Infrastructure Record

Internet Incidents

Service disruptions, routing anomalies, and notable infrastructure events tracked by Dataplane.org.

Last 12 Months

Iraq · mobile internet users · students

Iraq implemented repeated daily internet shutdowns throughout June 2026 during the national exam season, consistent with prior years. Cloudflare Radar documented multiple outages tied to middle school and preparatory school examination schedules.

SeaMeWe-4 (SMW4) · IMEWE cable · Asia-Middle East connectivity · European transit

SeaMeWe-4 (SMW4) and India-Middle East-Western Europe (IMEWE) submarine cables were severed near Jeddah, Saudi Arabia in September 2025, causing capacity degradation on Asia-to-Middle East routes and cascading latency increases including on Microsoft Azure.

Archive

Google Cloud · Gmail · Discord · Spotify · cloud-dependent services globally

A widespread Google Cloud outage in June 2025 caused broad service disruption across Google products including Gmail, and cascaded to third-party services including Discord and Spotify that depend on Google Cloud infrastructure.

Juniper Junos routers · Arista routers · Global BGP routing table · Internet globally

A corrupt BGP UPDATE containing a malformed prefix-SID attribute triggered automatic session resets in Juniper Junos and Arista implementations, cascading into global routing churn with BGP message rates increasing more than fivefold at peak.

North Korea · DPRK BGP prefixes · RPKI-validating networks globally

North Korea created an invalid RPKI Route Origin Authorization (ROA), causing its own BGP routes to be rejected as RPKI-invalid by networks performing Route Origin Validation globally — a self-inflicted internet isolation event.

Twitter/X · X users globally

Twitter/X experienced a notable service disruption in early 2025. Musk's attribution of the outage to attack traffic originating from Ukrainian IP addresses was broadly contested by security researchers who noted the evidence did not support the claim.

Chile · PlayStation Network · Sony · 116 million PSN users globally

A regional power blackout in Chile disrupted infrastructure supporting PlayStation Network operations, cascading into a roughly 24-hour global PSN outage affecting approximately 116 million subscribers worldwide.

350 Cermak · Chicago carrier hotel tenants · colocation customers

A fire broke out at 350 Cermak, a major carrier hotel and data center in Chicago's South Loop neighborhood, in August 2024, disrupting services for colocation tenants in the facility.

Windows systems with IPv6 enabled · All unpatched Windows versions

Microsoft's August 2024 Patch Tuesday disclosed CVE-2024-38063, a critical zero-click remote code execution vulnerability in the Windows TCP/IP stack triggered via specially crafted IPv6 packets, requiring no user interaction to exploit.

Arelion · AS1299 · Telia Carrier · transit customers globally

Arelion (formerly Telia Carrier), one of the world's largest Tier 1 internet transit providers operating as AS1299, experienced a service degradation in August 2024, with the incident discussed on the NANOG and outages mailing lists.

Google Cloud · Google Search · Gmail · YouTube · europe-west2 (London) region

A service degradation in Google Cloud's europe-west2 region on August 12, 2024 caused disruptions to major Google consumer services including Search, Gmail, and YouTube. ThousandEyes provided technical analysis of the incident.

RouteViews · University of Oregon · BGP data consumers · network researchers

The University of Oregon RouteViews project — a critical BGP data collection platform — experienced service degradation in August 2024, tracked via BGPKit status monitoring, impacting researchers and operators relying on RouteViews data.

Puerto Rico · Caribbean islands · Bermuda

Hurricane Ernesto caused internet connectivity impacts across Caribbean islands and Puerto Rico as it traversed the region in mid-August 2024, tracked by Cloudflare Radar and NetBlocks.

Instagram · Turkish internet users · Meta

Turkey blocked access to Instagram in early August 2024, reportedly in response to the platform hosting condolence messages following the assassination of Hamas leader Ismail Haniyeh. The block was tracked by NetBlocks and OONI.

Microsoft Azure · Azure customers globally

A DDoS attack on July 30, 2024 struck Microsoft Azure and was identified as a contributing factor to a broader service disruption; ThousandEyes analysis found the DDoS amplified rather than solely caused the outage, due to a misconfiguration in Azure's DDoS protection implementation.

Pakistan · Pakistani internet users · VPN users

Pakistan's internet experienced disruptions during late July through early August 2024, tracked by Cloudflare Radar, IODA, and NetBlocks, linked to the government's national firewall infrastructure which was observed causing widespread slowdowns and blocking.

ARIN · ARIN WHOIS · ARIN RDAP · ARIN RPKI

ARIN experienced simultaneous degradation across its WHOIS, RDAP, and RPKI services in late July 2024, affecting network operators, security researchers, and automated systems dependent on ARIN's registration and routing security data.

French internet infrastructure · SFR · Free · Bouygues Telecom · regional ISPs in France

Saboteurs deliberately cut fiber optic cables across multiple regions of France during the Paris 2024 Olympics period, disrupting internet and communications services for ISPs and their customers across affected areas.

CrowdStrike · Microsoft Windows · Airlines · Banks · Hospitals · Emergency Services · Global

A faulty content update to CrowdStrike's Falcon sensor caused Windows systems worldwide to enter a boot loop (BSOD), taking down critical infrastructure across aviation, banking, healthcare, and emergency services in what became one of the largest IT outages in history.

Bangladesh · Bangladeshi internet users · mobile internet · broadband

Multiple monitoring platforms — IODA, Cloudflare Radar, and NetBlocks — documented significant internet connectivity losses in Bangladesh during July 17-20, 2024, coinciding with student anti-quota protests that escalated into a broader government crackdown.

Russia · YouTube · Russian internet users · Roskomnadzor

Meduza reported that Russian telecom regulator Roskomnadzor began throttling YouTube via deep packet inspection on July 12, 2024, reducing speeds to effectively unusable levels for tens of millions of users in what was seen as a significant escalation preceding a potential full block.

Cloudflare · Magic Transit · Enterprise DDoS mitigation customers

Cloudflare's Magic Transit service — which provides BGP-based DDoS protection for enterprise IP prefix blocks — suffered a disruption on July 9, 2024, temporarily reducing or removing DDoS scrubbing capabilities for affected customers.

ARIN · RPKI RRDP · ARIN-region RPKI relying parties

ARIN's RPKI RRDP publication endpoint suffered a service disruption on July 8, 2024, preventing RPKI relying party software from fetching delta updates to ARIN-region ROA and RPKI object data.

Texas · US Gulf Coast · Cogent Communications · Spectrum · Horizon IQ · QuadraNet · Akamai · Cloudflare

Hurricane Beryl made landfall near Matagorda, Texas on July 8, 2024 and knocked out power to large portions of the Houston area; cascading internet outages were reported by Cloudflare, Akamai, Cogent, Spectrum, Horizon IQ, and QuadraNet, with NetBlocks documenting two separate impact events.

DigiCert · Google Cloud · DigiCert certificate holders globally

DigiCert discovered a bug in its domain validation process that required mass revocation of affected TLS certificates in July 2024, forcing emergency reissuance affecting Google Cloud and many websites under tight regulatory deadlines.

Grenada · Barbados · Jamaica · St. Vincent · Caribbean ISPs

Hurricane Beryl caused internet connectivity disruptions across multiple Caribbean islands as it traversed the region as a powerful Category 4 storm, with NetBlocks filing four separate disruption reports and Cloudflare Radar documenting Grenada connectivity loss.

Hurricane Electric · AS6939 · he.net users and services

The he.net domain was placed on client hold status by Hurricane Electric's domain registrar in early July 2024, generating significant discussion on NANOG and OUTAGES mailing lists given the company's role as one of the internet's largest transit and colocation providers.

Cloudflare · 1.1.1.1 · DNS users globally

Cloudflare's widely-used 1.1.1.1 public DNS resolver suffered an outage on June 26, 2024, temporarily preventing DNS resolution for the millions of users and applications configured to use Cloudflare's public resolver.

Kenya · Kenyan internet users · Kenyan ISPs

IODA, Cloudflare Radar, and other monitoring platforms documented connectivity losses across Kenya during the week ending June 29, 2024, coinciding with widespread public protests against a proposed finance bill.

Iraq · mobile internet users · students

Iraq implemented a deliberate internet shutdown in late June 2024 during the national exam period, consistent with prior years' practice of restricting internet access nationwide during examinations. Reported by NetBlocks, IODA, and Cloudflare Radar.

Reddit · Reddit users globally

Reddit experienced a major outage on April 25, 2024, blocking access to its web and mobile applications for users worldwide.

Europe-Asia submarine cables · Affected ISPs and transit customers

Subsea cable faults affecting Europe–Asia connectivity occurred during late April 2024, causing disruptions for ISPs and customers relying on affected cable systems.

CenturyLink/Lumen · South Dakota 911 · Nebraska 911 · Missouri 911 · Douglas County NE

CenturyLink/Lumen's network experienced a partial 911 outage on April 18, 2024 affecting South Dakota, Nebraska, and Missouri, traced to light pole installation work in Missouri that damaged network infrastructure.

Cloudflare · DNS-over-HTTPS users · DNS-over-TLS users

Cloudflare's DNS over HTTPS (DoH) and DNS over TLS (DoT) services experienced certificate issues in mid-April 2024, disrupting encrypted DNS resolution for affected users.

Equinix Toronto · Equinix Toronto colocation customers

A fiber cut caused service disruptions at Equinix's Toronto data center in mid-April 2024, affecting colocation customers and services hosted there.

Taiwan · Taiwanese ISPs · Submarine cable infrastructure

A major earthquake in Taiwan on April 3, 2024 caused internet outages and service disruptions, exposing infrastructure resilience vulnerabilities in the island's connectivity.

WhatsApp · Meta · WhatsApp users globally

WhatsApp experienced a global service disruption on April 3, 2024, causing widespread connection failures for its approximately two billion users worldwide.

Equinix NY9 · New York colocation customers

Equinix's NY9 facility in New York experienced a power-related disruption in early April 2024, affecting services hosted at that data center.

UltraDNS · UltraDNS customers · DNSSEC-validating resolvers

UltraDNS experienced DNSSEC validation errors in early April 2024, causing DNS resolution failures for customers relying on DNSSEC-signed zones hosted on UltraDNS.

XZ Utils · Linux distributions · OpenSSH

A sophisticated supply chain attack embedded a backdoor in the xz compression utility (versions 5.6.0 and 5.6.1), targeting systemd-linked OpenSSH servers on Linux. Discovered by Andres Freund at Microsoft before the compromised versions reached most stable Linux distributions.

AS32421 · Lumen Technologies · Black Lotus Labs

A significant number of routes were withdrawn from Lumen's AS32421 (formerly associated with Black Lotus) between March 24–30, 2024, visible in RIPE NCC routing history and the CIDR Report.

Instagram · Meta · Instagram users globally

Meta's Instagram platform experienced a widespread service disruption on March 22, 2024, making the app and website unavailable to users around the world.

DataDock Strasbourg · PlusServer · Server4You · RackNerd

A water leak at the DataDock data center in Strasbourg, France during the week of March 17–23, 2024 caused service disruptions for several hosted providers including PlusServer, Server4You, and RackNerd.

Telstra · Telstra mobile customers · Australia

Australian telecommunications carrier Telstra experienced mobile network disruptions in mid-March 2024, affecting voice calls and mobile data for customers.

AS136800 · MOACK.net

Routes associated with MOACK.net (AS136800) were withdrawn from the global BGP routing table around March 17, 2024, flagged in the CIDR Report and RIPE NCC STAT.

West Africa · Southern Africa · East Africa · Côte d'Ivoire · Senegal · Liberia · South Africa

Multiple simultaneous faults on subsea cables serving West and Southern Africa — including WACS, ACE, MainOne/EASSy, and SAT-3 — caused widespread Internet service degradation across the continent beginning March 14, 2024.

Cloudflare · 1.1.1.1 · 1.0.0.1 · DNS resolution · Global

Cloudflare's public DNS resolver service (1.1.1.1) experienced a disruption in March 2024, coinciding with the broader Africa subsea cable faults that were also generating significant traffic rerouting.

Meta · Facebook · Instagram · Messenger · WhatsApp · Threads

A major Meta platform outage on March 5, 2024 affected Facebook, Instagram, Messenger, and other Meta services, logging out users globally and preventing re-authentication for approximately two hours.

AT&T · T-Mobile · Verizon · FirstNet · United States

A major AT&T US wireless network failure on February 22, 2024 left millions of customers without cellular service for up to twelve hours. The FCC opened an investigation; AT&T attributed the outage to a software update error during network expansion.

LockBit · Ransomware-as-a-Service · Cybercrime ecosystem

Operation Cronos, a coordinated international law enforcement action involving agencies from 10 countries, seized LockBit's infrastructure, websites, and cryptocurrency accounts, taking down the world's most prolific ransomware-as-a-service operation.

Russia · .RU TLD · DNSSEC · Coordination Center for TLD RU

A DNSSEC signing failure in the Russian .ru TLD zone caused DNSSEC-validating resolvers worldwide to return SERVFAIL for .ru domains, making a large portion of the Russian Internet inaccessible for users behind validating resolvers.

Orange Spain · AS12479 · RIPE NCC · Spain

An attacker gained access to Orange Spain's RIPE NCC account and created fraudulent RPKI Route Origin Authorizations (ROAs), causing route origin validation to reject legitimate Orange Spain prefixes and disrupting routing for the operator's customers.

Optus · Australia · Mobile · Fixed broadband

Optus, Australia's second-largest telecommunications provider, suffered a nationwide network outage affecting roughly 10 million mobile and fixed broadband customers. A BGP routing table update that exceeded equipment limits triggered cascading failures across the network.

Israel · Palestinian Territories · Gaza Strip

Following the October 7, 2023 Hamas attack on Israel and the subsequent Israeli military response in Gaza, Internet infrastructure in the region experienced severe disruptions including DDoS attacks on Israeli sites, Gaza connectivity outages tied to power failures and infrastructure damage, and traffic pattern anomalies across both territories.

Reddit · Third-party Reddit clients · Moderator community

Reddit's June 2023 announcement of sweeping API pricing changes drove thousands of subreddit communities to go dark in protest, forcing the shutdown of popular third-party apps and triggering platform instability as the conflict between Reddit's leadership and moderator community escalated.

Global BGP routing · Multiple ISPs and networks

A BGP UPDATE message containing an unrecognized optional transitive attribute (type code 28) propagated through the global routing system, causing routers that did not handle it correctly to reset BGP sessions, resulting in widespread routing instability.

Dish Network · Boost Mobile · Sling TV · United States

Dish Network suffered a ransomware attack beginning February 23, 2023 that disrupted internal systems, took websites offline, cut off remote employee access, and ultimately led to a data breach affecting nearly 300,000 individuals.

Turkey · Syria · Southeastern Turkey · Northwestern Syria

Catastrophic 7.8 and 7.7 magnitude earthquakes struck southeastern Turkey and northwestern Syria on February 6, 2023, causing extensive damage to telecommunications infrastructure. Power grid failures and physical destruction of network equipment caused severe Internet disruptions across affected areas.

Telecom Italia · TIM · Italy · AS1299 transit customers

Telecom Italia (TIM), Italy's dominant fixed-line operator, suffered a nationwide Internet outage on February 5, 2023, affecting millions of residential and business customers. The Internet Society described it as a 'perfect storm' of multiple simultaneous failures.

Dataplane.org RPKI publication point · RPKI relying parties fetching from Dataplane.org

Dataplane.org's RPKI publication point and certificate authority experienced severe performance issues in September 2022 after an experimental ROA publication campaign pushed the system beyond its limits, requiring a full system rebuild.

Dataplane.org DNS sensor · COM zone resolvers

A Dataplane.org sensor was assigned an IP previously used as a default nameserver glue record by a hosting provider for unconfigured COM domains, causing the sensor to receive up to 700,000 extra DNS queries per day until the provider updated the glue record.

SSH client activity globally · libssh library users · Multiple unrelated networks

Around October 6, 2021, a sudden collapse in SSH client connection attempts was observed globally across multiple unrelated networks — most significantly among libssh library users. The anomaly was independently verified by SANS and NETSCOUT ASERT, but the root cause was never publicly identified.