{"id":2517,"date":"2020-10-13T10:04:53","date_gmt":"2020-10-13T10:04:53","guid":{"rendered":"https:\/\/filter.watch\/en\/?p=2517"},"modified":"2020-10-14T11:04:51","modified_gmt":"2020-10-14T11:04:51","slug":"network-monitor-september-2020","status":"publish","type":"post","link":"https:\/\/filter.watch\/english\/2020\/10\/13\/network-monitor-september-2020\/","title":{"rendered":"Network Monitor \u2013 September 2020"},"content":{"rendered":"

A significant disruption incident took place in September when, on September 19, Google IP addresses were hijacked by the Telecommunication Infrastructure Company (TIC). An Iranian official claimed that this disruption was the result of a misconfiguration, and that it was not intentional. In July 2018 the Telecommunications Company of Iran (TCI) <\/span>caused a similar disruption<\/span><\/a> when it hijacked Telegram\u2019s IP addresses.\u00a0<\/span><\/p>\n

The second important event related to disruption on WhatsApp Desktop and Web on September 20. A source close to the Telecommunication Infrastructure Company told Filterwatch that they did not impose any disruptions on these applications (a claim that can not be independently confirmed or dismissed). Based on Filterwatch investigation there was about 10 to 15 percent packet loss on mmh.whatsapp.net at ISP level.<\/span><\/p>\n

\"\"<\/p>\n

September 14-15 \u2013 Tehran\u2019s \u2018Smart City\u2019 organisation experiences disruptions<\/span><\/h2>\n

The <\/span>Tehran Municipality ICT Organization<\/span><\/a> \u2013 the organisation in charge of implementing \u2018smart city\u2019 initiatives in Tehran \u2013 experienced disruption and almost went offline from 12:00 on September 14 until 14:00 on September 15. This organization experienced a further disruption at 10:00 on September 20.\u00a0<\/span><\/p>\n

\"\"<\/p>\n

Neither the Tehran Municipality ICT Organization nor the ICT Ministry commented\u00a0 on this incident, and the cause of the disruption is unclear.<\/span><\/p>\n

September 17 \u2013 Multiple ISPs experience disruptions<\/span><\/h2>\n

According to ArvanCloud\u2019s <\/span>Radar<\/span><\/a>, Irancell, Raspina, Afranet, AsiaTech in Tabriz and Shiraz, and MCI experienced difficulties accessing the Internet. No Iranian officials provided any explanation for this disruption.\u00a0<\/span><\/p>\n

\"\"<\/p>\n

\"\"<\/p>\n

\"\"<\/p>\n

\"\"<\/p>\n

September 18 \u2013 Hosting company goes offline for two days<\/span><\/h2>\n

AS208555 <\/span>Dade Pardazi Mobinhost Co Ltd<\/span><\/a> which is a hosting company, went offline from 00:00 on September 19 until very early in the morning of September 21. No explanation was provided by either the company, or Iranian officials. This hosting company also went offline on September 18 around 14:00 as well as briefly on September 22 at around 18:00.<\/span><\/p>\n

\"\"<\/p>\n

September 19 \u2013 TIC hijacks Google IP addresses<\/span><\/h2>\n

According to Project Ainita \u2013 a non-profit project to support anonymity, security and online freedom \u2013 the Telecommunications Infrastructure Company <\/span>hijacked<\/span><\/a> a number of Google IP address ranges.<\/span><\/p>\n

\"\"
Loading...<\/figcaption><\/figure>\n

 <\/p>\n

The Vice Chairman of the Board of Directors of the Telecommunication Infrastructure Company <\/span>denied<\/span><\/a> hijacking these IP addresses in an interview with the tech news platform Peivast:. \u201cIt is true that a misconfiguration has occurred on the network, and our technical team should investigate to prevent this from happening again.\u201d<\/span><\/p>\n

On July 30 2018 the Telecommunications Company of Iran (TCI) <\/span>hijacked<\/span><\/a> Telegram addresses in a similar fashion.\u00a0<\/span><\/p>\n

On the same day, the telecommunications company TSTonline.com\u00a0 was largely disconnected from the internet for roughly an hour.<\/span><\/p>\n

 <\/p>\n

<\/h2>\n

\"\"<\/h2>\n

September 20 \u2013 WhatsApp business accounts disrupted<\/span><\/h2>\n

Since September 9, Filterwatch observed disruptions on one WhatsApp address in Iran. However, no officials\u00a0 reacted to this disruption, as it solely affected WhatsApp business accounts, which are impossible to access inside Iran owing to foreign sanctions.<\/span><\/p>\n

\"\"<\/p>\n

On September 20, Filterwatch also observed that mmh.whatsapp.net was also disrupted inside Iran, mainly in the regions of Tehran and Hamedan.<\/span><\/p>\n

\"\"<\/p>\n

This disruption affected those who were using the desktop or web version of WhatsApp, with users <\/span>stating<\/span><\/a> that they were unable to send or receive files. A source close to the Telecommunication Infrastructure Company told Filterwatch that they did not impose any disruptions to the application. Based on Filterwatch\u2019s investigation, there was a packet loss of about 10-15 percent on mmh.whatsapp.net at the ISP level.<\/span><\/p>\n

September 22 \u2013 Instagram experiences disruptions on MCI and Irancell<\/span><\/h2>\n

According to <\/span>Radar<\/span><\/a>, Instagram was not accessible from Iran, largely on major mobile internet providers such as MCI and Irancell.<\/span><\/p>\n

\"\"<\/p>\n

September 25-26 \u2013 Traceroute disruptions detected<\/span><\/h2>\n

According to OIM, on September 25 and 26 Iran experienced traceroute disruptions lasting approximately three hours. \u2018Traceroute\u2019 commands are computer network diagnostic commands for displaying possible routes, and measuring the transit delays of packets across an Internet Protocol network.<\/span><\/p>\n

\"\"<\/p>\n

In addition, ArvanCloud\u2019s <\/span>Radar<\/span><\/a> also showed many disruptions on Google, Instagram and other services. ArvanCloud\u2019s Radar measures network based on traceroute and the cURL command tool, used to transfer data to or from a server using any of the supported protocols.<\/span><\/p>\n

\"\"<\/p>\n

As a result of this traceroute disruption, the ISP Afranet (AS25184) experienced a brief service interruption at 18:00.<\/span><\/p>\n

\"\"<\/p>\n","protected":false},"excerpt":{"rendered":"

A significant disruption incident took place in September when, on September 19, Google IP addresses were hijacked by the Telecommunication Infrastructure Company (TIC). An Iranian official claimed that this disruption was the result of a misconfiguration, and that it was not intentional. In July 2018 the Telecommunications Company of Iran (TCI) caused a similar disruptionContinue reading \"Network Monitor \u2013 September 2020\"<\/span><\/a><\/p>\n","protected":false},"author":6,"featured_media":2532,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[4],"tags":[50],"class_list":["post-2517","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-network-monitor","tag-network-monitor","entry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t