skip to content
PingTraceSSH Logo
Donate

Network Problems (Fast Fixes)

These are the issues people search for most when “the internet is broken” — DNS failures, timeouts, high ping, blocked ports, traceroute weirdness, and ISP outages. Pick the symptom, run the linked tool, and move on.

Use responsibly: only test systems you own or are authorized to troubleshoot.

Website won’t load: DNS not resolving (NXDOMAIN / SERVFAIL)

DNS_PROBE_FINISHED_NXDOMAINERR_NAME_NOT_RESOLVEDdomain not resolvingSERVFAIL

If a name can’t resolve, nothing else matters. Verify A/AAAA, NS, SOA, and TXT (SPF/DKIM) in one pass.

Do this (in order)

  1. Run a full DNS lookup (A/AAAA/CNAME/MX/NS/SOA/TXT).
  2. Confirm the authoritative NS are correct and consistent.
  3. Check for typos, missing records, or a bad CNAME chain.
  4. If only some locations fail: it’s likely propagation/caching or split-horizon DNS.

High ping, jitter, or “lag spikes”

high pinglag spikesjitterslow internet but speedtest is fine

Latency problems are usually routing, bufferbloat/congestion, or a bad hop. Measure from browser + edge to separate you vs the path.

Do this (in order)

  1. Use Ping Monitor to compare Browser vs Edge latency.
  2. If Browser is bad but Edge is fine: local Wi-Fi/LAN/device queueing.
  3. If both are bad: upstream congestion, routing change, or ISP issue.
  4. Look for jitter (variance), not just average RTT.

Packet loss / timeouts (ERR_CONNECTION_TIMED_OUT)

packet losstimeoutsERR_CONNECTION_TIMED_OUTrequest timed out

Timeouts happen when packets drop or a firewall/rate-limit blocks the flow. Confirm whether it’s the path, the port, or the destination.

Do this (in order)

  1. Run Ping Monitor and watch loss %, not just RTT.
  2. Run Traceroute to see where loss starts (don’t panic at ICMP-blocking hops).
  3. If the service is reachable from some networks but not yours: suspect ISP routing or filtering.
  4. Confirm the destination port is actually open.

Port is blocked or closed (SSH/HTTPS/RDP/etc.)

port closedconnection refusedport 443 closedssh timeout

A host can be up while a service is down. Validate the port, grab a banner, and confirm TLS certificate when relevant.

Do this (in order)

  1. Scan the exact port(s) you expect (22/443/3389/etc.).
  2. If open: banner/TLS details often confirm you hit the right service.
  3. If closed: service down or host firewall rejecting.
  4. If timeout: upstream firewall, security group, route, or ISP filtering.

Traceroute shows * * * or stops mid-path

traceroute timeouttraceroute stopsstars in traceroute* * *

Some routers drop ICMP/UDP probes by design. Focus on where latency jumps or where the destination becomes unreachable.

Do this (in order)

  1. Run Traceroute Map and look for the first hop where RTT jumps.
  2. Ignore isolated “*” hops if later hops respond normally.
  3. If the trace never reaches the destination: routing, filtering, or outage.
  4. Correlate with Ping Monitor (loss/jitter) for confidence.

Suspected ISP outage or routing incident

internet outage near meisp outagerouting issueBGP issue

Before you reboot everything, verify whether the problem is regional (outage signals) and identify the ISP/ASN to escalate with real data.

Do this (in order)

  1. Use Outage Detector to check reachability patterns + live anomaly signals.
  2. Open ISP Support Insights to collect ASN, RDAP contacts, and peering context.
  3. If multiple major targets fail: likely ISP/backhaul issue.
  4. If only one service fails: destination/CDN or a specific route.

FAQ

What’s the fastest way to diagnose “site is down”?

Start with DNS Lookup (records + NS/SOA). If DNS is fine, run Ping Monitor for loss/jitter, then Port Scanner for the service port, and Traceroute for path-level clues.

Why does traceroute show * * * but the site still works?

Many routers deprioritize or block traceroute probes (ICMP/UDP). If later hops respond and the destination is reachable, the * hops usually aren’t the issue.

How do I tell if it’s my Wi-Fi or my ISP?

Compare Browser vs Edge latency in Ping Monitor. If Browser is worse, it’s local (Wi-Fi/LAN/device). If both are bad, it’s upstream (ISP/path).

Want deeper ISP/BGP context for escalation? Use ISP Support Insights and include the ASN, RDAP contact, and traceroute evidence in your ticket.