphe.io/
https://hunter.how/
https://netlas.io/
https://www.criminalip.io/

For validation of hosts that use prefedined "server_name" and throw an error page/refuse connections via direct IP, use tools such as https://www.skipdns.link/ https://resolvehost.link/ or edit hosts file locally.

If the target has registration and E-Mail verification, there is a good chance they will leak their backend IP even if they use relays. Always check the headers of inbound email.
 
Last edited:
Well im sure that there are thousands of formerly twitter and facebook posts that need to be personally investigated by Cogent certainly violate that broad spectrum of bullshit.

While it would never happen elon being kicked off the network would be funny as he no doubt would just instantly try to construct one of his own out of spite.

I mean if they arent going to redact services these big social media platforms surely that would mean they would then report the posts to the service on my behalf on their own time?
 
Back