Iran Tests National 'Whitelists' Amid Protests and Blackouts

Key Findings

• Iran has imposed a nationwide internet blackout amid widespread protests, severely restricting global connectivity.

• However, a limited surge of traffic was detected from select Iranian academic institutions, suggesting potential "whitelisting" tests.

• The fluctuations in connectivity for these academic networks indicate a strategic assessment of restricting global access to a limited elite.

• Tehran accounted for the majority of the observed academic traffic, likely due to the high concentration of universities in the capital.

• Iranian authorities have remained silent on the reasons for the internet shutdown, and the timeline for restoration remains uncertain.

Background

Iran is currently facing a severe internet blackout, with the country severing all access to the international internet due to internal domestic unrest. The blackout has persisted for 24 consecutive hours, with even certain landline telecommunications infrastructures suffering disruptions.

Restoration of Connectivity to Academic Institutions

Despite the nationwide blackout, a negligible surge of traffic was detected emanating from autonomous systems (ASNs) belonging to a select few Iranian academic institutions. This activity, which constitutes only 0.01% of Iran's customary international traffic volume, suggests a potential "whitelisting" test.

Fluctuations in Connectivity

Analysis of the data indicates that the restoration of connectivity to these academic ASNs was likely a transient trial. For instance, AS29068 (University of Tehran) witnessed a resumption of valid traffic at 11:35 UTC, only for connectivity to plummet back to zero by 15:15 UTC, signaling a renewed disconnection. Similar patterns were observed in other academic ASNs, implying a meticulously orchestrated test.

Geographic Concentration

The majority of the observed academic traffic, approximately 49.6%, originated from Tehran, the nation's capital. This high concentration is likely due to the significant number of academic centers located in the city.

Uncertainty and Implications

Iranian authorities have remained silent regarding the internet hiatus, and the timeline for a full restoration remains shrouded in uncertainty. The comprehensive severance of global ties will inevitably exert a deleterious influence on the nation's economic vitality, despite the potential existence of a massive domestic intranet for internal communications.

Sources

• https://securityonline.info/iran-tests-academic-whitelists-amid-nationwide-2026-blackout/

• https://securityaffairs.com/186718/intelligence/iran-cuts-internet-nationwide-amid-deadly-protest-crackdown.html