{ "service": "h3xa", "kind": "executive-briefing", "generated_at": "2026-10-28T18:08:33.024Z", "model_version": "h3xa-iss-1.1", "situation": { "id": "sit-543682989dadfc522cbab6ef", "scope_type": "country", "scope_key": "BG", "geography": "BG", "title": "Internet disruption in BG", "started_at": "2026-07-28T14:30:00.000Z", "last_observed_at": "2026-09-23T22:05:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 48, "event_count": 16, "affected_asns": [ "AS43205", "AS20657" ], "affected_services": [], "affected_regions": [ "361", "365", "358", "362", "360", "382", "377", "359", "381", "385", "368", "BG" ], "source_count": 2, "record_origin": "unrecorded", "first_seen": "2026-08-29T22:33:31.079Z", "updated_at": "2026-10-03T23:39:44.107Z" }, "events": [ { "id": "ise-ec357dbff364d1f1e99b6d06", "entity_type": "asn", "entity_key": "AS43205", "geography": "365", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.839550348947515 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS43205" ], "affected_services": [], "affected_regions": [ "365" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:16.564Z", "updated_at": "2026-10-03T23:50:18.182Z", "evidence": [ { "event_id": "ise-ec357dbff364d1f1e99b6d06", "stix_object_id": "incident--1c40d4bb-de23-5652-5d5f-ee4493c94230", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "BULSATCOM-BG-AS -- Grad Sofiya", "value": "geoasn/43205-365", "content_hash": "db8d3fae41f90e69", "object_json": { "id": "incident--1c40d4bb-de23-5652-5d5f-ee4493c94230", "name": "BULSATCOM-BG-AS -- Grad Sofiya", "type": "incident", "score": 691114.0476190476, "title": "BULSATCOM-BG-AS -- Grad Sofiya", "value": "geoasn/43205-365", "method": "median", "location": "geoasn/43205-365", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 893132 } } ], "derivations": [] }, { "id": "ise-296f43c101c98999bfe86bfb", "entity_type": "asn", "entity_key": "AS43205", "geography": "BG", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.871734987433428 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS43205" ], "affected_services": [], "affected_regions": [ "BG" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:17.534Z", "updated_at": "2026-10-03T23:50:17.651Z", "evidence": [ { "event_id": "ise-296f43c101c98999bfe86bfb", "stix_object_id": "incident--75c3d114-92fb-5c35-2605-051614e225b4", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "BULSATCOM-BG-AS -- Bulgaria", "value": "geoasn/43205-bg", "content_hash": "c10d648534f3624f", "object_json": { "id": "incident--75c3d114-92fb-5c35-2605-051614e225b4", "name": "BULSATCOM-BG-AS -- Bulgaria", "type": "incident", "score": 744276.6666666666, "title": "BULSATCOM-BG-AS -- Bulgaria", "value": "geoasn/43205-bg", "method": "median", "location": "geoasn/43205-BG", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 893132 } } ], "derivations": [] }, { "id": "ise-2cf24f029d51d34a2107941f", "entity_type": "asn", "entity_key": "AS43205", "geography": "381", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 6.258294017840145 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS43205" ], "affected_services": [], "affected_regions": [ "381" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:18.180Z", "updated_at": "2026-10-03T23:50:17.464Z", "evidence": [ { "event_id": "ise-2cf24f029d51d34a2107941f", "stix_object_id": "incident--56c72b8f-aec2-5b86-3c13-d190b87d344e", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "BULSATCOM-BG-AS -- Dobrich", "value": "geoasn/43205-381", "content_hash": "30a90757255703e1", "object_json": { "id": "incident--56c72b8f-aec2-5b86-3c13-d190b87d344e", "name": "BULSATCOM-BG-AS -- Dobrich", "type": "incident", "score": 1812565.787037037, "title": "BULSATCOM-BG-AS -- Dobrich", "value": "geoasn/43205-381", "method": "median", "location": "geoasn/43205-381", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1350049 } } ], "derivations": [] }, { "id": "ise-2f1c8a9b058344c1bca075a8", "entity_type": "asn", "entity_key": "AS43205", "geography": "382", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 6.270528467601547 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS43205" ], "affected_services": [], "affected_regions": [ "382" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:17.740Z", "updated_at": "2026-10-03T23:50:17.141Z", "evidence": [ { "event_id": "ise-2f1c8a9b058344c1bca075a8", "stix_object_id": "incident--3780034c-c526-520f-945d-dabfe7ce7b90", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "BULSATCOM-BG-AS -- Varna", "value": "geoasn/43205-382", "content_hash": "23ee3c77ee8e612e", "object_json": { "id": "incident--3780034c-c526-520f-945d-dabfe7ce7b90", "name": "BULSATCOM-BG-AS -- Varna", "type": "incident", "score": 1864353.380952381, "title": "BULSATCOM-BG-AS -- Varna", "value": "geoasn/43205-382", "method": "median", "location": "geoasn/43205-382", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1350049 } } ], "derivations": [] }, { "id": "ise-b4222c6581b7f190c1ec8a46", "entity_type": "asn", "entity_key": "AS43205", "geography": "377", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 6.188006527044729 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS43205" ], "affected_services": [], "affected_regions": [ "377" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:17.758Z", "updated_at": "2026-10-03T23:50:17.157Z", "evidence": [ { "event_id": "ise-b4222c6581b7f190c1ec8a46", "stix_object_id": "incident--f545283a-695e-53b7-4480-d2671570f8dd", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "BULSATCOM-BG-AS -- Yambol", "value": "geoasn/43205-377", "content_hash": "772c015bac29ffdf", "object_json": { "id": "incident--f545283a-695e-53b7-4480-d2671570f8dd", "name": "BULSATCOM-BG-AS -- Yambol", "type": "incident", "score": 1541722.62345679, "title": "BULSATCOM-BG-AS -- Yambol", "value": "geoasn/43205-377", "method": "median", "location": "geoasn/43205-377", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1350049 } } ], "derivations": [] }, { "id": "ise-cc7c3a3ad744331274458249", "entity_type": "asn", "entity_key": "AS43205", "geography": "362", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 6.342858452060995 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS43205" ], "affected_services": [], "affected_regions": [ "362" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:17.246Z", "updated_at": "2026-10-03T23:50:17.796Z", "evidence": [ { "event_id": "ise-cc7c3a3ad744331274458249", "stix_object_id": "incident--4bc1b165-2cb1-54d1-0968-dc1045ea9c4c", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "BULSATCOM-BG-AS -- Plovdiv", "value": "geoasn/43205-362", "content_hash": "3cbc1c50592a50c5", "object_json": { "id": "incident--4bc1b165-2cb1-54d1-0968-dc1045ea9c4c", "name": "BULSATCOM-BG-AS -- Plovdiv", "type": "incident", "score": 2202207.5886524823, "title": "BULSATCOM-BG-AS -- Plovdiv", "value": "geoasn/43205-362", "method": "median", "location": "geoasn/43205-362", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1350049 } } ], "derivations": [] }, { "id": "ise-d5706c46ef850c947822495d", "entity_type": "asn", "entity_key": "AS43205", "geography": "368", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.491578571383401 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS43205" ], "affected_services": [], "affected_regions": [ "368" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:18.200Z", "updated_at": "2026-10-03T23:50:17.479Z", "evidence": [ { "event_id": "ise-d5706c46ef850c947822495d", "stix_object_id": "incident--91c86c16-964f-5f67-4f9f-3b7a611b3ba5", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "BULSATCOM-BG-AS -- Gabrovo", "value": "geoasn/43205-368", "content_hash": "8673a61fd92a97a4", "object_json": { "id": "incident--91c86c16-964f-5f67-4f9f-3b7a611b3ba5", "name": "BULSATCOM-BG-AS -- Gabrovo", "type": "incident", "score": 310153.8461538462, "title": "BULSATCOM-BG-AS -- Gabrovo", "value": "geoasn/43205-368", "method": "median", "location": "geoasn/43205-368", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209600 } } ], "derivations": [] }, { "id": "ise-45b4c67005ade440f57bd3bd", "entity_type": "asn", "entity_key": "AS43205", "geography": "358", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 6.318774734073275 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS43205" ], "affected_services": [], "affected_regions": [ "358" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:17.233Z", "updated_at": "2026-10-03T23:50:17.814Z", "evidence": [ { "event_id": "ise-45b4c67005ade440f57bd3bd", "stix_object_id": "incident--c0040992-3be5-55d5-e58a-7bd7bec90804", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "BULSATCOM-BG-AS -- Sliven", "value": "geoasn/43205-358", "content_hash": "23c54114301b36c8", "object_json": { "id": "incident--c0040992-3be5-55d5-e58a-7bd7bec90804", "name": "BULSATCOM-BG-AS -- Sliven", "type": "incident", "score": 2083408.9506172838, "title": "BULSATCOM-BG-AS -- Sliven", "value": "geoasn/43205-358", "method": "median", "location": "geoasn/43205-358", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1350049 } } ], "derivations": [] }, { "id": "ise-4a0ee2181ea311589d9d61b7", "entity_type": "asn", "entity_key": "AS43205", "geography": "359", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 6.352198474119211 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS43205" ], "affected_services": [], "affected_regions": [ "359" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:18.166Z", "updated_at": "2026-10-03T23:50:17.456Z", "evidence": [ { "event_id": "ise-4a0ee2181ea311589d9d61b7", "stix_object_id": "incident--63cbc192-f67c-5b63-60d3-93e383e5f799", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "BULSATCOM-BG-AS -- Haskovo", "value": "geoasn/43205-359", "content_hash": "937f2a15f93d9046", "object_json": { "id": "incident--63cbc192-f67c-5b63-60d3-93e383e5f799", "name": "BULSATCOM-BG-AS -- Haskovo", "type": "incident", "score": 2250081.6666666665, "title": "BULSATCOM-BG-AS -- Haskovo", "value": "geoasn/43205-359", "method": "median", "location": "geoasn/43205-359", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1350049 } } ], "derivations": [] }, { "id": "ise-8aa60bd0a970e53942c13184", "entity_type": "asn", "entity_key": "AS43205", "geography": "361", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 6.042431024961167 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS43205" ], "affected_services": [], "affected_regions": [ "361" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:16.546Z", "updated_at": "2026-10-03T23:50:16.959Z", "evidence": [ { "event_id": "ise-8aa60bd0a970e53942c13184", "stix_object_id": "incident--4a548bd4-a635-5758-3765-c45319cfd63b", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "BULSATCOM-BG-AS -- Pazardzhik", "value": "geoasn/43205-361", "content_hash": "e05fec2ae031d588", "object_json": { "id": "incident--4a548bd4-a635-5758-3765-c45319cfd63b", "name": "BULSATCOM-BG-AS -- Pazardzhik", "type": "incident", "score": 1102632.0987654321, "title": "BULSATCOM-BG-AS -- Pazardzhik", "value": "geoasn/43205-361", "method": "median", "location": "geoasn/43205-361", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 893132 } } ], "derivations": [] }, { "id": "ise-9612bd0152d27beb747cfd0e", "entity_type": "asn", "entity_key": "AS20657", "geography": "BG", "started_at": "2026-08-10T10:00:00.000Z", "last_observed_at": "2026-08-10T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.843404470034971 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS20657" ], "affected_services": [], "affected_regions": [ "BG" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:20.938Z", "updated_at": "2026-10-03T23:50:20.943Z", "evidence": [ { "event_id": "ise-9612bd0152d27beb747cfd0e", "stix_object_id": "incident--9980416c-5e32-538c-b7f5-594a05d8ae3e", "platform": "ioda", "observed_at": "2026-08-10T10:00:00.000Z", "name": "ATLANTIS -- Bulgaria", "value": "geoasn/20657-bg", "content_hash": "90aa28d1741ebbe4", "object_json": { "id": "incident--9980416c-5e32-538c-b7f5-594a05d8ae3e", "name": "ATLANTIS -- Bulgaria", "type": "incident", "score": 697274.6031746031, "title": "ATLANTIS -- Bulgaria", "value": "geoasn/20657-bg", "method": "median", "location": "geoasn/20657-BG", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1757132 } } ], "derivations": [] }, { "id": "ise-a939fea1e32171ef47a6e46b", "entity_type": "asn", "entity_key": "AS43205", "geography": "385", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 6.352198474119211 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS43205" ], "affected_services": [], "affected_regions": [ "385" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:18.190Z", "updated_at": "2026-10-03T23:50:17.472Z", "evidence": [ { "event_id": "ise-a939fea1e32171ef47a6e46b", "stix_object_id": "incident--11322094-7b4a-58e7-c44c-19bc1ccfbcec", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "BULSATCOM-BG-AS -- Blagoevgrad", "value": "geoasn/43205-385", "content_hash": "152c503eacb0d09c", "object_json": { "id": "incident--11322094-7b4a-58e7-c44c-19bc1ccfbcec", "name": "BULSATCOM-BG-AS -- Blagoevgrad", "type": "incident", "score": 2250081.6666666665, "title": "BULSATCOM-BG-AS -- Blagoevgrad", "value": "geoasn/43205-385", "method": "median", "location": "geoasn/43205-385", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1350049 } } ], "derivations": [] }, { "id": "ise-b4153ed23bbecc114e4e5ea4", "entity_type": "asn", "entity_key": "AS43205", "geography": "360", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 6.3067604564844215 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS43205" ], "affected_services": [], "affected_regions": [ "360" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:17.721Z", "updated_at": "2026-10-03T23:50:17.129Z", "evidence": [ { "event_id": "ise-b4153ed23bbecc114e4e5ea4", "stix_object_id": "incident--0fa3979d-fdee-59f6-35c2-73b3f266cfb8", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "BULSATCOM-BG-AS -- Stara Zagora", "value": "geoasn/43205-360", "content_hash": "1c9c8fb143ccf435", "object_json": { "id": "incident--0fa3979d-fdee-59f6-35c2-73b3f266cfb8", "name": "BULSATCOM-BG-AS -- Stara Zagora", "type": "incident", "score": 2026563.6203090507, "title": "BULSATCOM-BG-AS -- Stara Zagora", "value": "geoasn/43205-360", "method": "median", "location": "geoasn/43205-360", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1350049 } } ], "derivations": [] }, { "id": "ise-3a1faf0d00b93627ca910355", "entity_type": "asn", "entity_key": "AS43205", "geography": null, "started_at": "2026-07-28T14:30:00.000Z", "last_observed_at": "2026-07-28T14:30:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.902697678128221 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS43205" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:15.898Z", "updated_at": "2026-10-03T23:50:15.936Z", "evidence": [ { "event_id": "ise-3a1faf0d00b93627ca910355", "stix_object_id": "incident--0ef03ef6-9be0-5a11-56a9-ba4b23f03c86", "platform": "ioda", "observed_at": "2026-07-28T14:30:00.000Z", "name": "AS43205 (BULSATCOM-BG-AS)", "value": "asn/43205", "content_hash": "29a6798ace2ab806", "object_json": { "id": "incident--0ef03ef6-9be0-5a11-56a9-ba4b23f03c86", "name": "AS43205 (BULSATCOM-BG-AS)", "type": "incident", "score": 799276.6666666666, "title": "AS43205 (BULSATCOM-BG-AS)", "value": "asn/43205", "method": "median", "location": "asn/43205", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 959132 } } ], "derivations": [] }, { "id": "ise-116fff4fba0da27720c5e035", "entity_type": "asn", "entity_key": "AS20657", "geography": null, "started_at": "2026-08-09T11:45:00.000Z", "last_observed_at": "2026-08-09T11:45:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.856778388906672 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS20657" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:19.996Z", "updated_at": "2026-10-03T23:50:19.525Z", "evidence": [ { "event_id": "ise-116fff4fba0da27720c5e035", "stix_object_id": "incident--78aade42-9478-5757-534a-979f9a37334b", "platform": "ioda", "observed_at": "2026-08-09T11:45:00.000Z", "name": "AS20657 (ATLANTIS)", "value": "asn/20657", "content_hash": "0f4244168cd9e243", "object_json": { "id": "incident--78aade42-9478-5757-534a-979f9a37334b", "name": "AS20657 (ATLANTIS)", "type": "incident", "score": 719080.9523809523, "title": "AS20657 (ATLANTIS)", "value": "asn/20657", "method": "median", "location": "asn/20657", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1812084 } } ], "derivations": [] }, { "id": "ise-37b65e8e9e042e2693f867b4", "entity_type": "country", "entity_key": "BG", "geography": "BG", "started_at": "2026-08-11T21:20:00.000Z", "last_observed_at": "2026-09-23T22:05:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 20, "confidence": 0, "components": { "anomaly": 0.11475543354517041, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 0.10988250261936836 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0.11475543354517041 }, "baseline": { "signals": [ "voidly.anomaly_rate" ], "signal_count": 1 }, "current_measurement": { "voidly.anomaly_rate": 0.011111111111111112 }, "deviation": { "max_anomaly": 0.11475543354517041, "max_deviation": 0.10988250261936836 }, "affected_asns": [], "affected_services": [], "affected_regions": [ "BG" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration" ], "observation_count": 4, "ingestion_method": null, "first_seen": "2026-08-29T22:33:22.957Z", "updated_at": "2026-10-03T23:50:22.568Z", "evidence": [ { "event_id": "ise-37b65e8e9e042e2693f867b4", "stix_object_id": "incident--064743c0-08d0-5956-0878-a1d72b957cc0", "platform": "voidly-atlas", "observed_at": "2026-08-11T21:20:00.000Z", "name": "Internet connectivity disruption in Bulgaria", "value": "bg-2026-0051", "content_hash": "aafff9a9ff3ba744", "object_json": { "id": "incident--064743c0-08d0-5956-0878-a1d72b957cc0", "name": "Internet connectivity disruption in Bulgaria", "type": "incident", "title": "Internet connectivity disruption in Bulgaria", "value": "bg-2026-0051", "status": "active", "sources": [ "ioda" ], "end_time": "2026-08-11T22:15:00Z", "severity": "critical", "confidence": 67, "start_time": "2026-08-11T21:20:00Z", "description": "IODA detected significant connectivity drop in Bulgaria. 2 critical alerts recorded.", "anomaly_rate": 0.012254901960784314, "country_code": "BG", "country_name": "Bulgaria", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-37b65e8e9e042e2693f867b4", "stix_object_id": "incident--6c613dc4-da62-5f39-c517-2e34d0ae9f9d", "platform": "voidly-atlas", "observed_at": "2026-08-12T21:15:00.000Z", "name": "Internet connectivity disruption in Bulgaria", "value": "bg-2026-0052", "content_hash": "41e1aa49df08e328", "object_json": { "id": "incident--6c613dc4-da62-5f39-c517-2e34d0ae9f9d", "name": "Internet connectivity disruption in Bulgaria", "type": "incident", "title": "Internet connectivity disruption in Bulgaria", "value": "bg-2026-0052", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-08-12T21:15:00Z", "description": "IODA detected significant connectivity drop in Bulgaria. 1 critical alerts recorded.", "anomaly_rate": 0.12213740458015267, "country_code": "BG", "country_name": "Bulgaria", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-37b65e8e9e042e2693f867b4", "stix_object_id": "incident--ff1258b7-80f6-5848-bc51-dc01365be0d6", "platform": "voidly-atlas", "observed_at": "2026-08-27T00:25:00.000Z", "name": "Internet connectivity disruption in Bulgaria", "value": "bg-2026-0059", "content_hash": "e5e4ce66985b18b1", "object_json": { "id": "incident--ff1258b7-80f6-5848-bc51-dc01365be0d6", "name": "Internet connectivity disruption in Bulgaria", "type": "incident", "title": "Internet connectivity disruption in Bulgaria", "value": "bg-2026-0059", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-08-27T00:25:00Z", "description": "IODA detected significant connectivity drop in Bulgaria. 1 critical alerts recorded.", "anomaly_rate": 0.011111111111111112, "country_code": "BG", "country_name": "Bulgaria", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": 0, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-37b65e8e9e042e2693f867b4", "stix_object_id": "incident--57edb7e1-84e7-5dc9-e423-a9787a360566", "platform": "voidly-atlas", "observed_at": "2026-09-23T22:05:00.000Z", "name": "Internet connectivity disruption in Bulgaria", "value": "bg-2026-0072", "content_hash": "b609f5dfa244dd27", "object_json": { "id": "incident--57edb7e1-84e7-5dc9-e423-a9787a360566", "name": "Internet connectivity disruption in Bulgaria", "type": "incident", "title": "Internet connectivity disruption in Bulgaria", "value": "bg-2026-0072", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-23T22:05:00Z", "description": "IODA detected significant connectivity drop in Bulgaria. 1 critical alerts recorded.", "anomaly_rate": 0.011111111111111112, "country_code": "BG", "country_name": "Bulgaria", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": 0, "affected_domains": [], "affected_services": [] } } ], "derivations": [] } ], "context": [], "audit": { "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.", "weights": { "anomaly": 0.3, "breadth": 0.2, "persistence": 0.15, "corroboration": 0.2, "baseline_deviation": 0.15 }, "derivation_ids": [], "observation_ids": [ "incident--1c40d4bb-de23-5652-5d5f-ee4493c94230", "incident--75c3d114-92fb-5c35-2605-051614e225b4", "incident--56c72b8f-aec2-5b86-3c13-d190b87d344e", "incident--3780034c-c526-520f-945d-dabfe7ce7b90", "incident--f545283a-695e-53b7-4480-d2671570f8dd", "incident--4bc1b165-2cb1-54d1-0968-dc1045ea9c4c", "incident--91c86c16-964f-5f67-4f9f-3b7a611b3ba5", "incident--c0040992-3be5-55d5-e58a-7bd7bec90804", "incident--63cbc192-f67c-5b63-60d3-93e383e5f799", "incident--4a548bd4-a635-5758-3765-c45319cfd63b", "incident--9980416c-5e32-538c-b7f5-594a05d8ae3e", "incident--11322094-7b4a-58e7-c44c-19bc1ccfbcec", "incident--0fa3979d-fdee-59f6-35c2-73b3f266cfb8", "incident--0ef03ef6-9be0-5a11-56a9-ba4b23f03c86", "incident--78aade42-9478-5757-534a-979f9a37334b", "incident--064743c0-08d0-5956-0878-a1d72b957cc0", "incident--6c613dc4-da62-5f39-c517-2e34d0ae9f9d", "incident--ff1258b7-80f6-5848-bc51-dc01365be0d6", "incident--57edb7e1-84e7-5dc9-e423-a9787a360566" ], "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score." } }