From 47b3d8f40635b1beb3d07ec00f176a1789c6cd1f Mon Sep 17 00:00:00 2001 From: sitinurliza Date: Thu, 26 Sep 2024 10:41:54 +0800 Subject: [PATCH 1/5] Add fingerprints from iMAP 2024 analysis --- fingerprints_dns.csv | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/fingerprints_dns.csv b/fingerprints_dns.csv index f633f45..914bf5f 100644 --- a/fingerprints_dns.csv +++ b/fingerprints_dns.csv @@ -197,4 +197,19 @@ ooni.ru_dns_sevensky_1,nat,,dns,full,81.200.2.238,5,RU,,, ooni.ru_dns_trk_1,nat,,dns,full,171.25.175.70,5,RU,,, ooni.ru_dns_macomnet_1,nat,,dns,full,195.128.72.3,5,RU,,, ooni.id_dns_hspnet,isp,,dns,full,43.225.64.187,5,ID,ooni,https://explorer.ooni.org/measurement/20230326T063516Z_webconnectivity_ID_58495_n1_zF3O4qZt3eXv95m5?input=http://pornhub.com, -ooni.id_blokir_winet,isp,,dns,full,202.57.25.3,5,ID,,,"Blockpage from one of local Indonesian ISP called WINET" +ooni.id_blokir_winet,isp,,dns,full,202.57.25.3,5,ID,,,"Blockpage from one of local Indonesian ISP called WINET", +ooni.id_dns_126,nat,,dns,full,202.89.117.64,10,ID,sinarproject,https://explorer.ooni.org/measurement/20230918T202606Z_webconnectivity_ID_131111_n1_xmCGjc4TN0rOS0wX?input=http://www.warungbebas.com/,block_page_govt +ooni.in_dns_16,nat,,dns,full,202.164.51.25,10,IN,sinarproject,https://explorer.ooni.org/measurement/20231118T224935Z_webconnectivity_IN_17917_n1_eNd6z1qxp3xBGU4r?input=https://www.kwai.com/,block_page_govt +ooni.in_dns_17,nat,,dns,full,123.176.40.68,10,IN,cis,, +ooni.in_dns_18,nat,,dns,full,106.51.113.17,10,IN,cis,, +ooni.in_dns_19,nat,,dns,full,123.176.40.69,10,IN,cis,, +ooni.in_dns_20,nat,,dns,full,49.207.46.38,10,IN,cis,, +ooni.in_dns_21,nat,,dns,full,123.176.40.67,10,IN,cis,, +ooni.in_dns_22,nat,,dns,full,49.205.75.6,10,IN,cis,, +ooni.id_dns_127,nat,,dns,full,103.189.63.245,10,ID,sinarproject,https://explorer.ooni.org/measurement/20240408122844.705891_ID_webconnectivity_fcc3eb440ecf6a92,blockpage_govt +ooni.sg_dns_2,nat,,dns,full,52.223.25.91,10,SG,sinarproject,https://explorer.ooni.org/measurement/20240401T140332Z_webconnectivity_SG_55430_n1_oEr8jRvYn6pUc89o?input=http://statestimesreview.com/,blockpage_govt +ooni.sg_dns_3,nat,,dns,full,35.71.144.125,10,SG,sinarproject,https://explorer.ooni.org/measurement/20240401T153410Z_webconnectivity_SG_9506_n1_RoIL0XRdoZoUyoC7?input=http://statestimesreview.com/,blockpage_govt +ooni.sg_dns_4,nat,,dns,full,202.166.118.162,10,SG,sinarproject,https://explorer.ooni.org/measurement/20240402T194713Z_webconnectivity_SG_9506_n1_zkWNoCmQWmVNKDV4?input=http://123tvnow.com/,blockpage_govt +ooni.sg_dns_5,nat,,dns,full,13.248.219.95,10,SG,sinarproject,https://explorer.ooni.org/measurement/20240409T220428Z_webconnectivity_SG_9506_n1_vBFoMNxDqFY2eoz7?input=https://22bets.me/,blockpage_govt +ooni.sg_dns_6,nat,,dns,full,76.223.70.70,10,SG,sinarproject,https://explorer.ooni.org/measurement/20240409T220428Z_webconnectivity_SG_9506_n1_vBFoMNxDqFY2eoz7?input=https://eubetsg.com/,blockpage_govt +ooni.sg_dns_7,nat,,dns,full,103.7.201.57,10,SG,sinarproject,https://explorer.ooni.org/measurement/20240414T064623Z_webconnectivity_SG_133136_n1_4OZQ0OsQSBql33mY?input=http://statestimesreview.com/,blockpage_govt From 3796f825cddd15134c991e4862fbb5b924af4826 Mon Sep 17 00:00:00 2001 From: sitinurliza Date: Thu, 26 Sep 2024 10:43:13 +0800 Subject: [PATCH 2/5] Add fingerprints from iMAP 2024 analysis --- fingerprints_http.csv | 19 +++++++++++-------- 1 file changed, 11 insertions(+), 8 deletions(-) diff --git a/fingerprints_http.csv b/fingerprints_http.csv index 64dc50f..613e692 100644 --- a/fingerprints_http.csv +++ b/fingerprints_http.csv @@ -1717,20 +1717,23 @@ ooni.in_11,inst,,body,contains,Access Denied,10,IN,sinarproject,h ooni.in_12,prod,,body,contains,Web Filter Violation,10,IN,sinarproject,https://explorer.ooni.org/measurement/20220225T120211Z_webconnectivity_IN_24309_n1_iWLMMLB8FueOLTAT?input=http%3A%2F%2Fwww.scarleteen.com%2F, ooni.th_9,nat,,body,contains,Tcsd.info,10,TH,sinarproject,https://explorer.ooni.org/measurement/20220408T085807Z_webconnectivity_TH_132061_n1_1dHoWEHzenxzA5pP?input=http%3A%2F%2Fweareallhuman2.info%2F, ooni.th_10,vbw,,body,contains,,5,TH,sinarproject,https://explorer.ooni.org/measurement/20220130T133710Z_webconnectivity_TH_45758_n1_AbTZrLWKG8yaJKfN?input=http%3A%2F%2Fwww.bbc.com%2Fnews%2Fworld-51235105, -ooni.th_11,inst,,body,contains,"

Web Page Blocked

+ooni.th_11,inst,,body,contains,"

Web Page Blocked

The web page you are trying to visit has been blocked in accordance with company policy. Please contact your system administrator if you believe this is an error.

",10,TH,sinarproject,https://explorer.ooni.org/measurement/20220425T041106Z_webconnectivity_TH_137850_n1_vtA5rvaceV7ooE0f?input=http%3A%2F%2F66.111.2.131%3A9030%2Ftor%2Fserver%2Fauthority, -ooni.th_12,inst,,body,contains,"

Application Blocked

-
+ooni.th_12,inst,,body,contains,"

Application Blocked

+

The application you are trying to use has been blocked in accordance with company policy. Please contact your system administrator if you believe this is an error.

",10,TH,sinarproject,https://explorer.ooni.org/measurement/20220511T102643Z_webconnectivity_TH_137850_n1_d8w6m3XRuM3WNJMO?input=http%3A%2F%2Fwww.javjunkies.com%2F , -ooni.th_13,inst,,body,contains,"

Web Page Blocked!

-
+ooni.th_13,inst,,body,contains,"

Web Page Blocked!

+

You have tried to access a web page which is in violation of your internet usage policy.

",10,TH,sinarproject,https://explorer.ooni.org/measurement/20220404T123046Z_webconnectivity_TH_7470_n1_AqWFFv6oEpzn5NXC?input=http%3A%2F%2Fwww.clubdicecasino.com%2F, ooni.th_14,vbw,,body,contains,Traccar,5,TH,sinarproject,https://explorer.ooni.org/measurement/20220509T211322Z_webconnectivity_TH_45629_n1_QHXmIfXYhtCyxsoL?input=http%3A%2F%2Fwww.postcards-for-iran.org%2F, -ooni.vn_http_1,isp,,body,contains,"
404 Page
- +ooni.vn_http_1,isp,,body,contains,"
404 Page
+ We're sorry but the page you're looking for could not be found!!!!!",8,VN,sinarproject,https://explorer.ooni.org/measurement/20220622T090719Z_webconnectivity_VN_7552_n1_CxwTGyhN9nMW0Dsa?input=http%3A%2F%2Fendtorturevn.org%2F,Highly likely a ISP/national block as websites categorised as HUMR show these responses ooni.id_39,prod,,body,contains,Please Wait... | Cloudflare,5,ID,sinarproject,https://explorer.ooni.org/measurement/20220408T044604Z_webconnectivity_ID_7713_n1_aYncTjnSoJzT6qq6?input=https%3A%2F%2Fwww.coinbase.com%2F, ooni.mm_http_2,prod,,body,contains,Please Wait... | Cloudflare,5,MM,sinarproject,https://explorer.ooni.org/measurement/20220408T193109Z_webconnectivity_MM_136442_n1_CaQubW28puuK1ilG?input=https%3A%2F%2Fwww.clintonfoundation.org%2F, -ooni.kh_http_1,prod,,body,contains,"ERROR: Forbidden +ooni.kh_http_1,prod,,body,contains,"ERROR: Forbidden

ERROR: Forbidden

",5,KH,sinarproject,https://explorer.ooni.org/measurement/20220224T094522Z_webconnectivity_KH_23673_n1_e5yYOgzvoVeMC7GD?input=http%3A%2F%2Fwww.utorrent.com%2F, ooni.hk_http_1,vbw,,body,contains,"One moment, please...",5,HK,sinarproject,https://explorer.ooni.org/measurement/20220524T172659Z_webconnectivity_HK_141677_n1_t7dQqq5WexfdfgxQ?input=https%3A%2F%2Fwww.tgr.org.hk%2Findex.php%2Fzh%2F, +ooni.id_kominfo,nat,,body,contains,aduankonten@kominfo.go.id,10,ID,sinarproject,https://explorer.ooni.org/measurement/20240328T115128Z_webconnectivity_ID_138089_n1_PQrqL6BfAmnkDwiu?input=http://infopapua.org/, +ooni.th_mdes,nat,,body,contains,mdes.jpg,10,TH,sinarproject,https://explorer.ooni.org/measurement/20230913T182925Z_webconnectivity_TH_17552_n1_oyj46PvHHphoEy0N?input=http://en.wikipedia.org/wiki/Bhumibol_Adulyadej, +ooni.in_airtel,nat,,body,contains,http://www.airtel.in/court-orders/,10,IN,sinarproject,https://explorer.ooni.org/m/20240401004715.467243_IN_webconnectivity_b94ac34767a8e129, From f0d36485340ada8e25a140b9e231de6f22f204a2 Mon Sep 17 00:00:00 2001 From: sitinurliza Date: Thu, 26 Sep 2024 10:43:37 +0800 Subject: [PATCH 3/5] Add fingerprints from iMAP 2024 analysis --- fingerprints_http.csv | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fingerprints_http.csv b/fingerprints_http.csv index 613e692..4143795 100644 --- a/fingerprints_http.csv +++ b/fingerprints_http.csv @@ -1736,4 +1736,4 @@ ooni.kh_http_1,prod,,body,contains,"ERROR: Forbidden ooni.hk_http_1,vbw,,body,contains,"One moment, please...",5,HK,sinarproject,https://explorer.ooni.org/measurement/20220524T172659Z_webconnectivity_HK_141677_n1_t7dQqq5WexfdfgxQ?input=https%3A%2F%2Fwww.tgr.org.hk%2Findex.php%2Fzh%2F, ooni.id_kominfo,nat,,body,contains,aduankonten@kominfo.go.id,10,ID,sinarproject,https://explorer.ooni.org/measurement/20240328T115128Z_webconnectivity_ID_138089_n1_PQrqL6BfAmnkDwiu?input=http://infopapua.org/, ooni.th_mdes,nat,,body,contains,mdes.jpg,10,TH,sinarproject,https://explorer.ooni.org/measurement/20230913T182925Z_webconnectivity_TH_17552_n1_oyj46PvHHphoEy0N?input=http://en.wikipedia.org/wiki/Bhumibol_Adulyadej, -ooni.in_airtel,nat,,body,contains,http://www.airtel.in/court-orders/,10,IN,sinarproject,https://explorer.ooni.org/m/20240401004715.467243_IN_webconnectivity_b94ac34767a8e129, +ooni.in_airtel,nat,,body,contains,http://www.airtel.in/court-orders/,10,IN,sinarproject,https://explorer.ooni.org/m/20240401004715.467243_IN_webconnectivity_b94ac34767a8e129 From ead086636e68986cd5fb4f841b8b9e9f16d9369a Mon Sep 17 00:00:00 2001 From: Siti N <86417001+sitinurliza95@users.noreply.github.com> Date: Thu, 26 Sep 2024 10:47:01 +0800 Subject: [PATCH 4/5] Update fingerprints_dns.csv --- fingerprints_dns.csv | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fingerprints_dns.csv b/fingerprints_dns.csv index 914bf5f..8d5a938 100644 --- a/fingerprints_dns.csv +++ b/fingerprints_dns.csv @@ -197,7 +197,7 @@ ooni.ru_dns_sevensky_1,nat,,dns,full,81.200.2.238,5,RU,,, ooni.ru_dns_trk_1,nat,,dns,full,171.25.175.70,5,RU,,, ooni.ru_dns_macomnet_1,nat,,dns,full,195.128.72.3,5,RU,,, ooni.id_dns_hspnet,isp,,dns,full,43.225.64.187,5,ID,ooni,https://explorer.ooni.org/measurement/20230326T063516Z_webconnectivity_ID_58495_n1_zF3O4qZt3eXv95m5?input=http://pornhub.com, -ooni.id_blokir_winet,isp,,dns,full,202.57.25.3,5,ID,,,"Blockpage from one of local Indonesian ISP called WINET", +ooni.id_blokir_winet,isp,,dns,full,202.57.25.3,5,ID,,,"Blockpage from one of local Indonesian ISP called WINET" ooni.id_dns_126,nat,,dns,full,202.89.117.64,10,ID,sinarproject,https://explorer.ooni.org/measurement/20230918T202606Z_webconnectivity_ID_131111_n1_xmCGjc4TN0rOS0wX?input=http://www.warungbebas.com/,block_page_govt ooni.in_dns_16,nat,,dns,full,202.164.51.25,10,IN,sinarproject,https://explorer.ooni.org/measurement/20231118T224935Z_webconnectivity_IN_17917_n1_eNd6z1qxp3xBGU4r?input=https://www.kwai.com/,block_page_govt ooni.in_dns_17,nat,,dns,full,123.176.40.68,10,IN,cis,, From ef9a5fe5024e1e1dd59a9d8e37ecfbed75ce968e Mon Sep 17 00:00:00 2001 From: Siti N <86417001+sitinurliza95@users.noreply.github.com> Date: Thu, 26 Sep 2024 10:48:52 +0800 Subject: [PATCH 5/5] Update fingerprints_http.csv --- fingerprints_http.csv | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fingerprints_http.csv b/fingerprints_http.csv index 4143795..613e692 100644 --- a/fingerprints_http.csv +++ b/fingerprints_http.csv @@ -1736,4 +1736,4 @@ ooni.kh_http_1,prod,,body,contains,"ERROR: Forbidden ooni.hk_http_1,vbw,,body,contains,"One moment, please...",5,HK,sinarproject,https://explorer.ooni.org/measurement/20220524T172659Z_webconnectivity_HK_141677_n1_t7dQqq5WexfdfgxQ?input=https%3A%2F%2Fwww.tgr.org.hk%2Findex.php%2Fzh%2F, ooni.id_kominfo,nat,,body,contains,aduankonten@kominfo.go.id,10,ID,sinarproject,https://explorer.ooni.org/measurement/20240328T115128Z_webconnectivity_ID_138089_n1_PQrqL6BfAmnkDwiu?input=http://infopapua.org/, ooni.th_mdes,nat,,body,contains,mdes.jpg,10,TH,sinarproject,https://explorer.ooni.org/measurement/20230913T182925Z_webconnectivity_TH_17552_n1_oyj46PvHHphoEy0N?input=http://en.wikipedia.org/wiki/Bhumibol_Adulyadej, -ooni.in_airtel,nat,,body,contains,http://www.airtel.in/court-orders/,10,IN,sinarproject,https://explorer.ooni.org/m/20240401004715.467243_IN_webconnectivity_b94ac34767a8e129 +ooni.in_airtel,nat,,body,contains,http://www.airtel.in/court-orders/,10,IN,sinarproject,https://explorer.ooni.org/m/20240401004715.467243_IN_webconnectivity_b94ac34767a8e129,