{
  "generated_at": "2026-09-15T06:57:15.933401+00:00",
  "method_version": 3,
  "signal": "bleedthrough",
  "title": "GFW injector fleet",
  "scope": "apparatus-layer tomography of the Great Firewall's DNS-injector fleet: forged-IP pools, a floor on parallel injector responses, and operational events, measured from outside China",
  "method": "the censor as sensor — benign stateless UDP DNS probes provoke the GFW's own injectors to answer; we fingerprint the fleet from the forgeries. Transport this round: direct injection over dark IPs. Direct receive windows overlap; outbound sends remain rate-capped. Injector count is a FLOOR, not a census: each injector answers a given query at most once, so a silent injector is undercounted.",
  "probe_domain": "torproject.org",
  "vantages_probed": 216,
  "vantages_injecting": 210,
  "distinct_pools": 6,
  "distinct_pools_basis": "union of forged IPs per region, not per-target samples",
  "max_process_count": 2,
  "process_count_semantics": "floor",
  "pool_sampling_suspected": true,
  "provenance": {
    "vantage_count": 1,
    "vantage_kind": "single fixed-IP VPS outside China",
    "vantage_country": "DE",
    "flow_id_policy": "ephemeral source port per query (paths not pinned)",
    "burst": 24,
    "rate_per_sec": 5.0,
    "wait_s": 1.2,
    "queries_attempted": 5184,
    "transports": {
      "direct": {
        "ran": true,
        "targets": 216
      },
      "open_resolver": {
        "ran": false,
        "targets": null
      }
    },
    "code_version": "b22d809bca5ca8aed8255e8a89a06a88dc9cbcb9",
    "authorization": {
      "live_opt_in": true,
      "fixed_box_opt_in": true
    },
    "caveat": "single-vantage round: observed censorship varies with network path, so cross-region comparisons from one prober are not identifiable (cf. arXiv:2406.19304)."
  },
  "events": [
    {
      "kind": "pool_rotation",
      "vantage": "CN-BJ/AS4808",
      "detail": "forged-IP pool rotated",
      "severity": "low"
    },
    {
      "kind": "pool_rotation",
      "vantage": "CN-GD/AS17623",
      "detail": "forged-IP pool rotated",
      "severity": "low"
    },
    {
      "kind": "pool_rotation",
      "vantage": "CN-SH/AS4812",
      "detail": "forged-IP pool rotated",
      "severity": "low"
    },
    {
      "kind": "pool_rotation",
      "vantage": "CN/AS4134",
      "detail": "forged-IP pool rotated",
      "severity": "low"
    },
    {
      "kind": "pool_rotation",
      "vantage": "CN/AS4837",
      "detail": "forged-IP pool rotated",
      "severity": "low"
    },
    {
      "kind": "pool_rotation",
      "vantage": "CN/AS9808",
      "detail": "forged-IP pool rotated",
      "severity": "low"
    }
  ],
  "last_changed_at": "2026-09-14T00:57:14.751063+00:00"
}