Since December 2025, the Active Probing method has been employed to protect the Russian internet segment. This technique involves scanning IPv4 addresses to identify active services, such as NGINX web servers, SSH servers, and GOST-VPN servers. If restricted services are detected, the IP address is blocked within the territory of the Russian Federation.
While there is no public list of prohibited services, the primary cause for recent IP blocks is the presence of tools used to bypass internet restrictions. Users are advised to utilize the Censys platform to analyze their IP addresses. The analysis should focus on identifying suspicious configurations, such as HTTPS certificates impersonating major services like Yandex, Google, or Apple.
To verify if an IP address is currently blocked, users can perform a traceroute using tools like mtr or winmtr. A blocked address typically results in the trace terminating early, often before leaving the local provider's network. Comparing the results of a known accessible address against a potentially blocked one helps confirm the status of the server.
