{ "service": "h3xa", "kind": "executive-briefing", "generated_at": "2026-10-28T18:08:36.914Z", "model_version": "h3xa-iss-1.1", "situation": { "id": "sit-0ed8fe8a9f66bffbc3894727", "scope_type": "country", "scope_key": "UA", "geography": "UA", "title": "Internet disruption in UA", "started_at": "2026-07-29T18:00:00.000Z", "last_observed_at": "2026-10-03T14:30:00.000Z", "status": "active", "classification": "UNKNOWN_DISRUPTION", "trajectory": "STABLE", "stress_score": 50, "confidence": 78, "event_count": 20, "affected_asns": [ "AS25071", "AS35362", "AS174", "AS3319", "AS25229", "AS6849" ], "affected_services": [], "affected_regions": [ "UA", "4366", "4377", "4373", "4368" ], "source_count": 3, "record_origin": "unrecorded", "first_seen": "2026-08-29T22:33:31.959Z", "updated_at": "2026-10-03T23:39:44.435Z" }, "events": [ { "id": "ise-5fc1cb450e0710e3bff9e231", "entity_type": "country", "entity_key": "UA", "geography": "UA", "started_at": "2026-08-10T09:00:00.000Z", "last_observed_at": "2026-10-03T14:30:00.000Z", "status": "active", "classification": "UNKNOWN_DISRUPTION", "trajectory": "STABLE", "stress_score": 50, "confidence": 15, "components": { "anomaly": 1, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 0.32275785320793715 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.5, "statistical_significance": 1 }, "baseline": { "signals": [ "voidly.anomaly_rate" ], "signal_count": 1 }, "current_measurement": { "voidly.anomaly_rate": 0.01386481802426343 }, "deviation": { "max_anomaly": 1, "max_deviation": 0.32275785320793715 }, "affected_asns": [], "affected_services": [], "affected_regions": [ "UA" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "insufficient corroboration" ], "observation_count": 20, "ingestion_method": null, "first_seen": "2026-08-29T22:33:20.865Z", "updated_at": "2026-10-03T23:50:20.749Z", "evidence": [ { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--b7f157eb-830b-58bf-59e4-f10eb8747886", "platform": "voidly-atlas", "observed_at": "2026-08-10T09:00:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0127", "content_hash": "e4078f86fed87223", "object_json": { "id": "incident--b7f157eb-830b-58bf-59e4-f10eb8747886", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0127", "status": "active", "sources": [ "ioda" ], "end_time": "2026-08-10T23:35:00Z", "severity": "critical", "confidence": 65, "start_time": "2026-08-10T09:00:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 1 critical alerts recorded.", "anomaly_rate": 0.20375586854460093, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--c921ee9f-fd27-572c-6dec-8c9811753b59", "platform": "voidly-atlas", "observed_at": "2026-08-11T00:20:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0128", "content_hash": "44e11b2ac104361a", "object_json": { "id": "incident--c921ee9f-fd27-572c-6dec-8c9811753b59", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0128", "status": "active", "sources": [ "ioda" ], "end_time": "2026-08-11T21:55:00Z", "severity": "critical", "confidence": 67, "start_time": "2026-08-11T00:20:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 3 critical alerts recorded.", "anomaly_rate": 0.22580645161290325, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--6ebf26cf-ff3c-5d88-c9f9-b36e59b43379", "platform": "voidly-atlas", "observed_at": "2026-08-12T19:05:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0129", "content_hash": "2766d2aaba7bb385", "object_json": { "id": "incident--6ebf26cf-ff3c-5d88-c9f9-b36e59b43379", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0129", "status": "active", "sources": [ "ioda" ], "end_time": "2026-08-12T21:55:00Z", "severity": "critical", "confidence": 67, "start_time": "2026-08-12T19:05:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 3 critical alerts recorded.", "anomaly_rate": 0.1228245595306988, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--21c45573-8675-5d8f-b7f4-2cf9809e2d90", "platform": "voidly-atlas", "observed_at": "2026-08-13T19:15:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0130", "content_hash": "3504681bbac02d1c", "object_json": { "id": "incident--21c45573-8675-5d8f-b7f4-2cf9809e2d90", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0130", "status": "active", "sources": [ "ioda" ], "end_time": "2026-08-13T21:45:00Z", "severity": "critical", "confidence": 67, "start_time": "2026-08-13T19:15:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 2 critical alerts recorded.", "anomaly_rate": 0.02195613754166222, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--103fdc6b-2bda-5c06-adec-c5a0c1686e48", "platform": "voidly-atlas", "observed_at": "2026-08-26T04:00:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0143", "content_hash": "5daadffcac3f8813", "object_json": { "id": "incident--103fdc6b-2bda-5c06-adec-c5a0c1686e48", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0143", "status": "active", "sources": [ "ioda" ], "end_time": "2026-08-26T18:00:00Z", "severity": "critical", "confidence": 67, "start_time": "2026-08-26T04:00:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 3 critical alerts recorded.", "anomaly_rate": 0.011351324436461125, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--488b1a0b-fb99-5f68-a145-d5636fc60716", "platform": "voidly-atlas", "observed_at": "2026-08-27T00:00:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0144", "content_hash": "20f1c385943fa331", "object_json": { "id": "incident--488b1a0b-fb99-5f68-a145-d5636fc60716", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0144", "status": "active", "sources": [ "ioda" ], "end_time": "2026-08-27T22:25:00Z", "severity": "critical", "confidence": 67, "start_time": "2026-08-27T00:00:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 2 critical alerts recorded.", "anomaly_rate": 0.012605277260111816, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": 22.4167, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--51327833-99f4-5bdd-6a00-ba4b13afc056", "platform": "voidly-atlas", "observed_at": "2026-08-28T00:05:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0145", "content_hash": "6fe2a20f81798fc0", "object_json": { "id": "incident--51327833-99f4-5bdd-6a00-ba4b13afc056", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0145", "status": "active", "sources": [ "ioda" ], "end_time": "2026-08-28T16:40:00Z", "severity": "critical", "confidence": 67, "start_time": "2026-08-28T00:05:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 3 critical alerts recorded.", "anomaly_rate": 0.29918675199743244, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": 16.5833, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--48c29b06-9140-5f43-ebbe-9652ed69fb26", "platform": "voidly-atlas", "observed_at": "2026-08-29T05:40:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0146", "content_hash": "b920d218338cbec9", "object_json": { "id": "incident--48c29b06-9140-5f43-ebbe-9652ed69fb26", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0146", "status": "active", "sources": [ "ioda" ], "end_time": "2026-08-29T20:00:00Z", "severity": "critical", "confidence": 75, "start_time": "2026-08-29T05:40:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 10 critical alerts recorded.", "anomaly_rate": 0.040772272862772026, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": 14.3333, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--82990682-219a-5400-45a9-e9285032940b", "platform": "voidly-atlas", "observed_at": "2026-08-30T00:30:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0147", "content_hash": "6d22277d221da8d0", "object_json": { "id": "incident--82990682-219a-5400-45a9-e9285032940b", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0147", "status": "active", "sources": [ "ioda" ], "end_time": "2026-08-30T13:40:00Z", "severity": "critical", "confidence": 65, "start_time": "2026-08-30T00:30:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 1 critical alerts recorded.", "anomaly_rate": 0.0390625, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--8da8c8ed-611a-556c-cc01-6c03d4758e9b", "platform": "voidly-atlas", "observed_at": "2026-09-23T08:20:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0168", "content_hash": "e1dda0361faccbe7", "object_json": { "id": "incident--8da8c8ed-611a-556c-cc01-6c03d4758e9b", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0168", "status": "active", "sources": [ "ioda" ], "end_time": "2026-09-23T15:50:00Z", "severity": "critical", "confidence": 67, "start_time": "2026-09-23T08:20:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 4 critical alerts recorded.", "anomaly_rate": 0.015618537469436887, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": 7.5, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--7aa311af-af3d-540c-354d-397c50018f07", "platform": "voidly-atlas", "observed_at": "2026-09-24T02:10:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0169", "content_hash": "fd60870d6988e83a", "object_json": { "id": "incident--7aa311af-af3d-540c-354d-397c50018f07", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0169", "status": "active", "sources": [ "ioda" ], "end_time": "2026-09-24T13:25:00Z", "severity": "critical", "confidence": 67, "start_time": "2026-09-24T02:10:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 2 critical alerts recorded.", "anomaly_rate": 0.012331456359419898, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": 11.25, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--3d90e420-6a98-5313-dccf-154dd80f0a4b", "platform": "voidly-atlas", "observed_at": "2026-09-25T15:25:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0170", "content_hash": "09f5b1b9b305da8c", "object_json": { "id": "incident--3d90e420-6a98-5313-dccf-154dd80f0a4b", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0170", "status": "active", "sources": [ "ioda" ], "end_time": "2026-09-25T21:45:00Z", "severity": "critical", "confidence": 65, "start_time": "2026-09-25T15:25:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 1 critical alerts recorded.", "anomaly_rate": 0.010673460955791213, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": 6.3333, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--315238a8-10db-57dc-e5ce-6b99d05e5668", "platform": "voidly-atlas", "observed_at": "2026-09-26T02:15:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0171", "content_hash": "43f347d6a7e62872", "object_json": { "id": "incident--315238a8-10db-57dc-e5ce-6b99d05e5668", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0171", "status": "active", "sources": [ "ioda" ], "end_time": "2026-09-26T11:50:00Z", "severity": "critical", "confidence": 65, "start_time": "2026-09-26T02:15:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 1 critical alerts recorded.", "anomaly_rate": 0.03119584055459272, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": 9.5833, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--ce012521-5ef8-5e35-7885-02ea3bfc76c9", "platform": "voidly-atlas", "observed_at": "2026-09-27T02:05:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0172", "content_hash": "b31c5f7a58f3418c", "object_json": { "id": "incident--ce012521-5ef8-5e35-7885-02ea3bfc76c9", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0172", "status": "active", "sources": [ "ioda" ], "end_time": "2026-09-27T22:25:00Z", "severity": "critical", "confidence": 70, "start_time": "2026-09-27T02:05:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 6 critical alerts recorded.", "anomaly_rate": 0.015597929658095781, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--974f54fa-a3ab-537d-cb36-9cd71377df9d", "platform": "voidly-atlas", "observed_at": "2026-09-28T09:45:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0173", "content_hash": "f77b3f010b49597b", "object_json": { "id": "incident--974f54fa-a3ab-537d-cb36-9cd71377df9d", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0173", "status": "active", "sources": [ "ioda" ], "end_time": "2026-09-28T14:30:00Z", "severity": "critical", "confidence": 65, "start_time": "2026-09-28T09:45:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 1 critical alerts recorded.", "anomaly_rate": 0.025547445255474453, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--4afd449d-bfaa-5c4f-d483-e7bd66bb34f6", "platform": "voidly-atlas", "observed_at": "2026-09-29T14:50:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0174", "content_hash": "901ce89615904736", "object_json": { "id": "incident--4afd449d-bfaa-5c4f-d483-e7bd66bb34f6", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0174", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-29T14:50:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 1 critical alerts recorded.", "anomaly_rate": 0.01559792027729636, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--77017389-b9dd-5c2c-66f3-54eda2db1456", "platform": "voidly-atlas", "observed_at": "2026-09-30T15:00:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0175", "content_hash": "ced8bf1722ecdca3", "object_json": { "id": "incident--77017389-b9dd-5c2c-66f3-54eda2db1456", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0175", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-30T15:00:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 1 critical alerts recorded.", "anomaly_rate": 0.01559792027729636, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--6264073c-fc16-5595-2323-644d3ccd8fff", "platform": "voidly-atlas", "observed_at": "2026-10-01T23:10:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0176", "content_hash": "e3179daf03c20317", "object_json": { "id": "incident--6264073c-fc16-5595-2323-644d3ccd8fff", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0176", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-10-01T23:10:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 1 critical alerts recorded.", "anomaly_rate": 0.38860971524288107, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--8736362b-b138-57a5-4685-d049f033091b", "platform": "voidly-atlas", "observed_at": "2026-10-02T15:20:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0177", "content_hash": "fec92939efa24dac", "object_json": { "id": "incident--8736362b-b138-57a5-4685-d049f033091b", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0177", "status": "active", "sources": [ "ioda" ], "end_time": "2026-10-02T18:25:00Z", "severity": "critical", "confidence": 67, "start_time": "2026-10-02T15:20:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 2 critical alerts recorded.", "anomaly_rate": 0.13953488372093023, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-5fc1cb450e0710e3bff9e231", "stix_object_id": "incident--42dd8dee-54a1-5154-4a81-eb1647c8a0b3", "platform": "voidly-atlas", "observed_at": "2026-10-03T14:30:00.000Z", "name": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0178", "content_hash": "d60f59f25d6a2353", "object_json": { "id": "incident--42dd8dee-54a1-5154-4a81-eb1647c8a0b3", "name": "Internet connectivity disruption in Ukraine", "type": "incident", "title": "Internet connectivity disruption in Ukraine", "value": "ua-2026-0178", "status": "active", "sources": [ "ioda" ], "end_time": "2026-10-03T15:35:00Z", "severity": "critical", "confidence": 67, "start_time": "2026-10-03T14:30:00Z", "description": "IODA detected significant connectivity drop in Ukraine. 2 critical alerts recorded.", "anomaly_rate": 0.01386481802426343, "country_code": "UA", "country_name": "Ukraine", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } } ], "derivations": [] }, { "id": "ise-2dd19c1529c841da6e9a922f", "entity_type": "asn", "entity_key": "AS35362", "geography": "UA", "started_at": "2026-07-30T10:00:00.000Z", "last_observed_at": "2026-07-30T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.395761634492438 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS35362" ], "affected_services": [], "affected_regions": [ "UA" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:19.229Z", "updated_at": "2026-10-03T23:50:19.040Z", "evidence": [ { "event_id": "ise-2dd19c1529c841da6e9a922f", "stix_object_id": "incident--23460bb2-85ab-5bb0-3449-233bc11f62eb", "platform": "ioda", "observed_at": "2026-07-30T10:00:00.000Z", "name": "BEST -- Ukraine", "value": "geoasn/35362-ua", "content_hash": "8fd858dc30cf7626", "object_json": { "id": "incident--23460bb2-85ab-5bb0-3449-233bc11f62eb", "name": "BEST -- Ukraine", "type": "incident", "score": 248748.16666666666, "title": "BEST -- Ukraine", "value": "geoasn/35362-ua", "method": "median", "location": "geoasn/35362-UA", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1492489 } } ], "derivations": [] }, { "id": "ise-17a1b947fd84c0e1e271aa7b", "entity_type": "asn", "entity_key": "AS6849", "geography": "4368", "started_at": "2026-09-17T08:10:00.000Z", "last_observed_at": "2026-09-17T08:10:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.3254902486896905 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS6849" ], "affected_services": [], "affected_regions": [ "4368" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-09-30T03:05:25.480Z", "updated_at": "2026-10-03T23:50:34.889Z", "evidence": [ { "event_id": "ise-17a1b947fd84c0e1e271aa7b", "stix_object_id": "incident--f4ed5ee6-bf9e-5c63-6e4e-153008cce37c", "platform": "ioda", "observed_at": "2026-09-17T08:10:00.000Z", "name": "UKRTELNET -- Vinnytsya", "value": "geoasn/6849-4368", "content_hash": "135e095f92fbc298", "object_json": { "id": "incident--f4ed5ee6-bf9e-5c63-6e4e-153008cce37c", "name": "UKRTELNET -- Vinnytsya", "type": "incident", "score": 211586.61764705883, "title": "UKRTELNET -- Vinnytsya", "value": "geoasn/6849-4368", "method": "median", "location": "geoasn/6849-4368", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1438789 } } ], "derivations": [] }, { "id": "ise-cf93018a42599aaf8029f34f", "entity_type": "asn", "entity_key": "AS6849", "geography": "4377", "started_at": "2026-09-17T08:10:00.000Z", "last_observed_at": "2026-09-17T08:10:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.633235230215561 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS6849" ], "affected_services": [], "affected_regions": [ "4377" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-09-30T03:05:25.472Z", "updated_at": "2026-10-03T23:50:34.867Z", "evidence": [ { "event_id": "ise-cf93018a42599aaf8029f34f", "stix_object_id": "incident--c69f3f59-8362-5202-ea9c-b260a4bcc8e6", "platform": "ioda", "observed_at": "2026-09-17T08:10:00.000Z", "name": "UKRTELNET -- Kiev City", "value": "geoasn/6849-4377", "content_hash": "378742b5665f7d17", "object_json": { "id": "incident--c69f3f59-8362-5202-ea9c-b260a4bcc8e6", "name": "UKRTELNET -- Kiev City", "type": "incident", "score": 429768.14285714284, "title": "UKRTELNET -- Kiev City", "value": "geoasn/6849-4377", "method": "median", "location": "geoasn/6849-4377", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1438789 } } ], "derivations": [] }, { "id": "ise-d008076cfb71f9673cc17aaa", "entity_type": "asn", "entity_key": "AS6849", "geography": "4373", "started_at": "2026-09-17T08:10:00.000Z", "last_observed_at": "2026-09-17T08:10:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.553532261840697 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS6849" ], "affected_services": [], "affected_regions": [ "4373" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-09-30T03:05:25.503Z", "updated_at": "2026-10-03T23:50:34.846Z", "evidence": [ { "event_id": "ise-d008076cfb71f9673cc17aaa", "stix_object_id": "incident--e06f46c7-c7b7-5051-e17c-b0b5a3be3bb2", "platform": "ioda", "observed_at": "2026-09-17T08:10:00.000Z", "name": "UKRTELNET -- Kharkiv", "value": "geoasn/6849-4373", "content_hash": "1103d45822a9093f", "object_json": { "id": "incident--e06f46c7-c7b7-5051-e17c-b0b5a3be3bb2", "name": "UKRTELNET -- Kharkiv", "type": "incident", "score": 357709.97237569065, "title": "UKRTELNET -- Kharkiv", "value": "geoasn/6849-4373", "method": "median", "location": "geoasn/6849-4373", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1438789 } } ], "derivations": [] }, { "id": "ise-eca782a5867819001ead398b", "entity_type": "asn", "entity_key": "AS25071", "geography": "UA", "started_at": "2026-07-30T10:00:00.000Z", "last_observed_at": "2026-07-30T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.58311365229299 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS25071" ], "affected_services": [], "affected_regions": [ "UA" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:19.320Z", "updated_at": "2026-10-03T23:50:19.021Z", "evidence": [ { "event_id": "ise-eca782a5867819001ead398b", "stix_object_id": "incident--f9e5a7ad-ab2a-596b-dcd5-dce71caac00e", "platform": "ioda", "observed_at": "2026-07-30T10:00:00.000Z", "name": "RadioCom-AS -- Ukraine", "value": "geoasn/25071-ua", "content_hash": "367b44c3173f8434", "object_json": { "id": "incident--f9e5a7ad-ab2a-596b-dcd5-dce71caac00e", "name": "RadioCom-AS -- Ukraine", "type": "incident", "score": 382923.9393939394, "title": "RadioCom-AS -- Ukraine", "value": "geoasn/25071-ua", "method": "median", "location": "geoasn/25071-UA", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1263649 } } ], "derivations": [] }, { "id": "ise-fa3649183b7d1d1cd3449160", "entity_type": "asn", "entity_key": "AS6849", "geography": "4366", "started_at": "2026-09-17T08:10:00.000Z", "last_observed_at": "2026-09-17T08:10:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.564371469216787 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS6849" ], "affected_services": [], "affected_regions": [ "4366" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-09-30T03:05:25.464Z", "updated_at": "2026-10-03T23:50:34.837Z", "evidence": [ { "event_id": "ise-fa3649183b7d1d1cd3449160", "stix_object_id": "incident--302fe865-01ce-5906-8404-740ffb7a6e46", "platform": "ioda", "observed_at": "2026-09-17T08:10:00.000Z", "name": "UKRTELNET -- Kiev", "value": "geoasn/6849-4366", "content_hash": "2ea67cc5c12f4737", "object_json": { "id": "incident--302fe865-01ce-5906-8404-740ffb7a6e46", "name": "UKRTELNET -- Kiev", "type": "incident", "score": 366750.137254902, "title": "UKRTELNET -- Kiev", "value": "geoasn/6849-4366", "method": "median", "location": "geoasn/6849-4366", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1438789 } } ], "derivations": [] }, { "id": "ise-fe72dd03c1c9ff548daec5e0", "entity_type": "asn", "entity_key": "AS35362", "geography": "4366", "started_at": "2026-07-30T10:00:00.000Z", "last_observed_at": "2026-07-30T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.408350711917219 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS35362" ], "affected_services": [], "affected_regions": [ "4366" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:19.238Z", "updated_at": "2026-10-03T23:50:18.992Z", "evidence": [ { "event_id": "ise-fe72dd03c1c9ff548daec5e0", "stix_object_id": "incident--6345619e-befd-55d8-4910-e6716514e390", "platform": "ioda", "observed_at": "2026-07-30T10:00:00.000Z", "name": "BEST -- Kiev", "value": "geoasn/35362-4366", "content_hash": "d831a96db17fe701", "object_json": { "id": "incident--6345619e-befd-55d8-4910-e6716514e390", "name": "BEST -- Kiev", "type": "incident", "score": 256064.28921568624, "title": "BEST -- Kiev", "value": "geoasn/35362-4366", "method": "median", "location": "geoasn/35362-4366", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1492489 } } ], "derivations": [] }, { "id": "ise-46da8d7268e11ffd1a2a5453", "entity_type": "asn", "entity_key": "AS25229", "geography": "UA", "started_at": "2026-09-19T20:20:00.000Z", "last_observed_at": "2026-09-19T20:20:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.ping-slash24.score" ], "signal_count": 1 }, "current_measurement": { "ioda.ping-slash24.score": 5.672165946560932 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS25229" ], "affected_services": [], "affected_regions": [ "UA" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-09-30T23:11:15.119Z", "updated_at": "2026-10-03T23:50:35.692Z", "evidence": [ { "event_id": "ise-46da8d7268e11ffd1a2a5453", "stix_object_id": "incident--9b7c141f-c643-5db1-5b4d-3b2cffe0de28", "platform": "ioda", "observed_at": "2026-09-19T20:20:00.000Z", "name": "VOLIA-AS -- Ukraine", "value": "geoasn/25229-ua", "content_hash": "081a81efaa428436", "object_json": { "id": "incident--9b7c141f-c643-5db1-5b4d-3b2cffe0de28", "name": "VOLIA-AS -- Ukraine", "type": "incident", "score": 470072.69230769225, "title": "VOLIA-AS -- Ukraine", "value": "geoasn/25229-ua", "method": "median", "location": "geoasn/25229-UA", "datasource": "ping-slash24", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1222189 } } ], "derivations": [] }, { "id": "ise-58b289588e13dbc0557448ea", "entity_type": "asn", "entity_key": "AS6849", "geography": "UA", "started_at": "2026-09-17T08:10:00.000Z", "last_observed_at": "2026-09-17T08:10:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.453012275202394 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS6849" ], "affected_services": [], "affected_regions": [ "UA" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-09-30T03:05:25.489Z", "updated_at": "2026-10-03T23:50:34.877Z", "evidence": [ { "event_id": "ise-58b289588e13dbc0557448ea", "stix_object_id": "incident--7bd2926a-93dc-5bd0-2088-b61e4b24c322", "platform": "ioda", "observed_at": "2026-09-17T08:10:00.000Z", "name": "UKRTELNET -- Ukraine", "value": "geoasn/6849-ua", "content_hash": "2fc2a1f9021e395e", "object_json": { "id": "incident--7bd2926a-93dc-5bd0-2088-b61e4b24c322", "name": "UKRTELNET -- Ukraine", "type": "incident", "score": 283798.92424995854, "title": "UKRTELNET -- Ukraine", "value": "geoasn/6849-ua", "method": "median", "location": "geoasn/6849-UA", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1438789 } } ], "derivations": [] }, { "id": "ise-74291e3195c1c1eea26fedcc", "entity_type": "asn", "entity_key": "AS3319", "geography": "UA", "started_at": "2026-09-14T08:40:00.000Z", "last_observed_at": "2026-09-14T08:40:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.770082492066866 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS3319" ], "affected_services": [], "affected_regions": [ "UA" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-09-28T10:07:04.207Z", "updated_at": "2026-10-03T23:50:32.752Z", "evidence": [ { "event_id": "ise-74291e3195c1c1eea26fedcc", "stix_object_id": "incident--1caa77db-be74-5388-2fe7-6b6a68566af2", "platform": "ioda", "observed_at": "2026-09-14T08:40:00.000Z", "name": "URAN -- Ukraine", "value": "geoasn/3319-ua", "content_hash": "473fe1cc5d0bd3f1", "object_json": { "id": "incident--1caa77db-be74-5388-2fe7-6b6a68566af2", "name": "URAN -- Ukraine", "type": "incident", "score": 588954.513888889, "title": "URAN -- Ukraine", "value": "geoasn/3319-ua", "method": "median", "location": "geoasn/3319-UA", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1696189 } } ], "derivations": [] }, { "id": "ise-7c8c99b13a69decb5d8cc995", "entity_type": "asn", "entity_key": "AS25229", "geography": "4373", "started_at": "2026-09-16T13:30:00.000Z", "last_observed_at": "2026-09-16T13:30:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.ping-slash24.score" ], "signal_count": 1 }, "current_measurement": { "ioda.ping-slash24.score": 5.838229039224122 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS25229" ], "affected_services": [], "affected_regions": [ "4373" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-09-30T03:05:25.094Z", "updated_at": "2026-10-03T23:50:34.332Z", "evidence": [ { "event_id": "ise-7c8c99b13a69decb5d8cc995", "stix_object_id": "incident--259bd54a-b5db-5f8d-ee1c-27c5b04b1e94", "platform": "ioda", "observed_at": "2026-09-16T13:30:00.000Z", "name": "VOLIA-AS -- Kharkiv", "value": "geoasn/25229-4373", "content_hash": "c1d29d3621bc214a", "object_json": { "id": "incident--259bd54a-b5db-5f8d-ee1c-27c5b04b1e94", "name": "VOLIA-AS -- Kharkiv", "type": "incident", "score": 689014.5751633988, "title": "VOLIA-AS -- Kharkiv", "value": "geoasn/25229-4373", "method": "median", "location": "geoasn/25229-4373", "datasource": "ping-slash24", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1505989 } } ], "derivations": [] }, { "id": "ise-8d1b957b3c615082a9becb0d", "entity_type": "asn", "entity_key": "AS35362", "geography": "4377", "started_at": "2026-07-30T10:00:00.000Z", "last_observed_at": "2026-07-30T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.483716484763343 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS35362" ], "affected_services": [], "affected_regions": [ "4377" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:19.211Z", "updated_at": "2026-10-03T23:50:19.049Z", "evidence": [ { "event_id": "ise-8d1b957b3c615082a9becb0d", "stix_object_id": "incident--64390a64-edc7-5048-3353-3c91068e5e25", "platform": "ioda", "observed_at": "2026-07-30T10:00:00.000Z", "name": "BEST -- Kiev City", "value": "geoasn/35362-4377", "content_hash": "6393561af8086d77", "object_json": { "id": "incident--64390a64-edc7-5048-3353-3c91068e5e25", "name": "BEST -- Kiev City", "type": "incident", "score": 304589.5918367347, "title": "BEST -- Kiev City", "value": "geoasn/35362-4377", "method": "median", "location": "geoasn/35362-4377", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1492489 } } ], "derivations": [] }, { "id": "ise-ac72163ecd18417352f81568", "entity_type": "asn", "entity_key": "AS174", "geography": "4377", "started_at": "2026-08-20T22:50:00.000Z", "last_observed_at": "2026-08-20T22:50:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.16442352289683 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS174" ], "affected_services": [], "affected_regions": [ "4377" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:26.695Z", "updated_at": "2026-10-03T23:50:26.859Z", "evidence": [ { "event_id": "ise-ac72163ecd18417352f81568", "stix_object_id": "incident--79c8e892-87ef-5e26-11c6-93eed535b4b8", "platform": "ioda", "observed_at": "2026-08-20T22:50:00.000Z", "name": "COGENT-174 -- Kiev City", "value": "geoasn/174-4377", "content_hash": "ea36afcb39bae50f", "object_json": { "id": "incident--79c8e892-87ef-5e26-11c6-93eed535b4b8", "name": "COGENT-174 -- Kiev City", "type": "incident", "score": 146022.75862068965, "title": "COGENT-174 -- Kiev City", "value": "geoasn/174-4377", "method": "median", "location": "geoasn/174-4377", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 846932 } } ], "derivations": [] }, { "id": "ise-cbe7a1cdd58b8fe38d316af8", "entity_type": "asn", "entity_key": "AS174", "geography": "UA", "started_at": "2026-08-20T22:50:00.000Z", "last_observed_at": "2026-08-20T22:50:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.215201486651934 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS174" ], "affected_services": [], "affected_regions": [ "UA" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:26.684Z", "updated_at": "2026-10-03T23:50:26.868Z", "evidence": [ { "event_id": "ise-cbe7a1cdd58b8fe38d316af8", "stix_object_id": "incident--cb73183c-191f-5163-c60b-b794c51c2ac8", "platform": "ioda", "observed_at": "2026-08-20T22:50:00.000Z", "name": "COGENT-174 -- Ukraine", "value": "geoasn/174-ua", "content_hash": "14f9ecfae2cec282", "object_json": { "id": "incident--cb73183c-191f-5163-c60b-b794c51c2ac8", "name": "COGENT-174 -- Ukraine", "type": "incident", "score": 164134.10852713176, "title": "COGENT-174 -- Ukraine", "value": "geoasn/174-ua", "method": "median", "location": "geoasn/174-UA", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 846932 } } ], "derivations": [] }, { "id": "ise-4366bc2e7b9e0cf62c6fa25d", "entity_type": "asn", "entity_key": "AS25071", "geography": null, "started_at": "2026-07-29T18:00:00.000Z", "last_observed_at": "2026-07-29T18:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.602471816446253 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS25071" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:18.751Z", "updated_at": "2026-10-03T23:50:18.625Z", "evidence": [ { "event_id": "ise-4366bc2e7b9e0cf62c6fa25d", "stix_object_id": "incident--3bc24211-c4c2-5c20-b976-f992003f97f5", "platform": "ioda", "observed_at": "2026-07-29T18:00:00.000Z", "name": "AS25071 (RadioCom-AS)", "value": "asn/25071", "content_hash": "597389deaf03cb70", "object_json": { "id": "incident--3bc24211-c4c2-5c20-b976-f992003f97f5", "name": "AS25071 (RadioCom-AS)", "type": "incident", "score": 400378.48484848486, "title": "AS25071 (RadioCom-AS)", "value": "asn/25071", "method": "median", "location": "asn/25071", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1321249 } } ], "derivations": [] }, { "id": "ise-f1da8484f92251cc938b4b5c", "entity_type": "asn", "entity_key": "AS3319", "geography": null, "started_at": "2026-09-11T19:45:00.000Z", "last_observed_at": "2026-09-11T19:45:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 4.867745171997731 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS3319" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-09-27T10:01:35.543Z", "updated_at": "2026-10-03T23:50:32.333Z", "evidence": [ { "event_id": "ise-f1da8484f92251cc938b4b5c", "stix_object_id": "incident--836dab0c-24db-5218-794c-b446aa581c44", "platform": "ioda", "observed_at": "2026-09-11T19:45:00.000Z", "name": "AS3319 (URAN)", "value": "asn/3319", "content_hash": "271ea6487f351ee8", "object_json": { "id": "incident--836dab0c-24db-5218-794c-b446aa581c44", "name": "AS3319 (URAN)", "type": "incident", "score": 73746.13821138212, "title": "AS3319 (URAN)", "value": "asn/3319", "method": "median", "location": "asn/3319", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1814155 } } ], "derivations": [] }, { "id": "ise-cfeecf125381f2e9983806b0", "entity_type": "asn", "entity_key": "AS25229", "geography": null, "started_at": "2026-09-19T20:20:00.000Z", "last_observed_at": "2026-09-19T20:20:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.ping-slash24.score" ], "signal_count": 1 }, "current_measurement": { "ioda.ping-slash24.score": 5.672165946560932 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS25229" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-09-30T23:22:10.751Z", "updated_at": "2026-10-03T23:50:35.684Z", "evidence": [ { "event_id": "ise-cfeecf125381f2e9983806b0", "stix_object_id": "incident--68e4418d-37cd-5a40-a8a9-16d18503a1d0", "platform": "ioda", "observed_at": "2026-09-19T20:20:00.000Z", "name": "AS25229 (VOLIA-AS)", "value": "asn/25229", "content_hash": "259a4a7df7d4f7ab", "object_json": { "id": "incident--68e4418d-37cd-5a40-a8a9-16d18503a1d0", "name": "AS25229 (VOLIA-AS)", "type": "incident", "score": 470072.69230769225, "title": "AS25229 (VOLIA-AS)", "value": "asn/25229", "method": "median", "location": "asn/25229", "datasource": "ping-slash24", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1222189 } } ], "derivations": [] }, { "id": "ise-320f9011e84bde44a42bbc71", "entity_type": "asn", "entity_key": "AS6849", "geography": null, "started_at": "2026-09-17T08:10:00.000Z", "last_observed_at": "2026-09-17T08:10:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.452796370176204 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS6849" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-09-30T03:05:25.456Z", "updated_at": "2026-10-03T23:50:34.898Z", "evidence": [ { "event_id": "ise-320f9011e84bde44a42bbc71", "stix_object_id": "incident--538d84fc-6240-5748-7d4e-3a174e5d523c", "platform": "ioda", "observed_at": "2026-09-17T08:10:00.000Z", "name": "AS6849 (UKRTELNET)", "value": "asn/6849", "content_hash": "35502ba6866d85d7", "object_json": { "id": "incident--538d84fc-6240-5748-7d4e-3a174e5d523c", "name": "AS6849 (UKRTELNET)", "type": "incident", "score": 283657.8711066932, "title": "AS6849 (UKRTELNET)", "value": "asn/6849", "method": "median", "location": "asn/6849", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1438789 } } ], "derivations": [] }, { "id": "ise-9aaa2f9ba30c96e934372b40", "entity_type": "asn", "entity_key": "AS35362", "geography": null, "started_at": "2026-07-29T18:00:00.000Z", "last_observed_at": "2026-07-29T18:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.395761634492438 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS35362" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:18.741Z", "updated_at": "2026-10-03T23:50:18.615Z", "evidence": [ { "event_id": "ise-9aaa2f9ba30c96e934372b40", "stix_object_id": "incident--7bd7947a-4589-5ceb-518c-ccabfcf6cebf", "platform": "ioda", "observed_at": "2026-07-29T18:00:00.000Z", "name": "AS35362 (BEST)", "value": "asn/35362", "content_hash": "da365e8e607fa36f", "object_json": { "id": "incident--7bd7947a-4589-5ceb-518c-ccabfcf6cebf", "name": "AS35362 (BEST)", "type": "incident", "score": 248748.16666666666, "title": "AS35362 (BEST)", "value": "asn/35362", "method": "median", "location": "asn/35362", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1492489 } } ], "derivations": [] } ], "context": [], "audit": { "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.", "weights": { "anomaly": 0.3, "breadth": 0.2, "persistence": 0.15, "corroboration": 0.2, "baseline_deviation": 0.15 }, "derivation_ids": [], "observation_ids": [ "incident--b7f157eb-830b-58bf-59e4-f10eb8747886", "incident--c921ee9f-fd27-572c-6dec-8c9811753b59", "incident--6ebf26cf-ff3c-5d88-c9f9-b36e59b43379", "incident--21c45573-8675-5d8f-b7f4-2cf9809e2d90", "incident--103fdc6b-2bda-5c06-adec-c5a0c1686e48", "incident--488b1a0b-fb99-5f68-a145-d5636fc60716", "incident--51327833-99f4-5bdd-6a00-ba4b13afc056", "incident--48c29b06-9140-5f43-ebbe-9652ed69fb26", "incident--82990682-219a-5400-45a9-e9285032940b", "incident--8da8c8ed-611a-556c-cc01-6c03d4758e9b", "incident--7aa311af-af3d-540c-354d-397c50018f07", "incident--3d90e420-6a98-5313-dccf-154dd80f0a4b", "incident--315238a8-10db-57dc-e5ce-6b99d05e5668", "incident--ce012521-5ef8-5e35-7885-02ea3bfc76c9", "incident--974f54fa-a3ab-537d-cb36-9cd71377df9d", "incident--4afd449d-bfaa-5c4f-d483-e7bd66bb34f6", "incident--77017389-b9dd-5c2c-66f3-54eda2db1456", "incident--6264073c-fc16-5595-2323-644d3ccd8fff", "incident--8736362b-b138-57a5-4685-d049f033091b", "incident--42dd8dee-54a1-5154-4a81-eb1647c8a0b3", "incident--23460bb2-85ab-5bb0-3449-233bc11f62eb", "incident--f4ed5ee6-bf9e-5c63-6e4e-153008cce37c", "incident--c69f3f59-8362-5202-ea9c-b260a4bcc8e6", "incident--e06f46c7-c7b7-5051-e17c-b0b5a3be3bb2", "incident--f9e5a7ad-ab2a-596b-dcd5-dce71caac00e", "incident--302fe865-01ce-5906-8404-740ffb7a6e46", "incident--6345619e-befd-55d8-4910-e6716514e390", "incident--9b7c141f-c643-5db1-5b4d-3b2cffe0de28", "incident--7bd2926a-93dc-5bd0-2088-b61e4b24c322", "incident--1caa77db-be74-5388-2fe7-6b6a68566af2", "incident--259bd54a-b5db-5f8d-ee1c-27c5b04b1e94", "incident--64390a64-edc7-5048-3353-3c91068e5e25", "incident--79c8e892-87ef-5e26-11c6-93eed535b4b8", "incident--cb73183c-191f-5163-c60b-b794c51c2ac8", "incident--3bc24211-c4c2-5c20-b976-f992003f97f5", "incident--836dab0c-24db-5218-794c-b446aa581c44", "incident--68e4418d-37cd-5a40-a8a9-16d18503a1d0", "incident--538d84fc-6240-5748-7d4e-3a174e5d523c", "incident--7bd7947a-4589-5ceb-518c-ccabfcf6cebf" ], "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score." } }