Evidence of internet disruptions in Russia during Moscow opposition protests

Network data from the NetBlocks internet observatory provide technical evidence of a targeted internet shutdown in Russia on Saturday 3 August 2019 as demonstrators took to Moscow’s streets to protest against crackdowns on political expression and representation in local elections.

Internet measurements of Russia’s IP space reveal that state-run operator Rostelecom experienced partial disruptions as police cracked down on the unauthorized protest. Between 12:00 p.m. UTC and 2:30 p.m. Rostelecom network AS12389 experienced a small, but detectable, anomalous fall in connectivity consistent with a targeted localised internet shutdown that is understood to have affected fixed-line and wifi connections:

Network data show that Rostelecom AS12389 experienced an anomalous drop in connectivity lasting several hours on Saturday afternoon. The three peaks show nominal diurnal internet activity, while the disruption is circled in red.

On Saturday morning, users also reported the loss of mobile internet and telephone connectivity in parts of central Moscow after 11:00 a.m. UTC (2:00 p.m local time) as demonstrators gathered to protest the disqualification of opposition candidates from standing in local elections. Mobile internet was reported unavailable with mobile operators including MTS and Beeline (PJSC VimpelCom):

NetBlocks data show the onset of the Rostelecom disruption shortly after the mobile disruptions, supporting reports that an order had been issued to disable public wifi networks in central Moscow in addition to the GSM shutdown, cutting off alternative lines of communication that demonstrators might use to organize and livestream interventions.

Social media posts from frustrated customers indicate that the disruptions affected users who were not directly involved in the protests, with one subscriber saying “Rostelecom certainly came up with a great idea, let’s lower the Internet speed on a rainy weekend, thanks, now I can neither play nor watch the video”:

More than 600 people are reported detained following Saturday’s protest in Moscow, which follows larger protests that took place on 27 July 2019 where police were criticized for their disproportionate response. Social media, and particularly YouTube, have been used by opposition figures to express concern over the local election disqualifications. Protesters claimed their right to walk, in what was billed as a “stroll” after authorities refused to provide an official permit for the demonstrations.

Purposeful or politically motivated Internet shutdowns are rare in Moscow, although telecommunication blackouts have been documented in other parts of Russia under similar circumstances. Saturday’s disruptions are likely to draw criticism from mainstream as well as opposition voices given their impact on critical infrastructure. NetBlocks recommends against the use of network disruptions to limit the rights to free expression and free assembly.

Update: 6 August 2019: In a news feature, BBC Russian reveals that a corresponding blocking order was issued to internet providers, confirming that Internet in central Moscow was “disabled at the request of law enforcement agencies” during Saturday’s protests. The reported disruption has been classed “the first state-owned shutdown in Moscow’s history”:


NetBlocks diffscans, which map the entire IP address space of a country in real time, show internet outages corresponding to connectivity disruptions. Purposeful internet outages generally have a distinct network pattern used by NetBlocks to determine and attribute the root cause of an outage, a process known as attribution which follows detection and classification stages.


NetBlocks is a civil society group working at the intersection of digital rights, cyber-security and internet governance. Independent and non-partisan, NetBlocks strives for an open and inclusive digital future for all.

[ methodology handbook | press | contact ] Graphics and visualizations provided under a free and open license for reuse with clear attribution.