Cloudflare report reveals surge in internet shutdowns & outages

Cloudflare has released its Q2 2025 Internet Disruptions Report, outlining a series of significant global disruptions to Internet connectivity caused by government actions, infrastructure failures, fibre optic cable damage and cyberattacks.

Return of shutdowns

This quarter, Cloudflare observed a return of government-directed Internet shutdowns in several countries, reversing the positive trend seen in the previous quarter. The report states, "In our Q1 2025 summary post, we noted that we had not observed any government-directed Internet shutdowns during the quarter. Unfortunately, that forward progress was short-lived - in the second quarter of 2025, we observed shutdowns in Libya, Iran, Iraq, Syria, and Panama."

Multiple shutdowns were enforced in Libya, particularly following public protests against the Government of National Unity. In Iran, a series of three shutdowns in June followed escalating regional tensions and claims of cyber threats to national infrastructure. The government stated, "In light of the country's special circumstances and based on the measures taken by the competent authorities, temporary restrictions have been imposed on the country's Internet. It is obvious that these restrictions will be lifted once normal conditions are restored."

"We have previously stated that if necessary, we will certainly switch to a national internet and restrict global internet access. Security is our main concern, and we are witnessing cyberattacks on the country's critical infrastructure and disruptions in the functioning of banks. Many of the enemy's drones are managed and controlled via the internet, and a large amount of information is exchanged this way. A cryptocurrency exchange was also hacked, and considering all these issues, we have decided to impose Internet restrictions."

Iraq and Syria continued their practice of exam-related shutdowns. In Iraq, regular outages spanning hours took place across both the main part of the country and the Kurdistan region, aimed at preventing cheating during national school exams. In Syria, the 2025 shutdowns targeted only cellular connectivity and were limited to times and regions near exam centres.

In Panama, shutdowns were implemented in the province of Bocas del Toro amid protests, driven by official instructions with service restoration tracking the cessation of related demonstrations. The regulator stated, "...in compliance with Cabinet Decree No. 27 of June 20, 2025, and by formal instruction from the Ministry of Government, the temporary suspension of mobile telephony and residential internet services in the province of Bocas del Toro has been coordinated." A subsequent update confirmed, "... Internet and cellular telephone services in the province of Bocas del Toro have been restored as of 12:01 a.m. on Monday, June 30..."

Power infrastructure failures

Major power outages also impacted Internet connectivity, most notably across Portugal and Spain on 28 April. In Portugal, traffic dropped by approximately 50 percent immediately, further declining to 90 percent below normal levels within five hours. Spain experienced a similar reduction, with a 60 percent initial drop, falling to an 80 percent reduction over five hours. Internet traffic in both countries recovered as the power was restored early the following day.

Morocco's Orange Maroc reported international connectivity problems resulting from the Iberian power outage, and smaller-scale incidents in Puerto Rico, Saint Kitts and Nevis, North Macedonia, the Maldives and Curaçao all led to significant local disruptions.

Physical cable damage

Fibre optic infrastructure damage was another notable cause. In Haiti, two instances of damage to Digicel Haiti's fibre optic cables resulted in the provider and its networks going offline for several hours in May. In a translated statement, Digicel Haiti's Director General explained the cause. Airtel Malawi experienced a 90-minute outage on 24 June due to vandalism of their fibre lines, with service interruptions affecting both IPv4 and IPv6 connectivity.

Cyberattacks and technical faults

The report highlights the impact of cyber threats and operational problems at major service providers. Russian internet operator ASVT was hit by a major distributed denial-of-service (DDoS) attack, causing an 10-hour outage and continued disruption over several days. The attack reportedly reached 70.07 Gbps and 6.92 million packets per second, causing traffic to collapse to near zero for the period.

Technical missteps also caused issues in other markets. Bell Canada suffered a significant, albeit brief, outage due to a router update in May, while Lumen/CenturyLink users in North America lost connectivity for several hours after suspected DNS-related issues. Bell Canada's quick response restored service within an hour after rolling back the problematic update.

Unexplained disruptions

The report also includes cases where the underlying causes were not disclosed or remain unknown. Outages in Finland (Telia), the Philippines (SkyCable), Thailand (TrueMove H), and Syria included sharp drops in traffic and disruptions to network address announcements, but few official details were made available.

Regional implications

The report underscores the increasing challenges faced by all nations dependent on digital infrastructure. For Australia and New Zealand, the findings raise concerns regarding their own cyber readiness and the resilience of critical regional networks in the event of cascading failures caused by events abroad. The interconnected nature of Internet and power infrastructure means that issues in distant markets can reverberate globally.

Cloudflare's analysts concluded their summary stating, "Government-directed Internet shutdowns returned with a vengeance in the second quarter, and that trend continues into the third quarter, though the latest ones have been exam-related, and not driven by protests. And while power-outage related Internet disruptions have frequently been observed in the past, often in smaller countries with less stable infrastructure, the massive outage in Spain and Portugal on April 28 reminds us that much like the Internet, electrical infrastructure is often interconnected across countries, meaning that problems in one can potentially cause significant problems in others."