Syria disconected from the Internet at 10:30 GMT 2 February 2011, 12:30PM Syrian time:
Figure 1: Syria disconnects 29 November 2012
Ellipses in these graphs represent servers; boxes represent routers;
colors of boxes reflect ownership of parts of the network.
The green ellipses and the pink ellipse are four destinations in Yemen InternetPerils was watching (we weren't watching any in Syria). Paths to reach those Yemeni nodes changed suddenly at 10:30 AM GMT 29 November 2012. This is very close to the 10:26 AM GMT Syrian disconnect time reported by Renesys. According to Noah Shachtman in Wired Danger Room 29 November 2012: Syria Has Just Been Taken Offline,
Sure looks like a deliberate pulling of the plug, just like Egypt 22:30 GMT 20 January 2011. Various reports (for example Okga Khazan, wapo, 30 Nov 2012, Syria Internet outage: How it might have happened and what it means) say the Syrian government blames rebels for the outage, but what advantage would rebels gain from disconnecting the Internet they use to coordinate among themselves and with outsiders? Only an authoritarian government thinks it will gain advantage by disconnecting its country from the Internet.
BeforeAt 10:30 GMT routing goes through London to somewhere in the middle east, as you can see in Figure 2:
Nobody seems to claim 184.108.40.206, but apparently it is somehow associated with Syria, since it vanishes exactly at 10:30 AM GMT, when Syria disconnected from the Internet. Both 220.127.116.11 and 18.104.22.168