Here is a traceroute from multiple locations during the incident:
https://pulse.turbobytes.com/results/56129a5becbe400bf8001c9...
https://archive.is/bsq2y
Note the 10 references to qatar.net.qa. Hacker News uses CloudFlare so a traceroute from my current location was going to qatar.net.qa as well.