{ "service": "h3xa", "kind": "executive-briefing", "generated_at": "2026-10-28T18:08:35.026Z", "model_version": "h3xa-iss-1.1", "situation": { "id": "sit-ada06e4d469f616bbb4b05fa", "scope_type": "country", "scope_key": "TR", "geography": "TR", "title": "Internet disruption in TR", "started_at": "2026-07-28T14:30:00.000Z", "last_observed_at": "2026-09-30T00:00:00.000Z", "status": "resolved", "classification": "SERVICE_BLOCKING", "trajectory": "RESOLVED", "stress_score": 38, "confidence": 68, "event_count": 12, "affected_asns": [ "AS29262", "AS203576", "AS210574", "AS48678", "AS8386" ], "affected_services": [ "ChatGPT", "Claude", "Facebook", "Gemini", "Instagram", "ProtonVPN", "Signal", "Telegram", "TikTok", "WhatsApp", "X", "YouTube" ], "affected_regions": [ "TR", "4115", "4114" ], "source_count": 3, "record_origin": "unrecorded", "first_seen": "2026-08-29T22:33:29.535Z", "updated_at": "2026-10-03T23:39:42.885Z" }, "events": [ { "id": "ise-9ef19b220f50da31fa8d81a0", "entity_type": "country", "entity_key": "TR", "geography": "TR", "started_at": "2026-08-12T14:20:00.000Z", "last_observed_at": "2026-09-30T00:00:00.000Z", "status": "resolved", "classification": "SERVICE_BLOCKING", "trajectory": "RESOLVED", "stress_score": 38, "confidence": 5, "components": { "anomaly": 0.47867296499773976, "breadth": 0.44000000000000006, "persistence": 1, "corroboration": 0, "baseline_deviation": 0.019652691818925667 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.5, "statistical_significance": 0.47867296499773976 }, "baseline": { "signals": [ "voidly.anomaly_rate" ], "signal_count": 1 }, "current_measurement": { "voidly.anomaly_rate": 0.01 }, "deviation": { "max_anomaly": 0.47867296499773976, "max_deviation": 0.019652691818925667 }, "affected_asns": [ "AS210574" ], "affected_services": [ "ChatGPT", "Claude", "Facebook", "Gemini", "Instagram", "ProtonVPN", "Signal", "Telegram", "TikTok", "WhatsApp", "X", "YouTube" ], "affected_regions": [ "TR" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "insufficient corroboration" ], "observation_count": 6, "ingestion_method": null, "first_seen": "2026-08-29T22:33:23.600Z", "updated_at": "2026-10-03T23:50:23.429Z", "evidence": [ { "event_id": "ise-9ef19b220f50da31fa8d81a0", "stix_object_id": "incident--b68d1e59-a66f-5e1d-7887-1b37f6ef2b2f", "platform": "voidly-atlas", "observed_at": "2026-08-12T14:20:00.000Z", "name": "Internet connectivity disruption in Turkey", "value": "tr-2026-0291", "content_hash": "db509122f653bb39", "object_json": { "id": "incident--b68d1e59-a66f-5e1d-7887-1b37f6ef2b2f", "name": "Internet connectivity disruption in Turkey", "type": "incident", "title": "Internet connectivity disruption in Turkey", "value": "tr-2026-0291", "status": "active", "sources": [ "ioda", "censoredplanet" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-08-12T14:20:00Z", "description": "IODA detected significant connectivity drop in Turkey. 1 critical alerts recorded. CenAlert confirms censorship activity.", "anomaly_rate": 0.019230769230769232, "country_code": "TR", "country_name": "Turkey", "spec_version": "2.1", "affected_asns": [], "incident_type": "mixed", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-9ef19b220f50da31fa8d81a0", "stix_object_id": "incident--da8aeddc-d2ac-5e95-def8-76f1cf2a80be", "platform": "voidly-atlas", "observed_at": "2026-09-23T00:00:00.000Z", "name": "Internet censorship detected in Turkey", "value": "tr-2026-0336", "content_hash": "2c78a9528fb718c2", "object_json": { "id": "incident--da8aeddc-d2ac-5e95-def8-76f1cf2a80be", "name": "Internet censorship detected in Turkey", "type": "incident", "title": "Internet censorship detected in Turkey", "value": "tr-2026-0336", "status": "suspected", "sources": [ "censoredplanet" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-23T00:00:00Z", "description": "CenAlert detected interference. Impact: 1.0. Reported by: DNS blocking detected: 77/77 probes anomalous (100.0%) for bbc.com.", "anomaly_rate": 0.01, "country_code": "TR", "country_name": "Turkey", "spec_version": "2.1", "affected_asns": [ "AS210574" ], "incident_type": "censorship", "duration_hours": null, "affected_domains": [ "bbc.com", "chat.openai.com", "chatgpt.com", "claude.ai", "facebook.com", "gemini.google.com", "getlantern.org", "google.com", "huggingface.co", "instagram.com", "medium.com", "nytimes.com", "openai.com", "protonvpn.com", "psiphon.ca", "reddit.com", "signal.org", "substack.com", "telegram.org", "theguardian.com", "tiktok.com", "tumblr.com", "twitter.com", "whatsapp.com", "youtube.com" ], "affected_services": [ "ChatGPT", "Claude", "Facebook", "Gemini", "Instagram", "ProtonVPN", "Signal", "Telegram", "TikTok", "WhatsApp", "X", "YouTube" ] } }, { "event_id": "ise-9ef19b220f50da31fa8d81a0", "stix_object_id": "incident--eca47b4e-c4b4-54e6-de71-517b63fef51e", "platform": "voidly-atlas", "observed_at": "2026-09-25T11:40:00.000Z", "name": "Internet connectivity disruption in Turkey", "value": "tr-2026-0337", "content_hash": "541c070c8c715185", "object_json": { "id": "incident--eca47b4e-c4b4-54e6-de71-517b63fef51e", "name": "Internet connectivity disruption in Turkey", "type": "incident", "title": "Internet connectivity disruption in Turkey", "value": "tr-2026-0337", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 75, "start_time": "2026-09-25T11:40:00Z", "description": "IODA detected significant connectivity drop in Turkey. 58 critical alerts recorded.", "anomaly_rate": 0.034268076434310284, "country_code": "TR", "country_name": "Turkey", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": 0, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-9ef19b220f50da31fa8d81a0", "stix_object_id": "incident--feb6cf4b-593a-5262-d921-88e942a520a2", "platform": "voidly-atlas", "observed_at": "2026-09-27T00:00:00.000Z", "name": "Internet censorship detected in Turkey", "value": "tr-2026-0339", "content_hash": "816d7089e46311d2", "object_json": { "id": "incident--feb6cf4b-593a-5262-d921-88e942a520a2", "name": "Internet censorship detected in Turkey", "type": "incident", "title": "Internet censorship detected in Turkey", "value": "tr-2026-0339", "status": "suspected", "sources": [ "censoredplanet" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-27T00:00:00Z", "description": "CenAlert detected interference. Impact: 1.0. Reported by: DNS blocking detected: 75/75 probes anomalous (100.0%) for bbc.com.", "anomaly_rate": 0.01, "country_code": "TR", "country_name": "Turkey", "spec_version": "2.1", "affected_asns": [ "AS210574" ], "incident_type": "censorship", "duration_hours": null, "affected_domains": [ "bbc.com", "chat.openai.com", "chatgpt.com", "claude.ai", "facebook.com", "gemini.google.com", "getlantern.org", "google.com", "huggingface.co", "instagram.com", "medium.com", "nytimes.com", "openai.com", "protonvpn.com", "psiphon.ca", "reddit.com", "signal.org", "substack.com", "telegram.org", "theguardian.com", "tiktok.com", "tumblr.com", "twitter.com", "whatsapp.com", "youtube.com" ], "affected_services": [ "ChatGPT", "Claude", "Facebook", "Gemini", "Instagram", "ProtonVPN", "Signal", "Telegram", "TikTok", "WhatsApp", "X", "YouTube" ] } }, { "event_id": "ise-9ef19b220f50da31fa8d81a0", "stix_object_id": "incident--4a91170f-52e3-54ef-5959-9d5e79edd749", "platform": "voidly-atlas", "observed_at": "2026-09-29T12:45:00.000Z", "name": "Internet connectivity disruption in Turkey", "value": "tr-2026-0340", "content_hash": "66bcd97c26ba983e", "object_json": { "id": "incident--4a91170f-52e3-54ef-5959-9d5e79edd749", "name": "Internet connectivity disruption in Turkey", "type": "incident", "title": "Internet connectivity disruption in Turkey", "value": "tr-2026-0340", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-29T12:45:00Z", "description": "IODA detected significant connectivity drop in Turkey. 1 critical alerts recorded.", "anomaly_rate": 0.012024048096192385, "country_code": "TR", "country_name": "Turkey", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-9ef19b220f50da31fa8d81a0", "stix_object_id": "incident--50b43442-b165-5f68-968a-67c1da8f9a96", "platform": "voidly-atlas", "observed_at": "2026-09-30T00:00:00.000Z", "name": "Internet censorship detected in Turkey", "value": "tr-2026-0342", "content_hash": "6c0a5898b67bbe5c", "object_json": { "id": "incident--50b43442-b165-5f68-968a-67c1da8f9a96", "name": "Internet censorship detected in Turkey", "type": "incident", "title": "Internet censorship detected in Turkey", "value": "tr-2026-0342", "status": "suspected", "sources": [ "censoredplanet" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-30T00:00:00Z", "description": "CenAlert detected interference. Impact: 1.0. Reported by: DNS blocking detected: 74/74 probes anomalous (100.0%) for bbc.com.", "anomaly_rate": 0.01, "country_code": "TR", "country_name": "Turkey", "spec_version": "2.1", "affected_asns": [ "AS210574" ], "incident_type": "censorship", "duration_hours": null, "affected_domains": [ "bbc.com", "chat.openai.com", "chatgpt.com", "claude.ai", "facebook.com", "gemini.google.com", "getlantern.org", "google.com", "huggingface.co", "instagram.com", "medium.com", "nytimes.com", "openai.com", "protonvpn.com", "psiphon.ca", "reddit.com", "signal.org", "substack.com", "telegram.org", "theguardian.com", "tiktok.com", "tumblr.com", "twitter.com", "whatsapp.com", "youtube.com" ], "affected_services": [ "ChatGPT", "Claude", "Facebook", "Gemini", "Instagram", "ProtonVPN", "Signal", "Telegram", "TikTok", "WhatsApp", "X", "YouTube" ] } } ], "derivations": [] }, { "id": "ise-fd9bf89422dc993fb65c9ebe", "entity_type": "asn", "entity_key": "AS48678", "geography": "TR", "started_at": "2026-08-16T10:00:00.000Z", "last_observed_at": "2026-08-16T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.901908185235964 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS48678" ], "affected_services": [], "affected_regions": [ "TR" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:24.729Z", "updated_at": "2026-10-03T23:50:25.120Z", "evidence": [ { "event_id": "ise-fd9bf89422dc993fb65c9ebe", "stix_object_id": "incident--35d9c104-ea3c-5291-5bba-209ece0675a7", "platform": "ioda", "observed_at": "2026-08-16T10:00:00.000Z", "name": "TR-PENTECH-AS -- Turkey", "value": "geoasn/48678-tr", "content_hash": "bd1501338575427c", "object_json": { "id": "incident--35d9c104-ea3c-5291-5bba-209ece0675a7", "name": "TR-PENTECH-AS -- Turkey", "type": "incident", "score": 797825, "title": "TR-PENTECH-AS -- Turkey", "value": "geoasn/48678-tr", "method": "median", "location": "geoasn/48678-TR", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1691389 } } ], "derivations": [] }, { "id": "ise-7563c907674bfe4a629b5648", "entity_type": "asn", "entity_key": "AS203576", "geography": "TR", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 6.352198474119211 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS203576" ], "affected_services": [], "affected_regions": [ "TR" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:16.673Z", "updated_at": "2026-10-03T23:50:18.096Z", "evidence": [ { "event_id": "ise-7563c907674bfe4a629b5648", "stix_object_id": "incident--4d55836e-88c9-5b89-d2a2-03b723cd1503", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "internetbilisim -- Turkey", "value": "geoasn/203576-tr", "content_hash": "a9e503955fde94bf", "object_json": { "id": "incident--4d55836e-88c9-5b89-d2a2-03b723cd1503", "name": "internetbilisim -- Turkey", "type": "incident", "score": 2250081.6666666665, "title": "internetbilisim -- Turkey", "value": "geoasn/203576-tr", "method": "median", "location": "geoasn/203576-TR", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1350049 } } ], "derivations": [] }, { "id": "ise-951b2ab1463b49e8ceb375ea", "entity_type": "asn", "entity_key": "AS203576", "geography": "4115", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 6.352198474119211 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS203576" ], "affected_services": [], "affected_regions": [ "4115" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:16.691Z", "updated_at": "2026-10-03T23:50:18.088Z", "evidence": [ { "event_id": "ise-951b2ab1463b49e8ceb375ea", "stix_object_id": "incident--4bb9f598-b4bc-5b39-5574-d8823bed3e30", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "internetbilisim -- Istanbul", "value": "geoasn/203576-4115", "content_hash": "365f5d765199a64b", "object_json": { "id": "incident--4bb9f598-b4bc-5b39-5574-d8823bed3e30", "name": "internetbilisim -- Istanbul", "type": "incident", "score": 2250081.6666666665, "title": "internetbilisim -- Istanbul", "value": "geoasn/203576-4115", "method": "median", "location": "geoasn/203576-4115", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1350049 } } ], "derivations": [] }, { "id": "ise-adcaac232d6ea657b6b14ea7", "entity_type": "asn", "entity_key": "AS8386", "geography": "4115", "started_at": "2026-09-15T21:20:00.000Z", "last_observed_at": "2026-09-15T21:20:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.ping-slash24.score" ], "signal_count": 1 }, "current_measurement": { "ioda.ping-slash24.score": 5.907500208265136 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS8386" ], "affected_services": [], "affected_regions": [ "4115" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-09-30T03:05:24.563Z", "updated_at": "2026-10-03T23:50:33.702Z", "evidence": [ { "event_id": "ise-adcaac232d6ea657b6b14ea7", "stix_object_id": "incident--56f77103-03a2-52f4-509f-3dfc94b57ef7", "platform": "ioda", "observed_at": "2026-09-15T21:20:00.000Z", "name": "KOCNET -- Istanbul", "value": "geoasn/8386-4115", "content_hash": "c3e2573771c2b54b", "object_json": { "id": "incident--56f77103-03a2-52f4-509f-3dfc94b57ef7", "name": "KOCNET -- Istanbul", "type": "incident", "score": 808164.3166666667, "title": "KOCNET -- Istanbul", "value": "geoasn/8386-4115", "method": "median", "location": "geoasn/8386-4115", "datasource": "ping-slash24", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1564189 } } ], "derivations": [] }, { "id": "ise-e6fcb978d64fce59ac8c6ff7", "entity_type": "asn", "entity_key": "AS8386", "geography": "TR", "started_at": "2026-09-20T01:00:00.000Z", "last_observed_at": "2026-09-20T01:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.ping-slash24.score" ], "signal_count": 1 }, "current_measurement": { "ioda.ping-slash24.score": 5.735894363552647 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS8386" ], "affected_services": [], "affected_regions": [ "TR" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-10-01T03:24:02.939Z", "updated_at": "2026-10-03T23:50:35.728Z", "evidence": [ { "event_id": "ise-e6fcb978d64fce59ac8c6ff7", "stix_object_id": "incident--e01c2f4c-9389-56e0-9292-203a35cf1098", "platform": "ioda", "observed_at": "2026-09-20T01:00:00.000Z", "name": "KOCNET -- Turkey", "value": "geoasn/8386-tr", "content_hash": "9c9649b52ec88783", "object_json": { "id": "incident--e01c2f4c-9389-56e0-9292-203a35cf1098", "name": "KOCNET -- Turkey", "type": "incident", "score": 544369.2258064516, "title": "KOCNET -- Turkey", "value": "geoasn/8386-tr", "method": "median", "location": "geoasn/8386-TR", "datasource": "ping-slash24", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1205389 } } ], "derivations": [] }, { "id": "ise-5c515fe682374b540a2f0cf0", "entity_type": "asn", "entity_key": "AS29262", "geography": "TR", "started_at": "2026-09-17T10:00:00.000Z", "last_observed_at": "2026-09-17T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.280941344671688 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS29262" ], "affected_services": [], "affected_regions": [ "TR" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-09-30T03:05:25.545Z", "updated_at": "2026-10-03T23:50:34.954Z", "evidence": [ { "event_id": "ise-5c515fe682374b540a2f0cf0", "stix_object_id": "incident--77d0fe4a-9efa-5b32-6b3e-b7fc949a24f2", "platform": "ioda", "observed_at": "2026-09-17T10:00:00.000Z", "name": "IDEALHOSTING -- Turkey", "value": "geoasn/29262-tr", "content_hash": "999328352d23b428", "object_json": { "id": "incident--77d0fe4a-9efa-5b32-6b3e-b7fc949a24f2", "name": "IDEALHOSTING -- Turkey", "type": "incident", "score": 190958.53333333333, "title": "IDEALHOSTING -- Turkey", "value": "geoasn/29262-tr", "method": "median", "location": "geoasn/29262-TR", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1432189 } } ], "derivations": [] }, { "id": "ise-6ce19a5381b0e29bbb61f6ac", "entity_type": "asn", "entity_key": "AS48678", "geography": "4114", "started_at": "2026-08-20T10:00:00.000Z", "last_observed_at": "2026-08-20T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.923283730728689 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS48678" ], "affected_services": [], "affected_regions": [ "4114" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:26.341Z", "updated_at": "2026-10-03T23:50:26.642Z", "evidence": [ { "event_id": "ise-6ce19a5381b0e29bbb61f6ac", "stix_object_id": "incident--c6bd4647-f204-560b-c1bb-fc80ae88537e", "platform": "ioda", "observed_at": "2026-08-20T10:00:00.000Z", "name": "TR-PENTECH-AS -- Bursa", "value": "geoasn/48678-4114", "content_hash": "df07550fd4d9208c", "object_json": { "id": "incident--c6bd4647-f204-560b-c1bb-fc80ae88537e", "name": "TR-PENTECH-AS -- Bursa", "type": "incident", "score": 838075.6306306307, "title": "TR-PENTECH-AS -- Bursa", "value": "geoasn/48678-4114", "method": "median", "location": "geoasn/48678-4114", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1691389 } } ], "derivations": [] }, { "id": "ise-51d755ffa18c2b863b7f25c7", "entity_type": "asn", "entity_key": "AS8386", "geography": null, "started_at": "2026-09-20T01:00:00.000Z", "last_observed_at": "2026-09-20T01:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.ping-slash24.score" ], "signal_count": 1 }, "current_measurement": { "ioda.ping-slash24.score": 5.735894363552647 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS8386" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-10-01T04:08:43.716Z", "updated_at": "2026-10-03T23:50:35.737Z", "evidence": [ { "event_id": "ise-51d755ffa18c2b863b7f25c7", "stix_object_id": "incident--d7f9c8a7-b1dd-5b48-5714-e2950fe44d0f", "platform": "ioda", "observed_at": "2026-09-20T01:00:00.000Z", "name": "AS8386 (KOCNET)", "value": "asn/8386", "content_hash": "d6e6a7d80f3c1544", "object_json": { "id": "incident--d7f9c8a7-b1dd-5b48-5714-e2950fe44d0f", "name": "AS8386 (KOCNET)", "type": "incident", "score": 544369.2258064516, "title": "AS8386 (KOCNET)", "value": "asn/8386", "method": "median", "location": "asn/8386", "datasource": "ping-slash24", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1205389 } } ], "derivations": [] }, { "id": "ise-10298df26c76813a12be62c3", "entity_type": "asn", "entity_key": "AS48678", "geography": null, "started_at": "2026-08-14T19:05:00.000Z", "last_observed_at": "2026-08-14T19:05:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.6002840818648725 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS48678" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:24.498Z", "updated_at": "2026-10-03T23:50:24.865Z", "evidence": [ { "event_id": "ise-10298df26c76813a12be62c3", "stix_object_id": "incident--62a65a80-d845-5621-9121-36b3251ed589", "platform": "ioda", "observed_at": "2026-08-14T19:05:00.000Z", "name": "AS48678 (TR-PENTECH-AS)", "value": "asn/48678", "content_hash": "8dc591a3dd4f4e92", "object_json": { "id": "incident--62a65a80-d845-5621-9121-36b3251ed589", "name": "AS48678 (TR-PENTECH-AS)", "type": "incident", "score": 398366.6666666666, "title": "AS48678 (TR-PENTECH-AS)", "value": "asn/48678", "method": "median", "location": "asn/48678", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 754800 } } ], "derivations": [] }, { "id": "ise-9a2b0290d7906fcfd4d64760", "entity_type": "asn", "entity_key": "AS203576", "geography": null, "started_at": "2026-07-28T14:30:00.000Z", "last_observed_at": "2026-07-28T14:30:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 6.374213425250696 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS203576" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:15.110Z", "updated_at": "2026-10-03T23:50:15.608Z", "evidence": [ { "event_id": "ise-9a2b0290d7906fcfd4d64760", "stix_object_id": "incident--b18b9714-4011-535a-7eec-4115cacacd35", "platform": "ioda", "observed_at": "2026-07-28T14:30:00.000Z", "name": "AS203576 (internetbilisim)", "value": "asn/203576", "content_hash": "ccf328e6dd29a9d0", "object_json": { "id": "incident--b18b9714-4011-535a-7eec-4115cacacd35", "name": "AS203576 (internetbilisim)", "type": "incident", "score": 2367081.6666666665, "title": "AS203576 (internetbilisim)", "value": "asn/203576", "method": "median", "location": "asn/203576", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1420249 } } ], "derivations": [] }, { "id": "ise-42fe36dde7be30cae51c16e6", "entity_type": "asn", "entity_key": "AS29262", "geography": null, "started_at": "2026-07-27T13:30:00.000Z", "last_observed_at": "2026-07-27T13:30:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.198326534222503 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS29262" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:14.593Z", "updated_at": "2026-10-03T23:50:15.282Z", "evidence": [ { "event_id": "ise-42fe36dde7be30cae51c16e6", "stix_object_id": "incident--043bdf44-3702-51d6-6f51-1b454a2b117c", "platform": "ioda", "observed_at": "2026-07-27T13:30:00.000Z", "name": "AS29262 (IDEALHOSTING)", "value": "asn/29262", "content_hash": "9434873cfa097932", "object_json": { "id": "incident--043bdf44-3702-51d6-6f51-1b454a2b117c", "name": "AS29262 (IDEALHOSTING)", "type": "incident", "score": 157878.78787878787, "title": "AS29262 (IDEALHOSTING)", "value": "asn/29262", "method": "median", "location": "asn/29262", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1563000 } } ], "derivations": [] } ], "context": [], "audit": { "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.", "weights": { "anomaly": 0.3, "breadth": 0.2, "persistence": 0.15, "corroboration": 0.2, "baseline_deviation": 0.15 }, "derivation_ids": [], "observation_ids": [ "incident--b68d1e59-a66f-5e1d-7887-1b37f6ef2b2f", "incident--da8aeddc-d2ac-5e95-def8-76f1cf2a80be", "incident--eca47b4e-c4b4-54e6-de71-517b63fef51e", "incident--feb6cf4b-593a-5262-d921-88e942a520a2", "incident--4a91170f-52e3-54ef-5959-9d5e79edd749", "incident--50b43442-b165-5f68-968a-67c1da8f9a96", "incident--35d9c104-ea3c-5291-5bba-209ece0675a7", "incident--4d55836e-88c9-5b89-d2a2-03b723cd1503", "incident--4bb9f598-b4bc-5b39-5574-d8823bed3e30", "incident--56f77103-03a2-52f4-509f-3dfc94b57ef7", "incident--e01c2f4c-9389-56e0-9292-203a35cf1098", "incident--77d0fe4a-9efa-5b32-6b3e-b7fc949a24f2", "incident--c6bd4647-f204-560b-c1bb-fc80ae88537e", "incident--d7f9c8a7-b1dd-5b48-5714-e2950fe44d0f", "incident--62a65a80-d845-5621-9121-36b3251ed589", "incident--b18b9714-4011-535a-7eec-4115cacacd35", "incident--043bdf44-3702-51d6-6f51-1b454a2b117c" ], "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score." } }