bbs icon indicating copy to clipboard operation
bbs copied to clipboard

Internet is completely blocked in Iran (2025-06-17 to 2025-06-26)

Open pirooz-gthb opened this issue 6 months ago • 290 comments

Internet is completely blocked in Iran.

We had one report than a person could connect to Telegram using UDP proxy and it seems that TCP connections are blocked.

Edit1: https://mastodon.social/@netblocks/114704819523361773

Edit2: Image

pirooz-gthb avatar Jun 18 '25 16:06 pirooz-gthb

where can i see this graph live? and for other countries too. and it's not clear what does it represent

BK8000L avatar Jun 18 '25 18:06 BK8000L

IODA (Internet Outage Detection & Analysis) is a good source of information about shutdowns and blackouts.

You can see live information for Iran at https://ioda.inetintel.cc.gatech.edu/country/IR (or permalink for a recent time range).

Internet Connectivity for Iran (Islamic Republic Of), June 17, 2025 7:21 pm - June 18, 2025 7:21 pm UTC

See the IODA glossary for what the data points mean. The "Active Probing" series counts responses from networks in the country when probed. "Google (Search)" is information from Google servers, counting how many people from the country are accessing the search service. The "Telescope" series counts source IP addresses of packets received in a large IP address range that is not used for anything.

IODA has a Fediverse account where they are posting updates.

2025-06-16 19:02 https://mastodon.social/@IODA/114694590943664011

As we hear reports of mobile Internet shutdown in Iran, IODA measurements are showing loss of connectivity on mobile networks IranCell (AS44244) and RighTel (AS57218).

Follow connectivity in near realtime: https://ioda.inetintel.cc.gatech.edu/asn/44244?from=1749494181&until=1750098981

https://ioda.inetintel.cc.gatech.edu/asn/57218?from=1749495410&until=1750100210

2025-06-18 14:07 https://mastodon.social/@IODA/114704752451701595

Iran is experiencing a near Internet blackout today, starting at ~5:00 PM local time. We see significant drops across networks. Some networks, including MCCI and Rightel appear to be responsive.

Follow connectivity in Iran in near realtime: https://ioda.inetintel.cc.gatech.edu/country/IR?from=1749650442&until=1750255242

wkrp avatar Jun 18 '25 19:06 wkrp

I'm in iran and just got access to outside network using github app on android.

Idk how is this working but i need to replicate it on real vpn connection

HoseanRC avatar Jun 18 '25 21:06 HoseanRC

We have Internet black out in Iran right now. No news from outside. Just somehow Github app works. Any one has any solution to Circumvent this blockage? I'm using RighTel right now.

azi1233 avatar Jun 19 '25 01:06 azi1233

I heard that some mtproto proxies are still working

gusgustavo avatar Jun 19 '25 01:06 gusgustavo

What I have heard:

  • All datacenters have become Iran-access only and therefore creating a tunnel for v2ray is impossible. Except one, which I prefer not to name it here.
  • Some got connected using MTProto proxies on Telegram
  • Some are getting connected using a tunnel (v2ray, one server in Iran, another in the free world)

pirooz-gthb avatar Jun 19 '25 09:06 pirooz-gthb

Some servers are being actively detected and blocked.

pirooz-gthb avatar Jun 19 '25 09:06 pirooz-gthb

Turns out api.github.com's ip (140.82.121.6) is open for connections

We got public whitelisted ip in iran before GTA 6

HoseanRC avatar Jun 19 '25 09:06 HoseanRC

Can someone help us with mtproto proxies or v2ray configs?

ITSHahrad avatar Jun 19 '25 12:06 ITSHahrad

Can someone help us with mtproto proxies or v2ray configs?

  1. Does this script work, or do the proxies have to be created in a special way? https://github.com/HirbodBehnam/MTProtoProxyInstaller

  2. v2ray and xray have many possible configurations and protocols. Which ones work?

  3. I assume the proxy servers will work only on lesser-known VPS providers, not Hetzner, etc. Is that assumption correct?

lowendcompute avatar Jun 19 '25 12:06 lowendcompute

Can someone help us with mtproto proxies or v2ray configs?

  1. Does this script work, or do the proxies have to be created in a special way? https://github.com/HirbodBehnam/MTProtoProxyInstaller

  2. v2ray and xray have many possible configurations and protocols. Which ones work?

  3. I assume the proxy servers will work only on lesser-known VPS providers, not Hetzner, etc. Is that assumption correct?

Maybe...

  1. The script would probably work. Mtproto doesn't seem that complicated after all.

  2. No one is exactly sure... I once had vless setup on my VPS, and at some point, it stopped working, even through my VPS wasn't blocked. I didnt bother afterward and used socks over ssh.

  3. The proxy won't work... problem is that iran is currently blocking all out-of-country connections... except for api.github.com, the only way I can talk with you all

HoseanRC avatar Jun 19 '25 13:06 HoseanRC

I ran the script. This is what it gave me: https://github.com/lowendcompute/lowendcompute.github.io/blob/main/secretuser.txt

It doesn't work...

~ $ ping 170.75.166.3
PING 170.75.166.3 (170.75.166.3) 56(84) bytes of data.
^C
--- 170.75.166.3 ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 2052ms

~ $ curl 170.75.166.3 -v
*   Trying 170.75.166.3:80...
^C
~ $ curl https://170.75.166.3 -v
*   Trying 170.75.166.3:443...
^C

HoseanRC avatar Jun 19 '25 14:06 HoseanRC

First of all, the rest of the rest for Persian talking about the misery of Enchardus is not good and I want to scrap with Iran's friends.

بچه ها راه حلی برای اتضال پیدا کردید؟ اتفاقی دیدم گیت هاب اپش کار میکنه فقط هم کوگل بالا میاد وی پی ان یا پروکسی دارید؟

Did you guys find a solution to the problem? I happened to see that the GitHub app works But only Google comes up. Do you have a VPN or proxy?

mohandex avatar Jun 19 '25 14:06 mohandex

First of all, the rest of the rest for Persian talking about the misery of Enchardus is not good and I want to scrap with Iran's friends.

بچه ها راه حلی برای اتضال پیدا کردید؟ اتفاقی دیدم گیت هاب اپش کار میکنه فقط هم کوگل بالا میاد وی پی ان یا پروکسی دارید؟

گوگل شروع کرد به کار کردن؟!؟! Ain't no way!

Google started working?!?!

HoseanRC avatar Jun 19 '25 14:06 HoseanRC

اره کار میکنه گوگل خودت چیزی داری وصل بشم

Yes, it works. Google Do you have anything to connect?

mohandex avatar Jun 19 '25 14:06 mohandex

Supposedly Tor with Snowflake bridges will work, or even Tor with obfs4 bridge if you can find an unblocked obfs4 bridge.

Tor + Snowflake was working before yesterday (June 18th) disruption. At the moment, it's not working.

gusgustavo avatar Jun 19 '25 14:06 gusgustavo

Supposedly Tor with Snowflake bridges will work, or even Tor with obfs4 bridge if you can find an unblocked obfs4 bridge.

Unfortunately access to obfs4 i don't have to test

mohandex avatar Jun 19 '25 15:06 mohandex

Supposedly Tor with Snowflake bridges will work, or even Tor with obfs4 bridge if you can find an unblocked obfs4 bridge.

Unfortunately access to obfs4 i don't have to test

you can get it via their Telegram channel. Should I paste you some here?

pirooz-gthb avatar Jun 19 '25 15:06 pirooz-gthb

https://github.com/V2RAYCONFIGSPOOL/TELEGRAM_PROXY_SUB

someone test this and update us if works or no. 24 hourly updates the proxies for telegram

matmat352 avatar Jun 19 '25 15:06 matmat352

The IODA charts show a recovery in the "Google Search" data series since 2025-06-18 11:00 UTC (14:30 Iran Time). However, the "Active Probing" data series is still near zero. I don't know how to interpret that. Maybe traffic that originates inside the country is being allowed out, incoming traffic is blocked? Are people able to access Google Search?

https://ioda.inetintel.cc.gatech.edu/country/IR?from=1750222800&until=1750345500

Internet Connectivity for Iran (Islamic Republic Of), Jun 18, 2025 5:00am UTC - Jun 19, 2025 3:05pm UTC

wkrp avatar Jun 19 '25 15:06 wkrp

@wkrp only "google.com" opens. all other subdomains or google services are down. you can search in google.com only; but then only iranian websites opens.

ranthe21 avatar Jun 19 '25 15:06 ranthe21

https://github.com/V2RAYCONFIGSPOOL/TELEGRAM_PROXY_SUB

someone test this and update us if works or no. 24 hourly updates the proxies for telegram

Not work.

mohandex avatar Jun 19 '25 15:06 mohandex

The IODA charts show a recovery in the "Google Search" data series since 2025-06-18 11:00 UTC (14:30 Iran Time). However, the "Active Probing" data series is still near zero. I don't know how to interpret that. Maybe traffic that originates inside the country is being allowed out, incoming traffic is blocked? Are people able to access Google Search?

https://ioda.inetintel.cc.gatech.edu/country/IR?from=1750222800&until=1750345500

Internet Connectivity for Iran (Islamic Republic Of), Jun 18, 2025 5:00am UTC - Jun 19, 2025 3:05pm UTC

Just opened Google

mohandex avatar Jun 19 '25 15:06 mohandex

Supposedly Tor with Snowflake bridges will work, or even Tor with obfs4 bridge if you can find an unblocked obfs4 bridge.

Unfortunately access to obfs4 i don't have to test

you can get it via their Telegram channel. Should I paste you some here?

Paste here . We dont access any thing outside just google

mohandex avatar Jun 19 '25 15:06 mohandex

only "google.com" opens. all other subdomains or google services are down. you can search in google.com only; but then only iranian websites opens.

If www.google.com is accessible, it may be possible to bootstrap a Snowflake connection using the ampcache rendezvous in Orbot or Tor Browser. There's instructions for how to do it in #197. If you know how to manually enter a bridge line, try these bridge lines:

snowflake 192.0.2.5:80 2B280B23E1107BB62ABFC40DDCC8824814F80A72 fingerprint=2B280B23E1107BB62ABFC40DDCC8824814F80A72 url=https://snowflake-broker.torproject.net/ ampcache=https://cdn.ampproject.org/ front=www.google.com ice=stun:stun.antisip.com:3478,stun:stun.epygi.com:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.mixvoip.com:3478,stun:stun.nextcloud.com:3478,stun:stun.bethesda.net:3478,stun:stun.nextcloud.com:443 utls-imitate=hellorandomizedalpn
snowflake 192.0.2.6:80 8838024498816A039FCBBAB14E6F40A0843051FA fingerprint=8838024498816A039FCBBAB14E6F40A0843051FA url=https://snowflake-broker.torproject.net/ ampcache=https://cdn.ampproject.org/ front=www.google.com ice=stun:stun.antisip.com:3478,stun:stun.epygi.com:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.mixvoip.com:3478,stun:stun.nextcloud.com:3478,stun:stun.bethesda.net:3478,stun:stun.nextcloud.com:443 utls-imitate=hellorandomizedalpn

(EDIT: See https://github.com/net4people/bbs/issues/484#issuecomment-2988725336 for bridge lines that use google.com instead of www.google.com.)

There's a curl command you can run to see if ampcache rendezvous for Snowflake is likely to work for you.

curl --header 'Host: snowflake--broker-torproject-net.cdn.ampproject.org' https://www.google.com/c/s/snowflake-broker.torproject.net/amp/client/

(EDIT: the command I originally posted was missing the "www.google.com" part, now it's fixed.)

This command attempts to access the Snowflake broker through the AMP cache. If you see something like <pre>0eyJlcnJvciI6ImNhbm5vdCBkZWNvZGUgVVJMIHBhdGgifQ==</pre> at the bottom, it is working. If you see some HTTP error or timeout, it is not working.

But even if the ampcache rendezvous works, the Snowflake connection may not work. It depends on whether the WebRTC connection works.

wkrp avatar Jun 19 '25 15:06 wkrp

only "google.com" opens. all other subdomains or google services are down. you can search in google.com only; but then only iranian websites opens.

If www.google.com is accessible, it may be possible to bootstrap a Snowflake connection using the ampcache rendezvous in Orbot or Tor Browser. There's instructions for how to do it in #197. If you know how to manually enter a bridge line, try these bridge lines:

snowflake 192.0.2.5:80 2B280B23E1107BB62ABFC40DDCC8824814F80A72 fingerprint=2B280B23E1107BB62ABFC40DDCC8824814F80A72 url=https://snowflake-broker.torproject.net/ ampcache=https://cdn.ampproject.org/ front=www.google.com ice=stun:stun.antisip.com:3478,stun:stun.epygi.com:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.mixvoip.com:3478,stun:stun.nextcloud.com:3478,stun:stun.bethesda.net:3478,stun:stun.nextcloud.com:443 utls-imitate=hellorandomizedalpn
snowflake 192.0.2.6:80 8838024498816A039FCBBAB14E6F40A0843051FA fingerprint=8838024498816A039FCBBAB14E6F40A0843051FA url=https://snowflake-broker.torproject.net/ ampcache=https://cdn.ampproject.org/ front=www.google.com ice=stun:stun.antisip.com:3478,stun:stun.epygi.com:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.mixvoip.com:3478,stun:stun.nextcloud.com:3478,stun:stun.bethesda.net:3478,stun:stun.nextcloud.com:443 utls-imitate=hellorandomizedalpn

There's a curl command you can run to see if ampcache rendezvous for Snowflake is likely to work for you.

curl https://snowflake--broker-torproject-net.cdn.ampproject.org/c/s/snowflake-broker.torproject.net/amp/client/

This command attempts to access the Snowflake broker through the AMP cache. If you see something like <pre>0eyJlcnJvciI6ImNhbm5vdCBkZWNvZGUgVVJMIHBhdGgifQ==</pre> at the bottom, it is working. If you see some HTTP error or timeout, it is not working.

But even if the ampcache rendezvous works, the Snowflake connection may not work. It depends on whether the WebRTC connection works.

Not work

mohandex avatar Jun 19 '25 15:06 mohandex

I tried almost everything. And i just find out git app still working , We need serious help. Google.com open . But just the web search page . And github.com or any website without an iranian ip range and destination is blocked . But github app still open . There must be a solution for this situation.

vipgate avatar Jun 19 '25 16:06 vipgate

There's a curl command you can run to see if ampcache rendezvous for Snowflake is likely to work for you. Not work

Okay, can you try this command too?

curl --header 'Host: amp-dev.cdn.ampproject.org' https://www.google.com/c/s/amp.dev/

Or try this one. This is an example of retrieving a www.aljazeera.net article through www.google.com:

curl --header 'Host: www-aljazeera-net.cdn.ampproject.org' https://www.google.com/c/s/www.aljazeera.net/amp/sport/2025/6/19/%d9%86%d9%82%d9%84-%d9%85%d8%a8%d8%a7%d8%a8%d9%8a-%d9%86%d8%ac%d9%85-%d8%b1%d9%8a%d8%a7%d9%84-%d9%85%d8%af%d8%b1%d9%8a%d8%af-%d8%a5%d9%84%d9%89-%d8%a7%d9%84%d9%85%d8%b3%d8%aa%d8%b4%d9%81%d9%89

(EDIT: See https://github.com/net4people/bbs/issues/484#issuecomment-2988824740 for corrected versions of these commands.)

In general, if a web site offers an AMP version of its pages, then you can access it through the Google AMP cache. If these commands work, it might open up some connectivity options.

wkrp avatar Jun 19 '25 16:06 wkrp

There's a curl command you can run to see if ampcache rendezvous for Snowflake is likely to work for you. Not work

Okay, can you try this command too?

curl --header 'Host: amp-dev.cdn.ampproject.org' https://www.google.com/c/s/amp.dev/

Or try this one. This is an example of retrieving a www.aljazeera.net article through www.google.com:

curl --header 'Host: www-aljazeera-net.cdn.ampproject.org' https://www.google.com/c/s/www.aljazeera.net/amp/sport/2025/6/19/%d9%86%d9%82%d9%84-%d9%85%d8%a8%d8%a7%d8%a8%d9%8a-%d9%86%d8%ac%d9%85-%d8%b1%d9%8a%d8%a7%d9%84-%d9%85%d8%af%d8%b1%d9%8a%d8%af-%d8%a5%d9%84%d9%89-%d8%a7%d9%84%d9%85%d8%b3%d8%aa%d8%b4%d9%81%d9%89

In general, if a web site offers an AMP version of its pages, then you can access it through the Google AMP cache. If these commands work, it might open up some connectivity options.

curl: (6) Could not resolve host: www.google.com

mohandex avatar Jun 19 '25 16:06 mohandex

curl: (6) Could not resolve host: www.google.com

That's strange, because at https://github.com/net4people/bbs/issues/484#issuecomment-2988496554 you said you could access google. Maybe it is only google.com that works, not www.google.com? Try these:

curl --header 'Host: amp-dev.cdn.ampproject.org' https://google.com/c/s/amp.dev/
curl --header 'Host: www-aljazeera-net.cdn.ampproject.org' https://google.com/c/s/www.aljazeera.net/amp/sport/2025/6/19/%d9%86%d9%82%d9%84-%d9%85%d8%a8%d8%a7%d8%a8%d9%8a-%d9%86%d8%ac%d9%85-%d8%b1%d9%8a%d8%a7%d9%84-%d9%85%d8%af%d8%b1%d9%8a%d8%af-%d8%a5%d9%84%d9%89-%d8%a7%d9%84%d9%85%d8%b3%d8%aa%d8%b4%d9%81%d9%89

wkrp avatar Jun 19 '25 16:06 wkrp