Statistics of used site blocking tools

I collected here my virus statistics on the types of blocking sites used on the provider side.

The names of the providers may be inaccurate due to the fact that the GeMOIP database from MaxMind was used fresh, but I could not steal the GeoISP database fresh, so the version from September 2012 was used. Because of this, sometimes in the database you can find the measurement from Russia, but the provider, for example, from the Czech Republic. However, this is not a problem.

So, some data:

• 5076 unique (in terms of IP, not provider) measurements from the Russian Federation
• 815 providers
• 315 cities

')


As you can see, the most popular city in Russia turned out to be "". 2.5 times more people live in it than in the capital!



DPI_IP - blocking using DPI, which checks the blocking URL only on certain IP and port 80.
DPI_FULL - blocking using DPI on all IP and all ports.
IP blocking by IP address.
DNS_SPOOF — A-record fake from DNS server.
DNS_REDIRECT — redirects DNS requests from non-provider DNS servers to provider.
DNS_BLOCK — block non-provider DNS servers.

As we can see, for most users, the provider uses DPI. In second place is the unloved IP blocking.
Here it is important to note one thing: some providers block some sites completely, and some allow via DPI. For a while, the utility was checking only through gelbooru.com, which turned out to be completely blocked by some users. As a result, it is displayed as IP blocking, not as DPI. However, if the user runs the utility of a later version (and there is reason to believe that most users have done this), then the measurement can be considered more or less true.

It is completely incomprehensible to me the combination of DPI and substitution of A-records, or redirection to your DNS. I can not answer the question, who had the idea to do so, and why.
I am glad that a decent number of users do not block any sites at all.

Types of locks for some providers

The vast majority of Rostelecom users still have IP blocking, however, in some places they have already implemented DPI based on a proxy server.



The award “The most incomprehensible provider of Russia” goes to ER-Telecom.



DPI_FULL is sad.

Types of locks for some cities

A table will be created from the database on wiki.bloku.net of the form provider → lock type.

PS

^{I was somewhat surprised that in GeoIP City the Cyrillic "" is replaced by "ë" (LATIN SMALL LETTER E WITH DIAERESIS, U + 00EB). So, Priozersk became Priozërsk, Kiselevsk Kiselëvsk, and so on.}