David Belson (@[email protected])

Now: TBD
Past: @CloudflareRadar @Cloudflare @InternetDsrptn @Fastly @ISOC_Pulse @InternetSociety @InternetIntel @Akamai_SotI @Akamai
All tweets are my own.

[David Belson (@[email protected]) @dbelson]

In a Facebook post, Syria's Ministry of Communications & Information Technology announced that there will be no communication cuts during the general exams this year, in contrast to #Internet shutdowns implemented in past years.

https://t.co/DwLx7EorIT

https://t.co/eeLk03iJKB

[David Belson (@[email protected]) @dbelson]

@joinraaznet @netblocks @kentikinc @IODA_live @CloudflareRadar Great balanced overview -- thank you for posting. No one organization has a definitive overview of what is happening in these sorts of situations, but a clearer picture emerges when the data is viewed in aggregate.

[David Belson (@[email protected]) @dbelson]

@DougMadory @mehrdad__ir @Ammir @TheWorld From Iran? No, probably not.

[David Belson (@[email protected]) @dbelson]

@DougMadory @mehrdad__ir @Ammir @TheWorld Having said that, UDP still accounts for the largest share of requests to 1.1.1.1 from #Iran: https://t.co/2SMFeOBDup

[David Belson (@[email protected]) @dbelson]

@DougMadory @mehrdad__ir @Ammir @TheWorld That TLD ranking is based on DNS Magnitude -- see https://t.co/px3jIMM99j for how it's calculated. It would include .ir requests from networks outside the country as well. Over last 48h, largest shares of .ir requests have come from US & DE: https://t.co/HASc5kJwnp

[David Belson (@[email protected]) @dbelson]

Although TXT records still comprise the largest share of requests to @1111Resolver from #Iran, request shares for A and AAAA records have roughly doubled.

https://t.co/elujeH93wB

[David Belson (@[email protected]) @dbelson]

🧵Some additional perspectives on the (limited) restoration of #Internet connectivity in #Iran on May 26:

Based on request traffic to @1111Resolver, the rank of the .ir ccTLD has jumped from #144 on May 25 to #96 on May 28.

https://t.co/PYvyEZ7d2W

[David Belson (@[email protected]) @dbelson]

Digital certificate issuance volume for .ir domains briefly jumped from <1,000/hour to >4,000/hour, suggesting manual & automated renewals from within the country were once again possible. Nearly all were from @letsencrypt.

https://t.co/iwUgSPdtLu

[David Belson (@[email protected]) @dbelson]

This cable damage has taken @DigicelHT completely offline, as @CloudflareRadar shows that #Internet traffic and announced IP address space all dropped to zero just after 22:00 UTC (18:00 local). Similar problems occurred multiple times in 2025.
https://t.co/VMpUyfvPEP

[Jean Philippe Brun @jpbrun30]

Nap enfòme kliyantèl nou a, ke aswè a @DigicelHT sibi de koupi adisyonèl sou 2 lyen fib optik entènasyonal li yo nan sòti PauP sou wout nasyonal 1. Sèvis entènèt, SMS, Moncash ak apèl entènasyonal. Ekip nou deplwaye, e nap evalye aksè yo pou fè reparasyon pi rapif ke posib.

[Cloudflare @Cloudflare]

Cloudflare Radar data confirms early indications of a partial Internet restoration in Iran, nearly three months after the shutdown began. Traffic spikes and DNS queries have risen, but network activity is currently just 40% of pre-shutdown levels. https://t.co/N9AODPsI62

[Alireza Manafi @AManafii]

از رسانه‌ها و فعالان خواهش میکنم که نت‌بلاکس رو مرجع قرار ندن. نت‌بلاکس در سنجش وضعیت اینترنت در ایران دقیق عمل نمی‌کند. متریک‌های عمومی نت‌بلاکس برای شرایط اینترنت در ایران کافی نیستند.
سطح دسترسی به اینترنت حتی نزدیک به عددی که نت‌بلاکس اعلام کرده هم نیست.
رادار کلادفلر، IODA و گزارش‌های @DougMadory بهترین مراجع برای بررسی سطح دسترسی در ایران هستند.

[AmiR Rashidi @Ammir]

We are still in an internet shutdown. Traffic exists, but it remains far below pre-Dec/Jan levels, with about a 50% drop in national traffic since then. We need to see whether it returns to previous levels or stabilizes at this new low. Don’t rush to conclusions.

[Doug Madory (also on Bluesky) @DougMadory]

Just to keep today's partial restoration of Iranian internet connectivity in perspective, please take a look at this overall timeline.

Iran has a long way to go to get back to pre-Jan-8 levels of traffic volumes. #DigitalBlackOutIran‌

[Doug Madory (also on Bluesky) @DougMadory]

Seeing the first signs of a possible internet restoration in Iran at 12:01 UTC today.

While a few networks spiked in traffic, most are still down.

#DigitalBlackOutIran‌

[David Belson (@[email protected]) @dbelson]

Traffic data from @CloudflareRadar shows a rapid increase in traffic from #Iran starting ~11:00 UTC (14:30 local). Traffic from providers including #Irancell, #MCCI, and #TCI is up significantly.

https://t.co/q5vj49Vgpu

[AmiR Rashidi @Ammir]

We are seeing traffic coming from Iran. It looks like the internet is about to be restored. 🤞

[David Belson (@[email protected]) @dbelson]

@DougMadory Visible in @CloudflareRadar data as well: https://t.co/GBTqs9hHfo

[David Belson (@[email protected]) @dbelson]

The shutdowns in Iraq are implemented by having network providers withdraw announced IPv4 and/or IPv6 address space, effectively removing them from the Internet.

https://t.co/a4TbcTwThT

[David Belson (@[email protected]) @dbelson]

Exam season in #Iraq started today, and with it, widespread #Internet shutdowns. Connectivity was cut across multiple major ISPs between 0300-0430 UTC, though networks in the Kurdistan Region remained available.

https://t.co/fqugZ88zdm

[Cloudflare Radar @CloudflareRadar]

New on Cloudflare Radar: MRT Explorer!
BGP is how networks tell each other where to send Internet traffic. MRT files record those routing updates, helping investigate outages and route leaks.
Now you can inspect them directly in your browser:
https://t.co/SI65mdqlIt

[David Belson (@[email protected]) @dbelson]

@svensauleau Odd set of options there, since Linode isn't a CDN provider (and hasn't been an independent company for several years). Similarly, OpenDNS was folded into Cisco years ago, so the "DNS Provider" set is questionable as well.