{ "service": "h3xa", "kind": "executive-briefing", "generated_at": "2026-10-28T18:08:37.880Z", "model_version": "h3xa-iss-1.1", "situation": { "id": "sit-45b3f99f237f80b4fe771498", "scope_type": "country", "scope_key": "PL", "geography": "PL", "title": "Internet disruption in PL", "started_at": "2026-07-28T14:30:00.000Z", "last_observed_at": "2026-09-30T11:40:00.000Z", "status": "resolved", "classification": "ROUTING_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 46, "confidence": 69, "event_count": 15, "affected_asns": [ "AS41809", "AS15874", "AS41201", "AS50188", "AS50625" ], "affected_services": [], "affected_regions": [ "PL", "3297", "3296", "3295" ], "source_count": 2, "record_origin": "unrecorded", "first_seen": "2026-08-29T22:33:30.822Z", "updated_at": "2026-10-03T23:39:43.951Z" }, "events": [ { "id": "ise-31735f192e76ffc88a37db34", "entity_type": "country", "entity_key": "PL", "geography": "PL", "started_at": "2026-08-27T15:05:00.000Z", "last_observed_at": "2026-09-30T11:40:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 46, "confidence": 15, "components": { "anomaly": 1, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 0.02386634844868735 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.5, "statistical_significance": 1 }, "baseline": { "signals": [ "voidly.anomaly_rate" ], "signal_count": 1 }, "current_measurement": { "voidly.anomaly_rate": 0.012012012012012012 }, "deviation": { "max_anomaly": 1, "max_deviation": 0.02386634844868735 }, "affected_asns": [], "affected_services": [], "affected_regions": [ "PL" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "insufficient corroboration" ], "observation_count": 3, "ingestion_method": null, "first_seen": "2026-08-29T22:33:27.249Z", "updated_at": "2026-10-03T23:50:27.696Z", "evidence": [ { "event_id": "ise-31735f192e76ffc88a37db34", "stix_object_id": "incident--cbde1567-d5b2-5de5-6b83-deb48d197157", "platform": "voidly-atlas", "observed_at": "2026-08-27T15:05:00.000Z", "name": "Internet connectivity disruption in Poland", "value": "pl-2026-0024", "content_hash": "d13cecc62e9fcd99", "object_json": { "id": "incident--cbde1567-d5b2-5de5-6b83-deb48d197157", "name": "Internet connectivity disruption in Poland", "type": "incident", "title": "Internet connectivity disruption in Poland", "value": "pl-2026-0024", "status": "active", "sources": [ "ioda" ], "end_time": "2026-08-27T17:25:00Z", "severity": "critical", "confidence": 65, "start_time": "2026-08-27T15:05:00Z", "description": "IODA detected significant connectivity drop in Poland. 1 critical alerts recorded.", "anomaly_rate": 0.02386634844868735, "country_code": "PL", "country_name": "Poland", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": 2.3333, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-31735f192e76ffc88a37db34", "stix_object_id": "incident--65287431-4f27-5557-fbd8-c843bd274d68", "platform": "voidly-atlas", "observed_at": "2026-09-29T01:50:00.000Z", "name": "Internet connectivity disruption in Poland", "value": "pl-2026-0035", "content_hash": "117c3c98acbfdfc9", "object_json": { "id": "incident--65287431-4f27-5557-fbd8-c843bd274d68", "name": "Internet connectivity disruption in Poland", "type": "incident", "title": "Internet connectivity disruption in Poland", "value": "pl-2026-0035", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-29T01:50:00Z", "description": "IODA detected significant connectivity drop in Poland. 1 critical alerts recorded.", "anomaly_rate": 0.023848684210526317, "country_code": "PL", "country_name": "Poland", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-31735f192e76ffc88a37db34", "stix_object_id": "incident--82b007cf-3c63-5660-8b9a-197d9b115e53", "platform": "voidly-atlas", "observed_at": "2026-09-30T11:40:00.000Z", "name": "Internet connectivity disruption in Poland", "value": "pl-2026-0036", "content_hash": "87aeb6709bc704fb", "object_json": { "id": "incident--82b007cf-3c63-5660-8b9a-197d9b115e53", "name": "Internet connectivity disruption in Poland", "type": "incident", "title": "Internet connectivity disruption in Poland", "value": "pl-2026-0036", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-30T11:40:00Z", "description": "IODA detected significant connectivity drop in Poland. 1 critical alerts recorded.", "anomaly_rate": 0.012012012012012012, "country_code": "PL", "country_name": "Poland", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } } ], "derivations": [] }, { "id": "ise-9c936aa20609c42a079ef99f", "entity_type": "asn", "entity_key": "AS15874", "geography": "3297", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.0614562489882085 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS15874" ], "affected_services": [], "affected_regions": [ "3297" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:18.056Z", "updated_at": "2026-10-03T23:50:17.371Z", "evidence": [ { "event_id": "ise-9c936aa20609c42a079ef99f", "stix_object_id": "incident--53da5453-8c8d-5b25-5d13-61af85f0e2f3", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "INTERKAM -- Masovian", "value": "geoasn/15874-3297", "content_hash": "264237f67567d607", "object_json": { "id": "incident--53da5453-8c8d-5b25-5d13-61af85f0e2f3", "name": "INTERKAM -- Masovian", "type": "incident", "score": 115200, "title": "INTERKAM -- Masovian", "value": "geoasn/15874-3297", "method": "median", "location": "geoasn/15874-3297", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209600 } } ], "derivations": [] }, { "id": "ise-081527296585e2308d3847c5", "entity_type": "asn", "entity_key": "AS50188", "geography": "3295", "started_at": "2026-08-15T17:20:00.000Z", "last_observed_at": "2026-08-15T17:20:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.40129453931204 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS50188" ], "affected_services": [], "affected_regions": [ "3295" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:24.625Z", "updated_at": "2026-10-03T23:50:25.019Z", "evidence": [ { "event_id": "ise-081527296585e2308d3847c5", "stix_object_id": "incident--57e866d8-ad1d-53f0-8208-77ff274a3e7e", "platform": "ioda", "observed_at": "2026-08-15T17:20:00.000Z", "name": "KOLNET -- Silesian", "value": "geoasn/50188-3295", "content_hash": "f775f6fd6daaa483", "object_json": { "id": "incident--57e866d8-ad1d-53f0-8208-77ff274a3e7e", "name": "KOLNET -- Silesian", "type": "incident", "score": 251937.5, "title": "KOLNET -- Silesian", "value": "geoasn/50188-3295", "method": "median", "location": "geoasn/50188-3295", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209300 } } ], "derivations": [] }, { "id": "ise-dbbb22e49d304696b0375e39", "entity_type": "asn", "entity_key": "AS41809", "geography": "PL", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.26310021227115 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS41809" ], "affected_services": [], "affected_regions": [ "PL" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:17.505Z", "updated_at": "2026-10-03T23:50:17.676Z", "evidence": [ { "event_id": "ise-dbbb22e49d304696b0375e39", "stix_object_id": "incident--cce09fdb-906a-5fcf-992e-817cb3a414ad", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "NETIA-AS -- Poland", "value": "geoasn/41809-pl", "content_hash": "0eb41f0839a76f4c", "object_json": { "id": "incident--cce09fdb-906a-5fcf-992e-817cb3a414ad", "name": "NETIA-AS -- Poland", "type": "incident", "score": 183272.7272727273, "title": "NETIA-AS -- Poland", "value": "geoasn/41809-pl", "method": "median", "location": "geoasn/41809-PL", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209600 } } ], "derivations": [] }, { "id": "ise-05fda75d9327178f19ce9473", "entity_type": "asn", "entity_key": "AS41201", "geography": "PL", "started_at": "2026-08-10T07:10:00.000Z", "last_observed_at": "2026-08-10T07:10:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.567086386452 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS41201" ], "affected_services": [], "affected_regions": [ "PL" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:20.799Z", "updated_at": "2026-10-03T23:50:20.702Z", "evidence": [ { "event_id": "ise-05fda75d9327178f19ce9473", "stix_object_id": "incident--c6514d17-6f30-5f4e-7022-ae9e439cd7c2", "platform": "ioda", "observed_at": "2026-08-10T07:10:00.000Z", "name": "DOLSAT -- Poland", "value": "geoasn/41201-pl", "content_hash": "75bb6ad4212e3e70", "object_json": { "id": "incident--c6514d17-6f30-5f4e-7022-ae9e439cd7c2", "name": "DOLSAT -- Poland", "type": "incident", "score": 369050, "title": "DOLSAT -- Poland", "value": "geoasn/41201-pl", "method": "median", "location": "geoasn/41201-PL", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1207800 } } ], "derivations": [] }, { "id": "ise-53d51eae41a8bb3d10b1df37", "entity_type": "asn", "entity_key": "AS50188", "geography": "PL", "started_at": "2026-08-15T17:20:00.000Z", "last_observed_at": "2026-08-15T17:20:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.40129453931204 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS50188" ], "affected_services": [], "affected_regions": [ "PL" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:24.634Z", "updated_at": "2026-10-03T23:50:25.010Z", "evidence": [ { "event_id": "ise-53d51eae41a8bb3d10b1df37", "stix_object_id": "incident--3fb8ecb9-5b59-5756-b61f-99c165fbb0c1", "platform": "ioda", "observed_at": "2026-08-15T17:20:00.000Z", "name": "KOLNET -- Poland", "value": "geoasn/50188-pl", "content_hash": "3f493932ddf03b69", "object_json": { "id": "incident--3fb8ecb9-5b59-5756-b61f-99c165fbb0c1", "name": "KOLNET -- Poland", "type": "incident", "score": 251937.5, "title": "KOLNET -- Poland", "value": "geoasn/50188-pl", "method": "median", "location": "geoasn/50188-PL", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209300 } } ], "derivations": [] }, { "id": "ise-34ac261b06129c5c2cf7ebfb", "entity_type": "asn", "entity_key": "AS50625", "geography": "3297", "started_at": "2026-09-18T10:00:00.000Z", "last_observed_at": "2026-09-18T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.7826247161692725 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS50625" ], "affected_services": [], "affected_regions": [ "3297" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-09-30T03:05:25.881Z", "updated_at": "2026-10-03T23:50:35.378Z", "evidence": [ { "event_id": "ise-34ac261b06129c5c2cf7ebfb", "stix_object_id": "incident--46818563-8704-5843-0b2e-fa5a19e95b22", "platform": "ioda", "observed_at": "2026-09-18T10:00:00.000Z", "name": "KROSOFT-AS -- Masovian", "value": "geoasn/50625-3297", "content_hash": "33ab7de44e84f39e", "object_json": { "id": "incident--46818563-8704-5843-0b2e-fa5a19e95b22", "name": "KROSOFT-AS -- Masovian", "type": "incident", "score": 606211.2612612613, "title": "KROSOFT-AS -- Masovian", "value": "geoasn/50625-3297", "method": "median", "location": "geoasn/50625-3297", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1345789 } } ], "derivations": [] }, { "id": "ise-661315497af5c81b772c857c", "entity_type": "asn", "entity_key": "AS41201", "geography": "3296", "started_at": "2026-08-10T07:10:00.000Z", "last_observed_at": "2026-08-10T07:10:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.567086386452 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS41201" ], "affected_services": [], "affected_regions": [ "3296" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:20.809Z", "updated_at": "2026-10-03T23:50:20.710Z", "evidence": [ { "event_id": "ise-661315497af5c81b772c857c", "stix_object_id": "incident--d4709b48-feb0-5b90-fe1f-d1c1b10aa571", "platform": "ioda", "observed_at": "2026-08-10T07:10:00.000Z", "name": "DOLSAT -- Łódź", "value": "geoasn/41201-3296", "content_hash": "606eecc6363466d7", "object_json": { "id": "incident--d4709b48-feb0-5b90-fe1f-d1c1b10aa571", "name": "DOLSAT -- Łódź", "type": "incident", "score": 369050, "title": "DOLSAT -- Łódź", "value": "geoasn/41201-3296", "method": "median", "location": "geoasn/41201-3296", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1207800 } } ], "derivations": [] }, { "id": "ise-874e83490a0924a8e708aedd", "entity_type": "asn", "entity_key": "AS15874", "geography": "PL", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.049221900282173 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS15874" ], "affected_services": [], "affected_regions": [ "PL" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:16.863Z", "updated_at": "2026-10-03T23:50:18.001Z", "evidence": [ { "event_id": "ise-874e83490a0924a8e708aedd", "stix_object_id": "incident--ab4e4bf2-40aa-50d7-9cb3-c151b197abf7", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "INTERKAM -- Poland", "value": "geoasn/15874-pl", "content_hash": "4fa8dfb35b297ff5", "object_json": { "id": "incident--ab4e4bf2-40aa-50d7-9cb3-c151b197abf7", "name": "INTERKAM -- Poland", "type": "incident", "score": 112000, "title": "INTERKAM -- Poland", "value": "geoasn/15874-pl", "method": "median", "location": "geoasn/15874-PL", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209600 } } ], "derivations": [] }, { "id": "ise-74640e5fa2c40d17b4eebb77", "entity_type": "asn", "entity_key": "AS50625", "geography": "PL", "started_at": "2026-09-18T10:00:00.000Z", "last_observed_at": "2026-09-18T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.678728775923919 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS50625" ], "affected_services": [], "affected_regions": [ "PL" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-09-30T03:05:25.889Z", "updated_at": "2026-10-03T23:50:35.346Z", "evidence": [ { "event_id": "ise-74640e5fa2c40d17b4eebb77", "stix_object_id": "incident--05a5212b-c25d-5f82-2900-c55dd1a0ec54", "platform": "ioda", "observed_at": "2026-09-18T10:00:00.000Z", "name": "KROSOFT-AS -- Poland", "value": "geoasn/50625-pl", "content_hash": "a12c60de865ac377", "object_json": { "id": "incident--05a5212b-c25d-5f82-2900-c55dd1a0ec54", "name": "KROSOFT-AS -- Poland", "type": "incident", "score": 477230.1418439716, "title": "KROSOFT-AS -- Poland", "value": "geoasn/50625-pl", "method": "median", "location": "geoasn/50625-PL", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1345789 } } ], "derivations": [] }, { "id": "ise-e48c44819a1719c496e2990b", "entity_type": "asn", "entity_key": "AS50188", "geography": null, "started_at": "2026-08-15T17:15:00.000Z", "last_observed_at": "2026-08-15T17:15:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 4.799347442962076 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS50188" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:24.617Z", "updated_at": "2026-10-03T23:50:25.002Z", "evidence": [ { "event_id": "ise-e48c44819a1719c496e2990b", "stix_object_id": "incident--193cebb9-f39d-56ad-66a0-733ddb32b170", "platform": "ioda", "observed_at": "2026-08-15T17:15:00.000Z", "name": "AS50188 (KOLNET)", "value": "asn/50188", "content_hash": "dd1031af88324cd9", "object_json": { "id": "incident--193cebb9-f39d-56ad-66a0-733ddb32b170", "name": "AS50188 (KOLNET)", "type": "incident", "score": 63000, "title": "AS50188 (KOLNET)", "value": "asn/50188", "method": "median", "location": "asn/50188", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209600 } } ], "derivations": [] }, { "id": "ise-41649254f254fcbc2dc5e295", "entity_type": "asn", "entity_key": "AS15874", "geography": null, "started_at": "2026-07-28T14:30:00.000Z", "last_observed_at": "2026-07-28T14:30:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.049221900282173 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS15874" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:15.824Z", "updated_at": "2026-10-03T23:50:16.527Z", "evidence": [ { "event_id": "ise-41649254f254fcbc2dc5e295", "stix_object_id": "incident--cb2272bc-1d93-539d-5ff8-3198dac89030", "platform": "ioda", "observed_at": "2026-07-28T14:30:00.000Z", "name": "AS15874 (INTERKAM)", "value": "asn/15874", "content_hash": "d70abb0487b5f66e", "object_json": { "id": "incident--cb2272bc-1d93-539d-5ff8-3198dac89030", "name": "AS15874 (INTERKAM)", "type": "incident", "score": 112000, "title": "AS15874 (INTERKAM)", "value": "asn/15874", "method": "median", "location": "asn/15874", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209600 } } ], "derivations": [] }, { "id": "ise-4536361aca941e368648356a", "entity_type": "asn", "entity_key": "AS50625", "geography": null, "started_at": "2026-09-17T13:15:00.000Z", "last_observed_at": "2026-09-17T13:15:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.702189628832103 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS50625" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-09-30T03:05:25.616Z", "updated_at": "2026-10-03T23:50:35.060Z", "evidence": [ { "event_id": "ise-4536361aca941e368648356a", "stix_object_id": "incident--42b40435-5bce-558c-f6f1-a981ccea0557", "platform": "ioda", "observed_at": "2026-09-17T13:15:00.000Z", "name": "AS50625 (KROSOFT-AS)", "value": "asn/50625", "content_hash": "9a45fad4cb358612", "object_json": { "id": "incident--42b40435-5bce-558c-f6f1-a981ccea0557", "name": "AS50625 (KROSOFT-AS)", "type": "incident", "score": 503719.50354609924, "title": "AS50625 (KROSOFT-AS)", "value": "asn/50625", "method": "median", "location": "asn/50625", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1420489 } } ], "derivations": [] }, { "id": "ise-64b028322820486679a21378", "entity_type": "asn", "entity_key": "AS41809", "geography": null, "started_at": "2026-07-28T14:30:00.000Z", "last_observed_at": "2026-07-28T14:30:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.26310021227115 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS41809" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:15.807Z", "updated_at": "2026-10-03T23:50:16.548Z", "evidence": [ { "event_id": "ise-64b028322820486679a21378", "stix_object_id": "incident--7f006699-6f09-594d-763a-59e73026c642", "platform": "ioda", "observed_at": "2026-07-28T14:30:00.000Z", "name": "AS41809 (ENTERPOL-AS)", "value": "asn/41809", "content_hash": "7badc76cb399dca0", "object_json": { "id": "incident--7f006699-6f09-594d-763a-59e73026c642", "name": "AS41809 (ENTERPOL-AS)", "type": "incident", "score": 183272.7272727273, "title": "AS41809 (ENTERPOL-AS)", "value": "asn/41809", "method": "median", "location": "asn/41809", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209600 } } ], "derivations": [] }, { "id": "ise-da40f1c8fae83c535fba2938", "entity_type": "asn", "entity_key": "AS41201", "geography": null, "started_at": "2026-08-10T06:40:00.000Z", "last_observed_at": "2026-08-10T06:40:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 4.790354205904159 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS41201" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:20.764Z", "updated_at": "2026-10-03T23:50:20.661Z", "evidence": [ { "event_id": "ise-da40f1c8fae83c535fba2938", "stix_object_id": "incident--9877f68d-44da-5ae3-27e3-ea94c3b88b0b", "platform": "ioda", "observed_at": "2026-08-10T06:40:00.000Z", "name": "AS41201 (DOLSAT)", "value": "asn/41201", "content_hash": "251f047f7a472e78", "object_json": { "id": "incident--9877f68d-44da-5ae3-27e3-ea94c3b88b0b", "name": "AS41201 (DOLSAT)", "type": "incident", "score": 61708.80952380953, "title": "AS41201 (DOLSAT)", "value": "asn/41201", "method": "median", "location": "asn/41201", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1814239 } } ], "derivations": [] } ], "context": [], "audit": { "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.", "weights": { "anomaly": 0.3, "breadth": 0.2, "persistence": 0.15, "corroboration": 0.2, "baseline_deviation": 0.15 }, "derivation_ids": [], "observation_ids": [ "incident--cbde1567-d5b2-5de5-6b83-deb48d197157", "incident--65287431-4f27-5557-fbd8-c843bd274d68", "incident--82b007cf-3c63-5660-8b9a-197d9b115e53", "incident--53da5453-8c8d-5b25-5d13-61af85f0e2f3", "incident--57e866d8-ad1d-53f0-8208-77ff274a3e7e", "incident--cce09fdb-906a-5fcf-992e-817cb3a414ad", "incident--c6514d17-6f30-5f4e-7022-ae9e439cd7c2", "incident--3fb8ecb9-5b59-5756-b61f-99c165fbb0c1", "incident--46818563-8704-5843-0b2e-fa5a19e95b22", "incident--d4709b48-feb0-5b90-fe1f-d1c1b10aa571", "incident--ab4e4bf2-40aa-50d7-9cb3-c151b197abf7", "incident--05a5212b-c25d-5f82-2900-c55dd1a0ec54", "incident--193cebb9-f39d-56ad-66a0-733ddb32b170", "incident--cb2272bc-1d93-539d-5ff8-3198dac89030", "incident--42b40435-5bce-558c-f6f1-a981ccea0557", "incident--7f006699-6f09-594d-763a-59e73026c642", "incident--9877f68d-44da-5ae3-27e3-ea94c3b88b0b" ], "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score." } }