Abstract pattern of interconnected red and black data lines suggesting network traffic on a dark background

Net Neutrality Monitor analyses how Internet Service Providers resolve, block and inject DNS traffic. The platform tracks servers under examination, surfaces country-level reports, and publishes a live blacklist of injected addresses.

View Country Reports
Continuous DNS probing across participating ISPs
Country-level neutrality scoring and breakdowns
Blacklist of injected addresses from probe data
Community-driven via forum, IRC and wiki

What the platform does

Net Neutrality Monitor provides real-time analysis of the censorship systems used by Internet Service Providers. It tracks DNS servers currently under examination, lists known DNS servers that respond correctly to specific tests, and produces country reports on the types of blocking detected — from gambling and file-sharing to streaming and image hosting.

  • DNS probes
  • Country reports
  • Injected addresses
  • ISP scoring
About the Project
Minimal line drawing of a server rack and connecting cables on a white background

Coverage across the monitored regions

Country reports are available for China, Colombia, Denmark, Estonia, Finland, Italy, Korea Republic of, Sweden, Switzerland, Thailand, Turkey and additional regions as new probes are activated.

  • 11+Countries with published reports
  • LiveDNS server list under examination
  • CC BY 2.5 IT / BY-SA 3.0Content licensing applied
  • OpenDonations and probe submissions
Browse DNS List
Monitored since 2010 Geo data · ipinfodb

Geographic redirection and the results we measure

Geographic redirection can make the same URL appear available in one place and blocked in another. The cause may be a DNS resolver returning a regional address, a content delivery network selecting a nearby cache, an ISP steering traffic, or the destination applying a location-based policy. Each layer changes what a monitoring probe observes, so a failed request is not automatically proof of censorship.

Net Neutrality Monitor makes these observations more transparent by tracking filtering by ISPs and DNS servers, publishing country reports, and exposing blacklist, probe, DNS, and statistical data. Users can submit URLs or IP addresses for review. As a volunteer-supported beta powered by AirVPN, with results intended for indicative research, the project depends on clear geographic context.

Why geography alters observed access

DNS resolution is the first fork in the path. An authoritative server can use the resolver’s location, resolver policy, or an EDNS Client Subnet hint to return a country-specific address. Australian ISPs may also enforce their own blocked-domain lists, while public resolvers can operate under an entirely different policy regime.

After resolution, network routing determines the next stage. Anycast networks may direct traffic to a nearby cloud or CDN edge, while Australian internet exchanges carry domestic and international traffic through different providers. The destination then evaluates the source address and may apply licensing, account, fraud-prevention, or jurisdictional restrictions.

These layers produce distinct outcomes. A DNS block, an ISP-level reset, a CDN refusal, and a geo-restricted response can all appear similar to a simple monitoring client. Reliable analysis therefore depends on identifying where each response originated and which policy could have produced it.

Australian networks and a regional market

Australia creates particularly visible geographic contrasts. Sydney and Melbourne host major peering points and CDN caches, while traffic from Perth to Europe and North America often follows longer paths. Brisbane, Adelaide, and Canberra have different ISP backhaul and international gateway mixes, meaning traffic sourced from each city cannot be treated as interchangeable.

The local market adds another layer. Fixed broadband and mobile networks associated with Telstra, Optus, Vodafone, TPG, and iiNet may use different recursive resolvers, internal caches, and traffic-management systems. A blocked result on one Australian access network therefore does not automatically describe every Australian connection.

Australian users also encounter location-aware services around AFL and NRL streaming, cricket, wagering, news, and social platforms. National licensing arrangements and state wagering regimes can alter how an overseas service responds. That commercial differentiation should be labelled as a geo-restriction rather than censorship unless the evidence identifies deliberate interference. Analysis of international shutdowns adds a further caveat: a sudden national outage may resemble systematic filtering even though its cause and duration are different.

Redirection inside the measurement workflow

Each submitted URL or IP address passes through a chain that can introduce location-dependent behaviour. DNS may return a country-specific address, a CNAME may lead to a regional CDN hostname, and the HTTP request may receive a redirect to another service. Only the final response is visible to a user checking whether a site loads.

Domain-specific evidence can expose weaknesses in this process. The Mines game house edge shows how an ordinary service can combine product rules with broader commercial considerations. A successful page load does not mean every linked endpoint was reachable, while an inaccessible helper request does not prove that the main service was filtered.

A defensible workflow preserves the DNS answer and TTL, resolver identity, query type, source autonomous system, address family, redirect chain, response headers, and timing data. Repeated observations are needed because CDN rotation, cached answers, and transient routing failures can resemble a persistent block. Only after comparing these fields can a result support a precise claim about filtering.

Reading the 2024 blocked-content baseline

Historical data provides context for current observations, but it cannot remove location effects. A review of 2024 blocked-content findings helps identify patterns in the monitored corpus and the categories used to classify blocked resources.

The categories should not be treated as interchangeable. DNS filtering may occur before any connection to the destination, while an ISP block can affect only particular protocols or networks. A site may also return a server error because of authentication, rate limiting, expired certificates, or regional eligibility requirements rather than deliberate interference.

For Australian results, the baseline must therefore be tied to the country, resolver, and network path attached to each observation. A change in category frequency may reflect redirected traffic rather than a new policy. Comparing the same hostname across controlled locations is more informative than relying only on aggregate counts.

Keeping measurements secure and defensible

Monitoring records can contain sensitive information. A submitted URL may expose an internal project name, a personal account path, or a service not intended for public collection. The smallest useful payload should be stored, access should be limited, and identifiers should be removed or transformed before publication.

An Australian public-safety article on drone evidence encryption standards illustrates the value of cryptographic integrity when material may enter criminal proceedings. The parallel for Internet measurement is not to equate a screenshot with proof, but to retain raw responses, timestamps, resolver details, and integrity hashes that allow another researcher to examine the original observation.

The beta status of Net Neutrality Monitor reinforces that distinction. Volunteer reviewers may verify submitted URLs, cross-check DNS behaviour, and compare independent probes, but their records remain indicative rather than forensic. Clear methodology and restrained claims are therefore part of the evidence, not separate from it.

Comparing Australian and overseas observations

The comparison below separates the location of the resolver from the location of the probe and the route taken by the request.

Configuration Common observation Defensible interpretation
Australian resolver and Australian probe Regional address and nearby CDN route Baseline for that specific access path
Overseas resolver and Australian probe Foreign answer reached through an Australian network Isolates DNS location from network egress
Australian resolver and overseas probe Australian answer reached from another country Indicates resolver-side rather than user-side location
IPv4 and IPv6 from the same place Different addresses, peers, or routing outcomes Tests address-family effects rather than geography alone
Repeated hostname and submitted IP address CNAME, CDN rotation, or literal endpoint mismatch Confirms the actual endpoint before comparison

No row should be collapsed into a single country score. Resolver policy, source address, routing, and destination rules may produce the same visible symptom for different reasons. A finding becomes stronger when the configuration explains that symptom and repeated observations remain consistent.

A practical record for interpreting results

A useful monitoring result records more than a blocked or available status. It identifies the resolver, probe location, source network, address family, DNS answer, redirect chain, and time of observation. It also states whether the behaviour is consistent with ISP filtering, DNS intervention, geo-restriction, or service unavailability.

Australian comparisons are strongest when the same hostname and measurement method are tested through multiple resolvers and networks, including connections from Sydney, Melbourne, Brisbane, Perth, and Adelaide. Submitted IP addresses should be checked against fresh DNS results so that stale CDN mappings or changed endpoints do not create misleading comparisons.

The practical takeaway is to read every result as a location-bound observation: identify the resolver, probe, and route, distinguish policy from interference, and preserve the evidence supporting the classification.

Transparent, analytical, community-run

The platform documents how ISPs handle neutrality on the wire, with method notes, country breakdowns and a public blacklist of injected addresses. — Project methodology
Minimal line drawing of a person silhouette with a speech bubble on neutral background

Country reports at a glance

Snapshots from the published country reports. Open a tile to view the full regional analysis on the Reports page.

Minimal line drawing of Italy outline in red on white Minimal line drawing of Denmark outline in red on white Minimal line drawing of Switzerland outline in red on white Minimal line drawing of Thailand outline in red on white Minimal line drawing of Turkey outline in red on white Minimal line drawing of Malaysia outline in red on white Minimal line drawing of Belgium outline in red on white

Follow new probes, blacklist updates and country reports as they are published.

Subscribe