On Wednesday, China went through what seemed like a digital blackout that lasted about an hour.

Internet connections between China and the rest of the world were disrupted, and millions of users found themselves unable to reach websites and services outside the country.

According to a new analysis published by the Great Firewall Report, a monitoring group that tracks internet censorship in China, the outage was linked to unusual activity targeting HTTPS traffic.

What happened during the outage

The disruption began at 12:34 AM Beijing time and lasted until 1:48 AM, according to the Great Firewall Report. During this window, researchers observed a large-scale technical interference aimed at TCP port 443, which is the standard port used for HTTPS traffic.

“Someone was observed unconditionally injecting forged TCP RST+ACK packets to disrupt all connections on TCP port 443,” the report explained. “This incident caused massive disruption of the Internet connections between China and the rest of the world.”

As a result, users inside China were cut off from most websites hosted abroad. Even domestic services that relied on outside servers could not function properly. In effect, the outage temporarily sealed the country’s internet off from external communication.

Why Port 443 was targeted

The Great Firewall has blocked HTTPS communication before, but this case stood out. HTTPS is the protocol that secures communication between devices and web servers, making it harder for outside parties to track or intercept information.

Usually, when China restricts HTTPS, the ban extends beyond a single port. In previous cases, other ports like 22, 80, and 8443 were also blocked. For example, in 2020, HTTPS was restricted across every port from 1 to 65535, a far broader measure.

This time, the interference focused only on port 443, the most commonly used port for secure web traffic. Analysts noted that this was unusual because it effectively cut access to the majority of secure connections while leaving other less common ports untouched. The decision raised speculation about whether this was a deliberate test or a misconfigured block.

The mystery behind the device

Adding to the intrigue, the device responsible for the interference did not match the fingerprints of any known Great Firewall systems. The analysis stated that the behavior “suggests that the incident was caused by either a new GFW device or a known device operating in a novel or misconfigured state.”

This finding points to the possibility of China experimenting with new censorship technology or updating its infrastructure. The decentralized nature of the Great Firewall makes it even harder to pinpoint the exact cause.

Unlike a single central system, the firewall is made up of multiple entities that have the ability to block access. That complexity can result in inconsistencies or errors.

Some observers suggested the disruption could have been a trial run for future controls. China has a history of temporarily limiting internet access during politically sensitive events.

However, no such event was taking place at the time of this incident. Others have speculated that it might have been a simple misconfiguration rather than an intentional move.

Unanswered questions remain

For now, the real reason behind the outage remains uncertain. The timing and scope of the disruption left experts puzzled, especially since it affected such a critical part of global internet traffic.

The Great Firewall Report noted the odd timing, writing that “there is no obvious political or social event that would explain why this capability was deployed.” That makes it difficult to determine whether the outage was a deliberate stress test, a technical failure, or even an accidental mistake.

China’s internet controls have long been a subject of global scrutiny, with authorities balancing censorship, national security, and control over information flow. What happened on Wednesday shows that even with advanced infrastructure, disruptions can still occur, and when they do, they have massive consequences for communication with the outside world.