{"id":2855,"date":"2021-01-08T14:44:48","date_gmt":"2021-01-08T14:44:48","guid":{"rendered":"https:\/\/filter.watch\/en\/?p=2855"},"modified":"2021-01-08T14:44:48","modified_gmt":"2021-01-08T14:44:48","slug":"network-monitor-december-2020","status":"publish","type":"post","link":"https:\/\/filter.watch\/english\/2021\/01\/08\/network-monitor-december-2020\/","title":{"rendered":"Network Monitor \u2013 December 2020"},"content":{"rendered":"

In Iran, December 2020 was an \u2018Instagram story\u2019 of internet disruptions that largely seemed to affect the popular social media platform. Although the disruption of Iranian Instagram traffic isn\u2019t uncommon, the Filterwatch team observed more significant service interruptions this month than in preceding months.<\/span><\/p>\n

On the basis of the available evidence, it appears that misconfigured networks may have been to blame for the disruptions, which mostly affected MCI mobile data services. However, Filterwatch is unable to confirm that all of the issues identified in this report were caused by such misconfigurations.<\/span><\/p>\n

Elsewhere, some web hosting companies experienced notable outages throughout the month of December. More details follow in the full report below.<\/span><\/p>\n

\"\"<\/p>\n

December 17 - Probable network misconfiguration sparks fears of man-in-the-middle attacks on Instagram users<\/span><\/h2>\n

\"\"<\/span><\/p>\n

On December 17 a number of Iranian Twitter users announced that when they tried to open the Instagram website on their browser, they received a message stating that the website\u2019s certificate was invalid.\u00a0<\/span><\/p>\n

Such messages could indicate a man-in-the-middle attack against Instagram users, triggering concerns. Such worries would not be unfounded, in light of Iran\u2019s <\/span>history<\/span><\/a> of using this method of attack against Google users back in 2011. As a result, a number of users expressed nervousness about using Instagram without enabling a safe and secure VPN.<\/span><\/p>\n

Based on users' reports, this issue was seen in relation to <\/span>MCI<\/span><\/a> mobile data services, with no reports of this error being encountered via other service providers. Since the news broke, no Iranian officials or MCI representatives have provided any explanation for the disruption.<\/span><\/p>\n

The Iranian Twitter user Abraham Ghasemi documented and analysed the incident, and <\/span>concluded<\/span><\/a> that the disruption was more likely attributable to misconfigured networks than any other explanation.<\/span><\/p>\n

Based on Ghasemi\u2019s finding, MCI is returning 52.72.145.79 as the IP address of Instagram, which no longer belongs to Instagram. He concluded that the MCI DNS cache server was using out-of-date data.<\/span><\/p>\n

December 18 \u2013 Shiraz-based hosting company experiences service outage<\/span><\/h2>\n

According to OIM data, the Shiraz-based web hosting company Rayaneh Asr-e Ertebatat Bam Technology and Engineering Cooperative Co (AS58331) was disconnected from the internet for approximately two hours. No explanation was offered by either the company, or ICT Ministry officials.\u00a0<\/span><\/p>\n

\"\"<\/p>\n

December 19 - Disruptions on AFC Farsi account live broadcasting of a football match<\/span><\/h2>\n

The Asian Football Confederation (AFC) Champions League Final between Iran\u2019s Persepolis FC and South Korea\u2019s Ulsan Hyundai FC took place on December 19. AFC announced on its <\/span>Persian-language Instagram account<\/span><\/a> that Adel Ferdowsipour, a popular sports reporter who has been banned from appearing on IRIB, would commentate this match on a livestream on AFC\u2019s Persian-language Instagram. AFC also announced that for Iran-based audiences, the match would only be officially broadcasted live on its Instagram account, rather than Iranian TV networks.<\/span><\/p>\n

According to a source in Iran\u2019s ICT Ministry, the IRIB-affiliated <\/span>A<\/span>udio and Video Regulatory Authority<\/span><\/a> banned all live streaming websites from broadcasting from the AFC\u2019s Persian-language Instagram account as a result of Ferdowsipour's reporting.<\/span><\/p>\n

During the game some <\/span>IranCell<\/span><\/a> and <\/span>MCI<\/span><\/a> reported that they are not able to watch the game through Instagram Live. However, other <\/span>IranCell<\/span><\/a> and <\/span>MCI<\/span><\/a> users reported watching the entire game without any problems. Furthermore, Filterwatch\u2019s research showed that there was between 0.1-0.3% packet loss on Instagram traffic in Iran, which is not an unusual figure.<\/span><\/p>\n

\"\"
\nOn December 22, the Reformist political activist Ali Akrami <\/span>disclosed a letter<\/span><\/a> from the ICT Ministry to the director of <\/span>MCI<\/span><\/a>. The letter referred to reports received from the <\/span>Telecommunication Infrastructure Company (TIC)<\/span><\/a> stating that there was a \"serious disruption\" of MCI mobile data exactly at the time of the AFC Champions League Final.\u00a0<\/span><\/p>\n

\"\"<\/p>\n

In the <\/span>letter<\/span><\/a>, the ICT Ministry asked MCI to disclose the reasons for the disruption within 48 hours. However, in spite of this request, no public explanation was given.<\/span><\/p>\n

December 20 - 21 \u2013 Another web hosting company experiences disruption<\/span><\/h2>\n

Based on OIM data, the hosting company <\/span>Netmihan Communication Company Ltd<\/span><\/a> (AS204213) was largely disconnected from the internet from around 19:00 on December 20 until roughly 01:00 on December 21.<\/span><\/p>\n

\"\"<\/p>\n

December 31 \u2013 Iran\u2019s domain name registry experiences further outage<\/span><\/h2>\n

Iran\u2019s Research Center of Theoretical Physics & Mathematics (or IPM) (AS6736) was almost completely disconnected from the Internet on December 31 for a period of roughly two hours.\u00a0<\/span><\/p>\n

This is the sixth time this year that IPM has experienced major disruption, following outages in <\/span>March<\/span><\/a>, <\/span>June<\/span><\/a>, <\/span>July<\/span><\/a>, <\/span>August<\/span>, <\/span><\/a>October<\/span><\/a> and <\/span>November<\/span><\/a>. It has failed to provide any explanations to the public, or its users.<\/span><\/p>\n

IPM is responsible for handling Iran\u2019s top-level domain, and provides Internet services for universities, educational institutions, and research centers, which also tend to experience disruptions as a result.<\/span><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

In Iran, December 2020 was an \u2018Instagram story\u2019 of internet disruptions that largely seemed to affect the popular social media platform. Although the disruption of Iranian Instagram traffic isn\u2019t uncommon, the Filterwatch team observed more significant service interruptions this month than in preceding months. On the basis of the available evidence, it appears that misconfiguredContinue reading \"Network Monitor \u2013 December 2020\"<\/span><\/a><\/p>\n","protected":false},"author":6,"featured_media":2863,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[4],"tags":[50],"class_list":["post-2855","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-network-monitor","tag-network-monitor","entry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t