diff --git a/analysislib/known_dns_sigs.py b/analysislib/known_dns_sigs.py index bf21ea8..4efe7f7 100644 --- a/analysislib/known_dns_sigs.py +++ b/analysislib/known_dns_sigs.py @@ -753,6 +753,238 @@ """ ), + SimpleDNSReplyPattern( + name="dns_isp_ru_AS52207", + response="188.186.157.49", + confidence_no_fp=10, + exp_url="https://explorer.ooni.org/measurement/20220305T120459Z_webconnectivity_RU_52207_n1_AlXw32CjmNRv0WxI?input=http%3A%2F%2Fwww.bbc.com%2Fnews", + source=[ + "" + ], + scope="isp", + expected_countries=["RU"], + notes=""" + PTR record is k8s-lb-onlyhttp-cluster-ingress.static.cc.ertelecom.ru. + Serves blockpage for: http://lawfilter.ertelecom.ru/ + """ + ), + + SimpleDNSReplyPattern( + name="dns_isp_ru_AS51547", + response="80.76.104.20", + confidence_no_fp=10, + exp_url="https://explorer.ooni.org/measurement/20220304T163214Z_webconnectivity_RU_51547_n1_oUciU7VqaGrmL4HA?input=https%3A%2F%2Fwww.bbc.com%2Fnews%2Fworld-51235105", + source=[ + "" + ], + scope="isp", + expected_countries=["RU"], + notes=""" + PTR records are block.tdsplus.ru & balance.tdsplus.ru. + We get connection refused when attempting to access it. + """ + ), + + SimpleDNSReplyPattern( + name="dns_isp_ru_AS8790", + response="85.142.29.248", + confidence_no_fp=10, + exp_url="https://explorer.ooni.org/measurement/20220305T121053Z_webconnectivity_RU_8790_n1_OfI9eozoHc8C4Xkd?input=http%3A%2F%2Fwww.bbc.com%2Fnews", + source=[ + "" + ], + scope="isp", + expected_countries=["RU"], + notes=""" + PTR record is block.runnet.ru. + We get a blockpage when attempting to access it. + """ + ), + + SimpleDNSReplyPattern( + name="dns_isp_ru_AS35807", + response="100.64.64.66", + confidence_no_fp=7, + exp_url="https://explorer.ooni.org/measurement/20220305T121024Z_webconnectivity_RU_35807_n1_QkCl4ZggAoowPpAI?input=http%3A%2F%2Fwww.bbc.com%2Fnews", + source=[ + "" + ], + scope="isp", + expected_countries=["RU"], + notes=""" + Private IP space, but behaviour is consistent on AS35807 for blocked domains. + """ + ), + + SimpleDNSReplyPattern( + name="dns_isp_ru_AS15378", + response="95.213.158.61", + confidence_no_fp=7, + exp_url="https://explorer.ooni.org/measurement/20220305T053351Z_webconnectivity_RU_15378_n1_wsIzPXq2OLRTBIAq?input=http%3A%2F%2Fwww.bbc.com", + source=[ + "" + ], + scope="isp", + expected_countries=["RU"], + notes=""" + AS of returned IP is mapped to russian hosting provider AS49505 (SELECTEL). + Pattern is consistent for several blocked sites. + """ + ), + + SimpleDNSReplyPattern( + name="dns_isp_ru_AS8427", + response="188.43.20.67", + confidence_no_fp=10, + exp_url="https://explorer.ooni.org/measurement/20220305T035626Z_webconnectivity_RU_8427_n1_6zMQbsKYAsOva4L7?input=https%3A%2F%2Fwww.bbc.com%2Frussian%2F", + source=[ + "" + ], + scope="isp", + expected_countries=["RU"], + notes=""" + Serves a blockpage for ttk ISP + """ + ), + + SimpleDNSReplyPattern( + name="dns_isp_ru_AS52207_2", + response="195.128.72.3", + confidence_no_fp=10, + exp_url="https://explorer.ooni.org/measurement/20220304T055948Z_webconnectivity_RU_52207_n1_H0I8CD7nFoMYXxCx?input=https%3A%2F%2Fwww.bbc.com%2F", + source=[ + "" + ], + scope="isp", + expected_countries=["RU"], + notes=""" + Serves a blockpage + """ + ), + + SimpleDNSReplyPattern( + name="dns_isp_ru_AS12389", + response="31.28.24.3", + confidence_no_fp=10, + exp_url="https://explorer.ooni.org/measurement/20220304T044651Z_webconnectivity_RU_12389_n1_BmRicVwEpc4HG72k?input=https%3A%2F%2Fwww.bbc.com%2F", + source=[ + "" + ], + scope="isp", + expected_countries=["RU"], + notes="Serves a blockpage for citytelecom.ru" + ), + + SimpleDNSReplyPattern( + name="dns_isp_ru_AS197460", + response="46.175.31.251", + confidence_no_fp=8, + exp_url="https://explorer.ooni.org/measurement/20220305T044706Z_webconnectivity_RU_197460_n1_moH7izWEhyf8UJ81?input=https%3A%2F%2Fwww.bbc.com%2Fnews", + source=[ + "" + ], + scope="isp", + expected_countries=["RU"], + notes=""" + Likely used to be a blockpage. The PTR record is + host-46-175-31-251.rev.zencom.ru and the AS is AS197460, which is + consistent with the network where we observe it. + As of 2022-03-05 the session times out when attempting to fetch the + index via HTTP (port 80 is open though). + """ + ), + + SimpleDNSReplyPattern( + name="dns_isp_ru_AS3335", + response="84.237.49.190", + confidence_no_fp=8, + exp_url="https://explorer.ooni.org/measurement/20220304T062438Z_webconnectivity_RU_3335_n1_mn3OTB1761hQW6PB?input=https%3A%2F%2Fwww.bbc.com%2F", + source=[ + "" + ], + scope="isp", + expected_countries=["RU"], + notes=""" + PTR record host190.49.237.84.nsu.ru and AS is AS3335. + As of 2022-03-05 a 503 error is returned when accessing page. + """ + ), + + SimpleDNSReplyPattern( + name="dns_isp_ru_AS212614", + response="62.33.207.197", + confidence_no_fp=10, + exp_url="https://explorer.ooni.org/measurement/20220303T144538Z_webconnectivity_RU_212614_n1_GNQli0Mie4NBJrkp?input=https%3A%2F%2F200rf.com%2F", + source=[ + "" + ], + scope="isp", + expected_countries=["RU"], + notes=""" + netname of the ip range is "TTK-SECURITY". As of 2022-03-05 you get + connection refused when connecting to port 80. + """ + ), + + SimpleDNSReplyPattern( + name="dns_isp_ru_AS212614_2", + response="62.33.207.196", + confidence_no_fp=8, + exp_url="https://explorer.ooni.org/measurement/20220303T144538Z_webconnectivity_RU_212614_n1_GNQli0Mie4NBJrkp?input=https%3A%2F%2F200rf.com%2F", + source=[ + "" + ], + scope="isp", + expected_countries=["RU"], + notes=""" + netname of the ip range is "TTK-SECURITY". As of 2022-03-05 you get + connection refused when connecting to port 80. + """ + ), + + SimpleDNSReplyPattern( + name="dns_isp_ru_AS60139", + response="185.77.150.2", + confidence_no_fp=10, + exp_url="https://explorer.ooni.org/measurement/20220303T120931Z_webconnectivity_RU_60139_n1_RqlkvqFzTf9cySzI?input=https%3A%2F%2Fwww.currenttime.tv%2Ftv%2Fschedule%2F92%2F", + source=[ + "" + ], + scope="isp", + expected_countries=["RU"], + notes="Serves a cute cat blockpage" + ), + + SimpleDNSReplyPattern( + name="dns_isp_ru_AS42429", + response="77.238.226.53", + confidence_no_fp=10, + exp_url="https://explorer.ooni.org/measurement/20220302T003421Z_webconnectivity_RU_42429_n1_4xzf7tPugdylxlAj?input=https%3A%2F%2Fwww.currenttime.tv%2Ftv%2Fschedule%2F92%2F", + source=[ + "" + ], + scope="isp", + expected_countries=["RU"], + notes="Serves a blockpage" + ), + + SimpleDNSReplyPattern( + name="dns_isp_ru_AS8369", + response="78.29.1.40", + confidence_no_fp=10, + exp_url="https://explorer.ooni.org/measurement/20220301T122933Z_webconnectivity_RU_8369_n1_M8IHOk8AdoWew7sE?input=https%3A%2F%2Fwww.currenttime.tv%2F", + source=[ + "" + ], + scope="isp", + expected_countries=["RU"], + notes=""" + ASN of the IP is AS8369, which is consistent with the network of the + measurement. Connections timeout when attempting to establish a + connection on port 80. + """ + ), + ######### # INDONESIAN SEHAT RELATED RESPONSES @@ -1854,4 +2086,4 @@ """ ), -] \ No newline at end of file +] diff --git a/data/v1/dns.csv b/data/v1/dns.csv index b4bb25a..c5b5f1b 100644 --- a/data/v1/dns.csv +++ b/data/v1/dns.csv @@ -68,6 +68,21 @@ dns_isp_mm_myanmarnet_block,59.153.90.11,10,https://explorer.ooni.org/measuremen dns_isp_pk_nayatel_safeweb,203.82.48.86,10,https://explorer.ooni.org/measurement/20191206T015807Z_AS23674_BbXvUMwowxajbM9Q1pTeOp84pawo9ccTUsltC6B1vhyNHC2kkM?input=http://gaytoday.com/,['https://nayatel.com/'],isp,['PK'],Pakistani ISP Nayatels Safeweb blockpage dns_isp_pk_nayatel_surfsafely,203.82.48.83,10,https://explorer.ooni.org/measurement/20161025T235721Z_AS23674_Lldjua1VqHuWrRcILrD3wrfRXiOVP5P3e0wHwJV1MACuOzBFwY?input=http://www.queerty.com,['https://nayatel.com/'],isp,['PK'],Pakistani ISP Nayatels Surf Safely blockpage dns_isp_rostelecom_blocksystem,217.148.54.171,7,,['https://rt.ru/'],isp,['RU'],Russian ISP Rostelecom but the filtering pattern is very different than what customers typically see. This might be a small downstream players RKN implementation. +dns_isp_ru_AS12389,31.28.24.3,10,https://explorer.ooni.org/measurement/20220304T044651Z_webconnectivity_RU_12389_n1_BmRicVwEpc4HG72k?input=https%3A%2F%2Fwww.bbc.com%2F,[''],isp,['RU'],Serves a blockpage for citytelecom.ru +dns_isp_ru_AS15378,95.213.158.61,7,https://explorer.ooni.org/measurement/20220305T053351Z_webconnectivity_RU_15378_n1_wsIzPXq2OLRTBIAq?input=http%3A%2F%2Fwww.bbc.com,[''],isp,['RU'],AS of returned IP is mapped to russian hosting provider AS49505 (SELECTEL). Pattern is consistent for several blocked sites. +dns_isp_ru_AS197460,46.175.31.251,8,https://explorer.ooni.org/measurement/20220305T044706Z_webconnectivity_RU_197460_n1_moH7izWEhyf8UJ81?input=https%3A%2F%2Fwww.bbc.com%2Fnews,[''],isp,['RU'],"Likely used to be a blockpage. The PTR record is host-46-175-31-251.rev.zencom.ru and the AS is AS197460, which is consistent with the network where we observe it. As of 2022-03-05 the session times out when attempting to fetch the index via HTTP (port 80 is open though)." +dns_isp_ru_AS212614,62.33.207.197,10,https://explorer.ooni.org/measurement/20220303T144538Z_webconnectivity_RU_212614_n1_GNQli0Mie4NBJrkp?input=https%3A%2F%2F200rf.com%2F,[''],isp,['RU'],"netname of the ip range is ""TTK-SECURITY"". As of 2022-03-05 you get connection refused when connecting to port 80." +dns_isp_ru_AS212614_2,62.33.207.196,8,https://explorer.ooni.org/measurement/20220303T144538Z_webconnectivity_RU_212614_n1_GNQli0Mie4NBJrkp?input=https%3A%2F%2F200rf.com%2F,[''],isp,['RU'],"netname of the ip range is ""TTK-SECURITY"". As of 2022-03-05 you get connection refused when connecting to port 80." +dns_isp_ru_AS3335,84.237.49.190,8,https://explorer.ooni.org/measurement/20220304T062438Z_webconnectivity_RU_3335_n1_mn3OTB1761hQW6PB?input=https%3A%2F%2Fwww.bbc.com%2F,[''],isp,['RU'],PTR record host190.49.237.84.nsu.ru and AS is AS3335. As of 2022-03-05 a 503 error is returned when accessing page. +dns_isp_ru_AS35807,100.64.64.66,7,https://explorer.ooni.org/measurement/20220305T121024Z_webconnectivity_RU_35807_n1_QkCl4ZggAoowPpAI?input=http%3A%2F%2Fwww.bbc.com%2Fnews,[''],isp,['RU'],"Private IP space, but behaviour is consistent on AS35807 for blocked domains." +dns_isp_ru_AS42429,77.238.226.53,10,https://explorer.ooni.org/measurement/20220302T003421Z_webconnectivity_RU_42429_n1_4xzf7tPugdylxlAj?input=https%3A%2F%2Fwww.currenttime.tv%2Ftv%2Fschedule%2F92%2F,[''],isp,['RU'],Serves a blockpage +dns_isp_ru_AS51547,80.76.104.20,10,https://explorer.ooni.org/measurement/20220304T163214Z_webconnectivity_RU_51547_n1_oUciU7VqaGrmL4HA?input=https%3A%2F%2Fwww.bbc.com%2Fnews%2Fworld-51235105,[''],isp,['RU'],PTR records are block.tdsplus.ru & balance.tdsplus.ru. We get connection refused when attempting to access it. +dns_isp_ru_AS52207,188.186.157.49,10,https://explorer.ooni.org/measurement/20220305T120459Z_webconnectivity_RU_52207_n1_AlXw32CjmNRv0WxI?input=http%3A%2F%2Fwww.bbc.com%2Fnews,[''],isp,['RU'],PTR record is k8s-lb-onlyhttp-cluster-ingress.static.cc.ertelecom.ru. Serves blockpage for: http://lawfilter.ertelecom.ru/ +dns_isp_ru_AS52207_2,195.128.72.3,10,https://explorer.ooni.org/measurement/20220304T055948Z_webconnectivity_RU_52207_n1_H0I8CD7nFoMYXxCx?input=https%3A%2F%2Fwww.bbc.com%2F,[''],isp,['RU'],Serves a blockpage +dns_isp_ru_AS60139,185.77.150.2,10,https://explorer.ooni.org/measurement/20220303T120931Z_webconnectivity_RU_60139_n1_RqlkvqFzTf9cySzI?input=https%3A%2F%2Fwww.currenttime.tv%2Ftv%2Fschedule%2F92%2F,[''],isp,['RU'],Serves a cute cat blockpage +dns_isp_ru_AS8369,78.29.1.40,10,https://explorer.ooni.org/measurement/20220301T122933Z_webconnectivity_RU_8369_n1_M8IHOk8AdoWew7sE?input=https%3A%2F%2Fwww.currenttime.tv%2F,[''],isp,['RU'],"ASN of the IP is AS8369, which is consistent with the network of the measurement. Connections timeout when attempting to establish a connection on port 80." +dns_isp_ru_AS8427,188.43.20.67,10,https://explorer.ooni.org/measurement/20220305T035626Z_webconnectivity_RU_8427_n1_6zMQbsKYAsOva4L7?input=https%3A%2F%2Fwww.bbc.com%2Frussian%2F,[''],isp,['RU'],Serves a blockpage for ttk ISP +dns_isp_ru_AS8790,85.142.29.248,10,https://explorer.ooni.org/measurement/20220305T121053Z_webconnectivity_RU_8790_n1_OfI9eozoHc8C4Xkd?input=http%3A%2F%2Fwww.bbc.com%2Fnews,[''],isp,['RU'],PTR record is block.runnet.ru. We get a blockpage when attempting to access it. dns_isp_ru_rkn_enforta,87.241.223.133,10,,['https://www.enforta.ru/'],isp,['RU'],Russian ISP Enforta blockpage dns_isp_ru_rkn_ertelecom,5.3.3.17,10,https://explorer.ooni.org/measurement/20180313T233202Z_AS51645_dIEFx0okmP7iqOXN3x1p97EObb6Z1oLDQYOHFLVvfn7c0FKRW6?input=http://bluesystem.ru/,['https://ertelecom.ru/'],isp,['RU'],Russian ISP Ertelecom RKN blockpage dns_isp_ru_rkn_mastertel,83.69.208.124,10,,['http://mastertel.ru/'],isp,['RU'],"Russian ISP Mastertel (business focused, telecom provider, datacenters, etc) RKN blockpage" diff --git a/data/v1/dns.json b/data/v1/dns.json index bd22184..a4303b4 100644 --- a/data/v1/dns.json +++ b/data/v1/dns.json @@ -954,6 +954,216 @@ "https://rt.ru/" ] }, + { + "confidence_no_fp": 10, + "exp_url": "https://explorer.ooni.org/measurement/20220304T044651Z_webconnectivity_RU_12389_n1_BmRicVwEpc4HG72k?input=https%3A%2F%2Fwww.bbc.com%2F", + "expected_countries": [ + "RU" + ], + "name": "dns_isp_ru_AS12389", + "notes": "Serves a blockpage for citytelecom.ru", + "response": "31.28.24.3", + "scope": "isp", + "source": [ + "" + ] + }, + { + "confidence_no_fp": 7, + "exp_url": "https://explorer.ooni.org/measurement/20220305T053351Z_webconnectivity_RU_15378_n1_wsIzPXq2OLRTBIAq?input=http%3A%2F%2Fwww.bbc.com", + "expected_countries": [ + "RU" + ], + "name": "dns_isp_ru_AS15378", + "notes": "AS of returned IP is mapped to russian hosting provider AS49505 (SELECTEL). Pattern is consistent for several blocked sites.", + "response": "95.213.158.61", + "scope": "isp", + "source": [ + "" + ] + }, + { + "confidence_no_fp": 8, + "exp_url": "https://explorer.ooni.org/measurement/20220305T044706Z_webconnectivity_RU_197460_n1_moH7izWEhyf8UJ81?input=https%3A%2F%2Fwww.bbc.com%2Fnews", + "expected_countries": [ + "RU" + ], + "name": "dns_isp_ru_AS197460", + "notes": "Likely used to be a blockpage. The PTR record is host-46-175-31-251.rev.zencom.ru and the AS is AS197460, which is consistent with the network where we observe it. As of 2022-03-05 the session times out when attempting to fetch the index via HTTP (port 80 is open though).", + "response": "46.175.31.251", + "scope": "isp", + "source": [ + "" + ] + }, + { + "confidence_no_fp": 10, + "exp_url": "https://explorer.ooni.org/measurement/20220303T144538Z_webconnectivity_RU_212614_n1_GNQli0Mie4NBJrkp?input=https%3A%2F%2F200rf.com%2F", + "expected_countries": [ + "RU" + ], + "name": "dns_isp_ru_AS212614", + "notes": "netname of the ip range is \"TTK-SECURITY\". As of 2022-03-05 you get connection refused when connecting to port 80.", + "response": "62.33.207.197", + "scope": "isp", + "source": [ + "" + ] + }, + { + "confidence_no_fp": 8, + "exp_url": "https://explorer.ooni.org/measurement/20220303T144538Z_webconnectivity_RU_212614_n1_GNQli0Mie4NBJrkp?input=https%3A%2F%2F200rf.com%2F", + "expected_countries": [ + "RU" + ], + "name": "dns_isp_ru_AS212614_2", + "notes": "netname of the ip range is \"TTK-SECURITY\". As of 2022-03-05 you get connection refused when connecting to port 80.", + "response": "62.33.207.196", + "scope": "isp", + "source": [ + "" + ] + }, + { + "confidence_no_fp": 8, + "exp_url": "https://explorer.ooni.org/measurement/20220304T062438Z_webconnectivity_RU_3335_n1_mn3OTB1761hQW6PB?input=https%3A%2F%2Fwww.bbc.com%2F", + "expected_countries": [ + "RU" + ], + "name": "dns_isp_ru_AS3335", + "notes": "PTR record host190.49.237.84.nsu.ru and AS is AS3335. As of 2022-03-05 a 503 error is returned when accessing page.", + "response": "84.237.49.190", + "scope": "isp", + "source": [ + "" + ] + }, + { + "confidence_no_fp": 7, + "exp_url": "https://explorer.ooni.org/measurement/20220305T121024Z_webconnectivity_RU_35807_n1_QkCl4ZggAoowPpAI?input=http%3A%2F%2Fwww.bbc.com%2Fnews", + "expected_countries": [ + "RU" + ], + "name": "dns_isp_ru_AS35807", + "notes": "Private IP space, but behaviour is consistent on AS35807 for blocked domains.", + "response": "100.64.64.66", + "scope": "isp", + "source": [ + "" + ] + }, + { + "confidence_no_fp": 10, + "exp_url": "https://explorer.ooni.org/measurement/20220302T003421Z_webconnectivity_RU_42429_n1_4xzf7tPugdylxlAj?input=https%3A%2F%2Fwww.currenttime.tv%2Ftv%2Fschedule%2F92%2F", + "expected_countries": [ + "RU" + ], + "name": "dns_isp_ru_AS42429", + "notes": "Serves a blockpage", + "response": "77.238.226.53", + "scope": "isp", + "source": [ + "" + ] + }, + { + "confidence_no_fp": 10, + "exp_url": "https://explorer.ooni.org/measurement/20220304T163214Z_webconnectivity_RU_51547_n1_oUciU7VqaGrmL4HA?input=https%3A%2F%2Fwww.bbc.com%2Fnews%2Fworld-51235105", + "expected_countries": [ + "RU" + ], + "name": "dns_isp_ru_AS51547", + "notes": "PTR records are block.tdsplus.ru & balance.tdsplus.ru. We get connection refused when attempting to access it.", + "response": "80.76.104.20", + "scope": "isp", + "source": [ + "" + ] + }, + { + "confidence_no_fp": 10, + "exp_url": "https://explorer.ooni.org/measurement/20220305T120459Z_webconnectivity_RU_52207_n1_AlXw32CjmNRv0WxI?input=http%3A%2F%2Fwww.bbc.com%2Fnews", + "expected_countries": [ + "RU" + ], + "name": "dns_isp_ru_AS52207", + "notes": "PTR record is k8s-lb-onlyhttp-cluster-ingress.static.cc.ertelecom.ru. Serves blockpage for: http://lawfilter.ertelecom.ru/", + "response": "188.186.157.49", + "scope": "isp", + "source": [ + "" + ] + }, + { + "confidence_no_fp": 10, + "exp_url": "https://explorer.ooni.org/measurement/20220304T055948Z_webconnectivity_RU_52207_n1_H0I8CD7nFoMYXxCx?input=https%3A%2F%2Fwww.bbc.com%2F", + "expected_countries": [ + "RU" + ], + "name": "dns_isp_ru_AS52207_2", + "notes": "Serves a blockpage", + "response": "195.128.72.3", + "scope": "isp", + "source": [ + "" + ] + }, + { + "confidence_no_fp": 10, + "exp_url": "https://explorer.ooni.org/measurement/20220303T120931Z_webconnectivity_RU_60139_n1_RqlkvqFzTf9cySzI?input=https%3A%2F%2Fwww.currenttime.tv%2Ftv%2Fschedule%2F92%2F", + "expected_countries": [ + "RU" + ], + "name": "dns_isp_ru_AS60139", + "notes": "Serves a cute cat blockpage", + "response": "185.77.150.2", + "scope": "isp", + "source": [ + "" + ] + }, + { + "confidence_no_fp": 10, + "exp_url": "https://explorer.ooni.org/measurement/20220301T122933Z_webconnectivity_RU_8369_n1_M8IHOk8AdoWew7sE?input=https%3A%2F%2Fwww.currenttime.tv%2F", + "expected_countries": [ + "RU" + ], + "name": "dns_isp_ru_AS8369", + "notes": "ASN of the IP is AS8369, which is consistent with the network of the measurement. Connections timeout when attempting to establish a connection on port 80.", + "response": "78.29.1.40", + "scope": "isp", + "source": [ + "" + ] + }, + { + "confidence_no_fp": 10, + "exp_url": "https://explorer.ooni.org/measurement/20220305T035626Z_webconnectivity_RU_8427_n1_6zMQbsKYAsOva4L7?input=https%3A%2F%2Fwww.bbc.com%2Frussian%2F", + "expected_countries": [ + "RU" + ], + "name": "dns_isp_ru_AS8427", + "notes": "Serves a blockpage for ttk ISP", + "response": "188.43.20.67", + "scope": "isp", + "source": [ + "" + ] + }, + { + "confidence_no_fp": 10, + "exp_url": "https://explorer.ooni.org/measurement/20220305T121053Z_webconnectivity_RU_8790_n1_OfI9eozoHc8C4Xkd?input=http%3A%2F%2Fwww.bbc.com%2Fnews", + "expected_countries": [ + "RU" + ], + "name": "dns_isp_ru_AS8790", + "notes": "PTR record is block.runnet.ru. We get a blockpage when attempting to access it.", + "response": "85.142.29.248", + "scope": "isp", + "source": [ + "" + ] + }, { "confidence_no_fp": 10, "exp_url": "",