Fresh insights from old data: corroborating reports of Turkmenistan IP unblocking and firewall testing

Cloudflare analyzes Radar data showing a mid-2024 surge in HTTP requests from Turkmenistan and concurrent shifts in TCP reset/timeout anomalies, aligning with reports of mass IP unblocking and potential firewall testing. By breaking down anomalies across connection stages and ASNs (TurkmenTelecom AS20661, Ashgabat City Telephone Network AS51495, and Altyn Asyr AS59974), the report highlights SNI-phase spikes and timeline changes (notably around June 13, July 4, July 13, and July 22), while cautioning that proportional reset/timeout metrics must be contextualized with traffic volumes and do not alone prove attribution. The findings suggest behavior consistent with large-scale filtering changes, offering retrospective context and guidance on interpreting resets/timeouts telemetry.