Iran’s Internet Blackout: A Nation Disconnected Amidst Escalating Tensions
Iran is currently experiencing an unprecedented internet blackout, now extending beyond ten consecutive days. Data from Cloudflare Radar indicates that HTTP traffic within the country has plummeted to less than 1% of typical levels, effectively isolating approximately 90 million citizens from the global internet.
This near-total shutdown commenced around 07:00 UTC on February 28, 2026, coinciding with coordinated military strikes by the United States and Israel across Iranian territory. Cloudflare Radar documented an almost immediate 98% drop in internet traffic, with HTTP requests collapsing across all major regions in Iran.
Independent internet monitoring organization NetBlocks has confirmed that this disruption is a result of deliberate government action, rather than cyberattacks or infrastructure failures. The simultaneous decline across key metrics—total bytes, HTTP bytes, and HTTP requests—at the exact same timestamp on February 28 underscores the intentional nature of this shutdown.
Regional and Network-Level Impact
The blackout’s reach is extensive, affecting nearly all parts of Iran. Tehran, which accounts for 65% of the nation’s internet traffic, along with Fars (7.9%), Isfahan (6.8%), Razavi Khorasan (4.8%), and Alborz Province (4.2%), have all seen their traffic drop to near zero since March 1. This pattern suggests a centrally coordinated effort rather than isolated incidents.
At the level of internet service providers (ISPs), the three largest in Iran have been significantly impacted. AS197207 (MCCI), responsible for 46.6% of pre-shutdown traffic, AS44244 (IranCell) at 25.7%, and AS58224 (TCI) at 11.4%, all experienced simultaneous outages, indicating direct intervention at the national infrastructure level.
By March 9, NetBlocks reported that the blackout had reached 216 hours, marking its tenth day, with connectivity still hovering around 1% of normal levels. As of March 10, the shutdown surpassed 240 hours, ranking it among the most severe government-imposed internet blackouts globally and the second longest in Iran’s history, following the January 2026 blackout triggered by anti-government protests.
Economic and Humanitarian Consequences
The prolonged internet shutdown has had profound economic repercussions. The Iranian Minister of Communications acknowledged that the blackout is costing the economy approximately $35.7 million per day, with online sales plummeting by up to 80%.
Human Rights Watch has condemned the blackout as a direct violation of fundamental rights, emphasizing that it also increases risks for civilians by obstructing access to emergency information. State-affiliated media have confirmed that only pre-approved websites on Iran’s domestic National Information Network remain accessible during this period.
Broader Context and Implications
This internet blackout is part of a broader pattern of escalating cyber and kinetic conflicts in the region. For instance, on February 28, 2026, the United States and Israel launched a coordinated offensive—code-named Operation Epic Fury by the U.S. and Operation Roaring Lion by Israel—initiating a wide-ranging cyber conflict that has spread across the Middle East and beyond. Within hours of these strikes, Iran launched a multi-vector retaliatory campaign involving hacktivist groups, state-aligned actors, and opportunistic cybercriminals, resulting in one of the most intense cyber confrontations in recent memory.
One significant early development was Iran’s near-complete loss of internet access. By the morning of February 28, available connectivity inside Iran had dropped to between 1% and 4%. This sudden disruption cut off state-aligned cyber units from their command and control networks, severely limiting their ability to coordinate and execute sophisticated cyberattacks in the near term.
As of March 2, 2026, approximately 60 individual groups—including pro-Russian collectives—were actively engaged in operations targeting Israeli, Western, and regional assets. Many of these groups operate under the newly formed Electronic Operations Room, established on February 28, 2026. These groups have claimed responsibility for attacks ranging from DDoS assaults on banks and government sites to full infrastructure compromises affecting energy, payment, and defense systems.
The conflict’s reach has extended far beyond Iran’s borders. Cybercriminals in the UAE launched vishing scams impersonating the Ministry of Interior to steal national identification numbers. The ransomware-as-a-service group Tarnished Scorpius (also known as INC Ransomware) listed an Israeli industrial machinery company on its leak site, replacing the company logo with a swastika. The speed and breadth of these attacks reflect a conflict that has moved well beyond a state-versus-state dynamic into a multi-actor cyber war.
Conclusion
Iran’s ongoing internet blackout, now exceeding ten days, underscores the profound impact of digital connectivity on modern society. Beyond the immediate economic losses and human rights concerns, this shutdown highlights the strategic role of internet access in geopolitical conflicts. As the situation develops, the international community remains watchful, recognizing the critical importance of maintaining open and secure communication channels in times of crisis.
