{
  "service": "h3xa",
  "kind": "executive-briefing",
  "generated_at": "2026-10-28T18:08:40.194Z",
  "model_version": "h3xa-iss-1.1",
  "situation": {
    "id": "sit-c7246ba1ae8fec12754c0837",
    "scope_type": "country",
    "scope_key": "RU",
    "geography": "RU",
    "title": "Internet disruption in RU",
    "started_at": "2026-07-28T14:30:00.000Z",
    "last_observed_at": "2026-10-03T04:05:00.000Z",
    "status": "active",
    "classification": "FULL_OUTAGE",
    "trajectory": "STABLE",
    "stress_score": 67,
    "confidence": 69,
    "event_count": 33,
    "affected_asns": [
      "AS47541",
      "AS20485",
      "AS43727",
      "AS48287",
      "AS12846",
      "AS5573",
      "AS12722",
      "AS44533",
      "AS49505",
      "AS45054",
      "AS39134",
      "AS34552",
      "AS28709",
      "AS196742",
      "AS49476",
      "AS204720"
    ],
    "affected_services": [
      "Web connectivity",
      "HTTPS",
      "Signal",
      "Telegram",
      "Tor",
      "WhatsApp",
      "Facebook Messenger",
      "BBC",
      "Facebook",
      "Instagram",
      "Medium",
      "New York Times",
      "ChatGPT",
      "Claude",
      "Gemini",
      "ProtonVPN",
      "TikTok",
      "X",
      "YouTube"
    ],
    "affected_regions": [
      "RU",
      "3480",
      "3472",
      "3438",
      "3423",
      "3459",
      "3418"
    ],
    "source_count": 2,
    "record_origin": "unrecorded",
    "first_seen": "2026-08-29T22:33:30.345Z",
    "updated_at": "2026-10-03T23:50:37.930Z"
  },
  "events": [
    {
      "id": "ise-1569207b34e96beb8787b9a7",
      "entity_type": "country",
      "entity_key": "RU",
      "geography": "RU",
      "started_at": "2026-08-10T00:00:00.000Z",
      "last_observed_at": "2026-10-03T04:05:00.000Z",
      "status": "active",
      "classification": "SERVICE_BLOCKING",
      "trajectory": "STABLE",
      "stress_score": 67,
      "confidence": 15,
      "components": {
        "anomaly": 1,
        "breadth": 0.5,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 0.7942585092976198
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.5,
        "statistical_significance": 1
      },
      "baseline": {
        "signals": [
          "voidly.anomaly_rate"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "voidly.anomaly_rate": 0.0142602495543672
      },
      "deviation": {
        "max_anomaly": 1,
        "max_deviation": 0.7942585092976198
      },
      "affected_asns": [
        "AS47541",
        "AS20485",
        "AS43727",
        "AS48287"
      ],
      "affected_services": [
        "Web connectivity",
        "HTTPS",
        "Signal",
        "Telegram",
        "Tor",
        "WhatsApp",
        "Facebook Messenger",
        "BBC",
        "Facebook",
        "Instagram",
        "Medium",
        "New York Times",
        "ChatGPT",
        "Claude",
        "Gemini",
        "ProtonVPN",
        "TikTok",
        "X",
        "YouTube"
      ],
      "affected_regions": [
        "RU"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "insufficient corroboration"
      ],
      "observation_count": 36,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:20.109Z",
      "updated_at": "2026-10-03T23:50:14.103Z",
      "evidence": [
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--972380da-c68e-51d3-d5f3-a4433a188c2f",
          "platform": "voidly-atlas",
          "observed_at": "2022-02-21T00:00:00.000Z",
          "name": "Ukraine invasion - mass blocks",
          "value": "8ad002462cff",
          "content_hash": "ebb0f9a5493fa49a",
          "object_json": {
            "id": "incident--972380da-c68e-51d3-d5f3-a4433a188c2f",
            "name": "Ukraine invasion - mass blocks",
            "type": "incident",
            "title": "Ukraine invasion - mass blocks",
            "value": "8ad002462cff",
            "status": "confirmed",
            "sources": [
              "OONI",
              "Voidly ML"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 86,
            "start_time": "2022-02-21T00:00:00Z",
            "description": "Anomaly rate: 79.4% (634 measurements).",
            "anomaly_rate": 0.7942585092976198,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "incident_type": "censorship",
            "affected_domains": [],
            "affected_services": [
              "Web connectivity",
              "HTTPS"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--a2768311-0dca-5eb4-f60f-91886bd0929c",
          "platform": "voidly-atlas",
          "observed_at": "2023-12-29T00:00:00.000Z",
          "name": "Continued VPN/social media crackdown",
          "value": "105160179485",
          "content_hash": "286412ca26260075",
          "object_json": {
            "id": "incident--a2768311-0dca-5eb4-f60f-91886bd0929c",
            "name": "Continued VPN/social media crackdown",
            "type": "incident",
            "title": "Continued VPN/social media crackdown",
            "value": "105160179485",
            "status": "confirmed",
            "sources": [
              "OONI",
              "Voidly ML"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 70,
            "start_time": "2023-12-29T00:00:00Z",
            "description": "Anomaly rate: 97.2% (6 measurements).",
            "anomaly_rate": 0.9718980684087525,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "incident_type": "censorship",
            "affected_domains": [],
            "affected_services": [
              "Web connectivity",
              "HTTPS"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--61fe454d-6639-5c4a-e262-1e668969d9a9",
          "platform": "voidly-atlas",
          "observed_at": "2025-01-01T00:00:00.000Z",
          "name": "Continued VPN/social media crackdown",
          "value": "21ab4c05083f",
          "content_hash": "f02d63fd951f2e55",
          "object_json": {
            "id": "incident--61fe454d-6639-5c4a-e262-1e668969d9a9",
            "name": "Continued VPN/social media crackdown",
            "type": "incident",
            "title": "Continued VPN/social media crackdown",
            "value": "21ab4c05083f",
            "status": "confirmed",
            "sources": [
              "OONI",
              "Voidly ML"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 95,
            "start_time": "2025-01-01T00:00:00Z",
            "description": "Anomaly rate: 100.0% (444192 measurements).",
            "anomaly_rate": 1,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "incident_type": "censorship",
            "affected_domains": [],
            "affected_services": [
              "Web connectivity",
              "HTTPS"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--b3adc8b8-feef-53aa-5d9e-ffe1abb152fc",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-10T00:00:00.000Z",
          "name": "Censorship detected in RU",
          "value": "ru-2026-3012",
          "content_hash": "0548f1de0378cab0",
          "object_json": {
            "id": "incident--b3adc8b8-feef-53aa-5d9e-ffe1abb152fc",
            "name": "Censorship detected in RU",
            "type": "incident",
            "title": "Censorship detected in RU",
            "value": "ru-2026-3012",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-10T23:59:59Z",
            "severity": "critical",
            "confidence": 89,
            "start_time": "2026-08-10T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.9826589595375722,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Signal",
              "Telegram",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--358c35b9-d4f7-572b-57a2-11f8fbe3fc13",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-10T04:25:00.000Z",
          "name": "Internet connectivity disruption in Russia",
          "value": "ru-2026-3011",
          "content_hash": "9cf3bc13d0f1e355",
          "object_json": {
            "id": "incident--358c35b9-d4f7-572b-57a2-11f8fbe3fc13",
            "name": "Internet connectivity disruption in Russia",
            "type": "incident",
            "title": "Internet connectivity disruption in Russia",
            "value": "ru-2026-3011",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-10T04:25:00Z",
            "description": "IODA detected significant connectivity drop in Russia. 1 critical alerts recorded.",
            "anomaly_rate": 0.0667779632721202,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--87fe6026-77de-5fb6-72a7-5fc0ca44857d",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-11T00:00:00.000Z",
          "name": "Censorship detected in RU",
          "value": "ru-2026-3014",
          "content_hash": "30e127e89ade850d",
          "object_json": {
            "id": "incident--87fe6026-77de-5fb6-72a7-5fc0ca44857d",
            "name": "Censorship detected in RU",
            "type": "incident",
            "title": "Censorship detected in RU",
            "value": "ru-2026-3014",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-11T23:59:59Z",
            "severity": "critical",
            "confidence": 89,
            "start_time": "2026-08-11T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.9845758354755784,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Signal",
              "Telegram",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--43b12eff-efed-51a1-5415-686ee2bf7278",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-11T12:40:00.000Z",
          "name": "Internet connectivity disruption in Russia",
          "value": "ru-2026-3013",
          "content_hash": "99d5b6e9c081770a",
          "object_json": {
            "id": "incident--43b12eff-efed-51a1-5415-686ee2bf7278",
            "name": "Internet connectivity disruption in Russia",
            "type": "incident",
            "title": "Internet connectivity disruption in Russia",
            "value": "ru-2026-3013",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-11T12:40:00Z",
            "description": "IODA detected significant connectivity drop in Russia. 1 critical alerts recorded.",
            "anomaly_rate": 0.2536231884057971,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--d2353bf0-3183-5a31-aea2-0f53c72594ee",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-12T00:00:00.000Z",
          "name": "Censorship detected in RU",
          "value": "ru-2026-3016",
          "content_hash": "8e60741b5556b7a4",
          "object_json": {
            "id": "incident--d2353bf0-3183-5a31-aea2-0f53c72594ee",
            "name": "Censorship detected in RU",
            "type": "incident",
            "title": "Censorship detected in RU",
            "value": "ru-2026-3016",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-08-12T23:59:59Z",
            "severity": "critical",
            "confidence": 89,
            "start_time": "2026-08-12T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.9696132596685083,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger",
              "Signal",
              "Telegram",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--bc8fabe1-2212-5797-ffac-dfa2d90be8ef",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-12T04:20:00.000Z",
          "name": "Internet connectivity disruption in Russia",
          "value": "ru-2026-3015",
          "content_hash": "44ad2870c0cff078",
          "object_json": {
            "id": "incident--bc8fabe1-2212-5797-ffac-dfa2d90be8ef",
            "name": "Internet connectivity disruption in Russia",
            "type": "incident",
            "title": "Internet connectivity disruption in Russia",
            "value": "ru-2026-3015",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-08-12T23:00:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-12T04:20:00Z",
            "description": "IODA detected significant connectivity drop in Russia. 1 critical alerts recorded.",
            "anomaly_rate": 0.0392156862745098,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--ef8fb152-7e25-5500-ec87-3ac2b871218c",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-13T03:10:00.000Z",
          "name": "Internet connectivity disruption in Russia",
          "value": "ru-2026-3018",
          "content_hash": "07c5f65d894dde31",
          "object_json": {
            "id": "incident--ef8fb152-7e25-5500-ec87-3ac2b871218c",
            "name": "Internet connectivity disruption in Russia",
            "type": "incident",
            "title": "Internet connectivity disruption in Russia",
            "value": "ru-2026-3018",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-08-13T03:55:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-08-13T03:10:00Z",
            "description": "IODA detected significant connectivity drop in Russia. 2 critical alerts recorded.",
            "anomaly_rate": 0.028440488841657813,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--925cec8b-3da7-5760-81a4-15937ad4080d",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-27T00:00:00.000Z",
          "name": "Censorship detected in RU",
          "value": "ru-2026-3058",
          "content_hash": "f8e706ca79a4a76c",
          "object_json": {
            "id": "incident--925cec8b-3da7-5760-81a4-15937ad4080d",
            "name": "Censorship detected in RU",
            "type": "incident",
            "title": "Censorship detected in RU",
            "value": "ru-2026-3058",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-08-27T23:59:59Z",
            "severity": "critical",
            "confidence": 89,
            "start_time": "2026-08-27T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.9855491329479769,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [
              "AS47541"
            ],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [
              "bbc.com",
              "facebook.com",
              "instagram.com",
              "medium.com",
              "nytimes.com"
            ],
            "affected_services": [
              "BBC",
              "Facebook",
              "Facebook Messenger",
              "Instagram",
              "Medium",
              "New York Times",
              "Signal",
              "Telegram",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--a1c7bb79-fdb0-51f4-fd0f-3e8c0196bf5d",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-27T17:55:00.000Z",
          "name": "Internet connectivity disruption in Russia",
          "value": "ru-2026-3057",
          "content_hash": "227831fb33962fd8",
          "object_json": {
            "id": "incident--a1c7bb79-fdb0-51f4-fd0f-3e8c0196bf5d",
            "name": "Internet connectivity disruption in Russia",
            "type": "incident",
            "title": "Internet connectivity disruption in Russia",
            "value": "ru-2026-3057",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-08-27T18:55:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-08-27T17:55:00Z",
            "description": "IODA detected significant connectivity drop in Russia. 2 critical alerts recorded.",
            "anomaly_rate": 0.014020096186877362,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 1,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--69dcf051-754a-5216-4897-9edbd254ea42",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-28T00:00:00.000Z",
          "name": "Censorship detected in RU",
          "value": "ru-2026-3061",
          "content_hash": "0cdfb43f0e3f72ba",
          "object_json": {
            "id": "incident--69dcf051-754a-5216-4897-9edbd254ea42",
            "name": "Censorship detected in RU",
            "type": "incident",
            "title": "Censorship detected in RU",
            "value": "ru-2026-3061",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-28T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-28T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.9887323943661972,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger",
              "Signal",
              "Telegram",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--f72e988e-c64f-5348-1911-6f51a94c0e24",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-28T19:15:00.000Z",
          "name": "Internet connectivity disruption in Russia",
          "value": "ru-2026-3060",
          "content_hash": "4ab97f6a3cc37f0a",
          "object_json": {
            "id": "incident--f72e988e-c64f-5348-1911-6f51a94c0e24",
            "name": "Internet connectivity disruption in Russia",
            "type": "incident",
            "title": "Internet connectivity disruption in Russia",
            "value": "ru-2026-3060",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-08-28T21:50:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-08-28T19:15:00Z",
            "description": "IODA detected significant connectivity drop in Russia. 2 critical alerts recorded.",
            "anomaly_rate": 0.07668670674682698,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 2.5833,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--cc9c735f-6042-554b-1714-55862841044e",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-29T00:00:00.000Z",
          "name": "Censorship detected in RU",
          "value": "ru-2026-3062",
          "content_hash": "69e3e436a3cadf5a",
          "object_json": {
            "id": "incident--cc9c735f-6042-554b-1714-55862841044e",
            "name": "Censorship detected in RU",
            "type": "incident",
            "title": "Censorship detected in RU",
            "value": "ru-2026-3062",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-29T23:59:59Z",
            "severity": "critical",
            "confidence": 89,
            "start_time": "2026-08-29T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.984251968503937,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger",
              "Signal",
              "Telegram",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--4e6010b3-0067-50f8-166a-4b956c51ea11",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-23T00:00:00.000Z",
          "name": "Censorship detected in RU",
          "value": "ru-2026-3124",
          "content_hash": "61817884e45c5594",
          "object_json": {
            "id": "incident--4e6010b3-0067-50f8-166a-4b956c51ea11",
            "name": "Censorship detected in RU",
            "type": "incident",
            "title": "Censorship detected in RU",
            "value": "ru-2026-3124",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-09-23T23:59:59Z",
            "severity": "critical",
            "confidence": 89,
            "start_time": "2026-09-23T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.9844961240310077,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [
              "AS20485",
              "AS43727"
            ],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [
              "bbc.com",
              "chat.openai.com",
              "chatgpt.com",
              "claude.ai",
              "facebook.com",
              "gemini.google.com",
              "getlantern.org",
              "google.com",
              "huggingface.co",
              "instagram.com",
              "medium.com",
              "nytimes.com",
              "openai.com",
              "protonvpn.com",
              "psiphon.ca",
              "reddit.com",
              "signal.org",
              "substack.com",
              "telegram.org",
              "theguardian.com",
              "tiktok.com",
              "tumblr.com",
              "twitter.com",
              "whatsapp.com",
              "youtube.com"
            ],
            "affected_services": [
              "ChatGPT",
              "Claude",
              "Facebook",
              "Facebook Messenger",
              "Gemini",
              "Instagram",
              "ProtonVPN",
              "Signal",
              "Telegram",
              "TikTok",
              "Tor",
              "WhatsApp",
              "X",
              "YouTube"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--c43f1b0b-9a34-5ff1-2107-28dbf90402b4",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-23T09:50:00.000Z",
          "name": "Internet connectivity disruption in Russia",
          "value": "ru-2026-3123",
          "content_hash": "e91ca693ae53f663",
          "object_json": {
            "id": "incident--c43f1b0b-9a34-5ff1-2107-28dbf90402b4",
            "name": "Internet connectivity disruption in Russia",
            "type": "incident",
            "title": "Internet connectivity disruption in Russia",
            "value": "ru-2026-3123",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-23T18:10:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-23T09:50:00Z",
            "description": "IODA detected significant connectivity drop in Russia. 1 critical alerts recorded.",
            "anomaly_rate": 0.029093931837073983,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 8.3333,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--e4134f70-d520-5061-2243-0c094a3a2bfc",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-24T00:00:00.000Z",
          "name": "Censorship detected in RU",
          "value": "ru-2026-3128",
          "content_hash": "b3ec6d0d3c32b1c3",
          "object_json": {
            "id": "incident--e4134f70-d520-5061-2243-0c094a3a2bfc",
            "name": "Censorship detected in RU",
            "type": "incident",
            "title": "Censorship detected in RU",
            "value": "ru-2026-3128",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-09-24T23:59:59Z",
            "severity": "critical",
            "confidence": 89,
            "start_time": "2026-09-24T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.9846938775510204,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [
              "AS47541"
            ],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [
              "bbc.com",
              "facebook.com",
              "instagram.com",
              "medium.com"
            ],
            "affected_services": [
              "BBC",
              "Facebook",
              "Facebook Messenger",
              "Instagram",
              "Medium",
              "Signal",
              "Telegram",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--6dffb24e-c747-5fe5-ad91-dee2b78f588a",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-24T21:25:00.000Z",
          "name": "Internet connectivity disruption in Russia",
          "value": "ru-2026-3127",
          "content_hash": "88dc533bc729893a",
          "object_json": {
            "id": "incident--6dffb24e-c747-5fe5-ad91-dee2b78f588a",
            "name": "Internet connectivity disruption in Russia",
            "type": "incident",
            "title": "Internet connectivity disruption in Russia",
            "value": "ru-2026-3127",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-24T23:15:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-24T21:25:00Z",
            "description": "IODA detected significant connectivity drop in Russia. 2 critical alerts recorded.",
            "anomaly_rate": 0.03169875811110523,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 1.8333,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--50108551-a8e1-59a3-67af-b55475395aac",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-25T00:00:00.000Z",
          "name": "Censorship detected in RU",
          "value": "ru-2026-3131",
          "content_hash": "122a9ac7b9471dc6",
          "object_json": {
            "id": "incident--50108551-a8e1-59a3-67af-b55475395aac",
            "name": "Censorship detected in RU",
            "type": "incident",
            "title": "Censorship detected in RU",
            "value": "ru-2026-3131",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-25T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-25T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.9915492957746479,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger",
              "Signal",
              "Telegram",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--0d391d24-0a29-5601-b0db-66ab15365ba2",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-25T07:05:00.000Z",
          "name": "Internet connectivity disruption in Russia",
          "value": "ru-2026-3129",
          "content_hash": "fec23e523b6dc8cd",
          "object_json": {
            "id": "incident--0d391d24-0a29-5601-b0db-66ab15365ba2",
            "name": "Internet connectivity disruption in Russia",
            "type": "incident",
            "title": "Internet connectivity disruption in Russia",
            "value": "ru-2026-3129",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-25T07:05:00Z",
            "description": "IODA detected significant connectivity drop in Russia. 1 critical alerts recorded.",
            "anomaly_rate": 0.028056112224448898,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--f734dc66-43e7-5fec-8592-643c723fb449",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-26T00:00:00.000Z",
          "name": "Censorship detected in RU",
          "value": "ru-2026-3133",
          "content_hash": "c58bfcc68d1e26ef",
          "object_json": {
            "id": "incident--f734dc66-43e7-5fec-8592-643c723fb449",
            "name": "Censorship detected in RU",
            "type": "incident",
            "title": "Censorship detected in RU",
            "value": "ru-2026-3133",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-26T23:59:59Z",
            "severity": "critical",
            "confidence": 89,
            "start_time": "2026-09-26T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.9868073878627969,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger",
              "Signal",
              "Telegram",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--c4b17ff7-62cd-5d32-1d31-031fe2af44bc",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-26T00:50:00.000Z",
          "name": "Internet connectivity disruption in Russia",
          "value": "ru-2026-3132",
          "content_hash": "05a69fa98399df3a",
          "object_json": {
            "id": "incident--c4b17ff7-62cd-5d32-1d31-031fe2af44bc",
            "name": "Internet connectivity disruption in Russia",
            "type": "incident",
            "title": "Internet connectivity disruption in Russia",
            "value": "ru-2026-3132",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-26T21:35:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-26T00:50:00Z",
            "description": "IODA detected significant connectivity drop in Russia. 1 critical alerts recorded.",
            "anomaly_rate": 0.08346213292117466,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 20.75,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--06fc4712-94fa-5391-27e8-b23bfe7fb48e",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-27T00:00:00.000Z",
          "name": "Censorship detected in RU",
          "value": "ru-2026-3135",
          "content_hash": "530f092f4f9d2905",
          "object_json": {
            "id": "incident--06fc4712-94fa-5391-27e8-b23bfe7fb48e",
            "name": "Censorship detected in RU",
            "type": "incident",
            "title": "Censorship detected in RU",
            "value": "ru-2026-3135",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-09-27T23:59:59Z",
            "severity": "critical",
            "confidence": 89,
            "start_time": "2026-09-27T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.9842931937172775,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [
              "AS20485",
              "AS43727",
              "AS48287"
            ],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [
              "bbc.com",
              "chat.openai.com",
              "chatgpt.com",
              "claude.ai",
              "facebook.com",
              "gemini.google.com",
              "getlantern.org",
              "google.com",
              "huggingface.co",
              "instagram.com",
              "medium.com",
              "nytimes.com",
              "openai.com",
              "protonvpn.com",
              "psiphon.ca",
              "reddit.com",
              "signal.org",
              "substack.com",
              "telegram.org",
              "theguardian.com",
              "tiktok.com",
              "tumblr.com",
              "twitter.com",
              "whatsapp.com",
              "youtube.com"
            ],
            "affected_services": [
              "ChatGPT",
              "Claude",
              "Facebook",
              "Facebook Messenger",
              "Gemini",
              "Instagram",
              "ProtonVPN",
              "Signal",
              "Telegram",
              "TikTok",
              "Tor",
              "WhatsApp",
              "X",
              "YouTube"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--6f624583-2ee1-5a6c-c0b2-9dec46a71b35",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-27T07:00:00.000Z",
          "name": "Internet connectivity disruption in Russia",
          "value": "ru-2026-3134",
          "content_hash": "e9d531c19d6fabe9",
          "object_json": {
            "id": "incident--6f624583-2ee1-5a6c-c0b2-9dec46a71b35",
            "name": "Internet connectivity disruption in Russia",
            "type": "incident",
            "title": "Internet connectivity disruption in Russia",
            "value": "ru-2026-3134",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-27T10:40:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-27T07:00:00Z",
            "description": "IODA detected significant connectivity drop in Russia. 3 critical alerts recorded.",
            "anomaly_rate": 0.21666666666666665,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--b89578c5-0592-5f99-b57d-1d23aa40ce09",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-28T00:00:00.000Z",
          "name": "Censorship detected in RU",
          "value": "ru-2026-3139",
          "content_hash": "4010d150e0edc8ff",
          "object_json": {
            "id": "incident--b89578c5-0592-5f99-b57d-1d23aa40ce09",
            "name": "Censorship detected in RU",
            "type": "incident",
            "title": "Censorship detected in RU",
            "value": "ru-2026-3139",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-09-28T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-28T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.9889807162534435,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [
              "AS47541"
            ],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [
              "bbc.com",
              "facebook.com",
              "instagram.com",
              "medium.com"
            ],
            "affected_services": [
              "Facebook",
              "Facebook Messenger",
              "Instagram",
              "Signal",
              "Telegram",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--80817e5d-d1df-59c1-03ca-135d7d67b493",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-28T00:40:00.000Z",
          "name": "Internet connectivity disruption in Russia",
          "value": "ru-2026-3137",
          "content_hash": "b14771ba7d0b8dbe",
          "object_json": {
            "id": "incident--80817e5d-d1df-59c1-03ca-135d7d67b493",
            "name": "Internet connectivity disruption in Russia",
            "type": "incident",
            "title": "Internet connectivity disruption in Russia",
            "value": "ru-2026-3137",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-28T23:40:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-28T00:40:00Z",
            "description": "IODA detected significant connectivity drop in Russia. 2 critical alerts recorded.",
            "anomaly_rate": 0.21911764705882353,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--cb859fc7-4343-51bd-de00-0cab3acec1c4",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-29T00:00:00.000Z",
          "name": "Censorship detected in RU",
          "value": "ru-2026-3142",
          "content_hash": "a67a1043d3745d7d",
          "object_json": {
            "id": "incident--cb859fc7-4343-51bd-de00-0cab3acec1c4",
            "name": "Censorship detected in RU",
            "type": "incident",
            "title": "Censorship detected in RU",
            "value": "ru-2026-3142",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-29T23:59:59Z",
            "severity": "critical",
            "confidence": 89,
            "start_time": "2026-09-29T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.9827586206896551,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger",
              "Signal",
              "Telegram",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--583973c0-fae0-577f-7a72-cd961603fdac",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-29T03:40:00.000Z",
          "name": "Internet connectivity disruption in Russia",
          "value": "ru-2026-3140",
          "content_hash": "6c758124b8b010e1",
          "object_json": {
            "id": "incident--583973c0-fae0-577f-7a72-cd961603fdac",
            "name": "Internet connectivity disruption in Russia",
            "type": "incident",
            "title": "Internet connectivity disruption in Russia",
            "value": "ru-2026-3140",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-29T03:40:00Z",
            "description": "IODA detected significant connectivity drop in Russia. 1 critical alerts recorded.",
            "anomaly_rate": 0.20357142857142857,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--12bf1db2-d2db-5745-9ca2-ffc41288d845",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-30T00:00:00.000Z",
          "name": "Censorship detected in RU",
          "value": "ru-2026-3144",
          "content_hash": "0ae33076699a50f8",
          "object_json": {
            "id": "incident--12bf1db2-d2db-5745-9ca2-ffc41288d845",
            "name": "Censorship detected in RU",
            "type": "incident",
            "title": "Censorship detected in RU",
            "value": "ru-2026-3144",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-09-30T23:59:59Z",
            "severity": "critical",
            "confidence": 89,
            "start_time": "2026-09-30T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.9814814814814815,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [
              "AS20485",
              "AS43727"
            ],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [
              "bbc.com",
              "chat.openai.com",
              "chatgpt.com",
              "claude.ai",
              "facebook.com",
              "gemini.google.com",
              "getlantern.org",
              "google.com",
              "huggingface.co",
              "instagram.com",
              "medium.com",
              "nytimes.com",
              "openai.com",
              "protonvpn.com",
              "psiphon.ca",
              "reddit.com",
              "signal.org",
              "substack.com",
              "telegram.org",
              "theguardian.com",
              "tiktok.com",
              "tumblr.com",
              "twitter.com",
              "whatsapp.com",
              "youtube.com"
            ],
            "affected_services": [
              "ChatGPT",
              "Claude",
              "Facebook",
              "Facebook Messenger",
              "Gemini",
              "Instagram",
              "ProtonVPN",
              "Signal",
              "Telegram",
              "TikTok",
              "Tor",
              "WhatsApp",
              "X",
              "YouTube"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--9d4649cc-6083-5831-86cd-a65e986cc5ad",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-30T07:35:00.000Z",
          "name": "Internet connectivity disruption in Russia",
          "value": "ru-2026-3143",
          "content_hash": "aa02a9c4f1ddb00a",
          "object_json": {
            "id": "incident--9d4649cc-6083-5831-86cd-a65e986cc5ad",
            "name": "Internet connectivity disruption in Russia",
            "type": "incident",
            "title": "Internet connectivity disruption in Russia",
            "value": "ru-2026-3143",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-30T19:15:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-30T07:35:00Z",
            "description": "IODA detected significant connectivity drop in Russia. 1 critical alerts recorded.",
            "anomaly_rate": 0.12530712530712532,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--7c25d070-18b5-565f-c1a0-dc65d74a3b27",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-01T00:00:00.000Z",
          "name": "Censorship detected in RU",
          "value": "ru-2026-3148",
          "content_hash": "b34f9e5a03f48ab2",
          "object_json": {
            "id": "incident--7c25d070-18b5-565f-c1a0-dc65d74a3b27",
            "name": "Censorship detected in RU",
            "type": "incident",
            "title": "Censorship detected in RU",
            "value": "ru-2026-3148",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-10-01T23:59:59Z",
            "severity": "critical",
            "confidence": 89,
            "start_time": "2026-10-01T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.9849624060150376,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger",
              "Signal",
              "Telegram",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--79e5f4e7-d4bd-5d7f-e1fa-a9893aa3fb14",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-01T19:45:00.000Z",
          "name": "Internet connectivity disruption in Russia",
          "value": "ru-2026-3147",
          "content_hash": "4b61db3f2badaf35",
          "object_json": {
            "id": "incident--79e5f4e7-d4bd-5d7f-e1fa-a9893aa3fb14",
            "name": "Internet connectivity disruption in Russia",
            "type": "incident",
            "title": "Internet connectivity disruption in Russia",
            "value": "ru-2026-3147",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-10-01T19:45:00Z",
            "description": "IODA detected significant connectivity drop in Russia. 1 critical alerts recorded.",
            "anomaly_rate": 0.04085801838610827,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--4ee8cd9c-ce63-528d-eea5-6a164a33373b",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-02T00:00:00.000Z",
          "name": "Censorship detected in RU",
          "value": "ru-2026-3151",
          "content_hash": "e5fa6359c051bcf3",
          "object_json": {
            "id": "incident--4ee8cd9c-ce63-528d-eea5-6a164a33373b",
            "name": "Censorship detected in RU",
            "type": "incident",
            "title": "Censorship detected in RU",
            "value": "ru-2026-3151",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-10-02T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-10-02T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.9945945945945946,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger",
              "Signal",
              "Telegram",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--b40ec85e-a777-5665-3d53-789a17870885",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-02T02:25:00.000Z",
          "name": "Internet connectivity disruption in Russia",
          "value": "ru-2026-3149",
          "content_hash": "b1a20aaacecbed19",
          "object_json": {
            "id": "incident--b40ec85e-a777-5665-3d53-789a17870885",
            "name": "Internet connectivity disruption in Russia",
            "type": "incident",
            "title": "Internet connectivity disruption in Russia",
            "value": "ru-2026-3149",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-10-02T02:25:00Z",
            "description": "IODA detected significant connectivity drop in Russia. 1 critical alerts recorded.",
            "anomaly_rate": 0.08062015503875969,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-1569207b34e96beb8787b9a7",
          "stix_object_id": "incident--8ed7b82d-75b4-573b-6b12-2e00b846bbd3",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-03T04:05:00.000Z",
          "name": "Internet connectivity disruption in Russia",
          "value": "ru-2026-3152",
          "content_hash": "18d504bdb318b62d",
          "object_json": {
            "id": "incident--8ed7b82d-75b4-573b-6b12-2e00b846bbd3",
            "name": "Internet connectivity disruption in Russia",
            "type": "incident",
            "title": "Internet connectivity disruption in Russia",
            "value": "ru-2026-3152",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-10-03T04:05:00Z",
            "description": "IODA detected significant connectivity drop in Russia. 1 critical alerts recorded.",
            "anomaly_rate": 0.0142602495543672,
            "country_code": "RU",
            "country_name": "Russia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-1f9ff8a045637f0512837d96",
      "entity_type": "asn",
      "entity_key": "AS28709",
      "geography": "RU",
      "started_at": "2026-09-16T10:00:00.000Z",
      "last_observed_at": "2026-09-16T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.880410826019152
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS28709"
      ],
      "affected_services": [],
      "affected_regions": [
        "RU"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-30T03:05:24.922Z",
      "updated_at": "2026-10-03T23:50:34.134Z",
      "evidence": [
        {
          "event_id": "ise-1f9ff8a045637f0512837d96",
          "stix_object_id": "incident--88870302-abf8-567e-70a0-6e0beb96fb54",
          "platform": "ioda",
          "observed_at": "2026-09-16T10:00:00.000Z",
          "name": "VKONTAKTE-REGIONAL-CDN -- Russian Federation",
          "value": "geoasn/28709-ru",
          "content_hash": "65e81ef75de6caa1",
          "object_json": {
            "id": "incident--88870302-abf8-567e-70a0-6e0beb96fb54",
            "name": "VKONTAKTE-REGIONAL-CDN -- Russian Federation",
            "type": "incident",
            "score": 759294.5,
            "title": "VKONTAKTE-REGIONAL-CDN -- Russian Federation",
            "value": "geoasn/28709-ru",
            "method": "median",
            "location": "geoasn/28709-RU",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1518589
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-febe32b4df26b20fd4aff789",
      "entity_type": "asn",
      "entity_key": "AS12722",
      "geography": "3438",
      "started_at": "2026-07-29T10:00:00.000Z",
      "last_observed_at": "2026-07-29T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.478036042419881
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS12722"
      ],
      "affected_services": [],
      "affected_regions": [
        "3438"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:16.597Z",
      "updated_at": "2026-10-03T23:50:18.153Z",
      "evidence": [
        {
          "event_id": "ise-febe32b4df26b20fd4aff789",
          "stix_object_id": "incident--6b357a05-6ac5-5546-2dce-f93305353b56",
          "platform": "ioda",
          "observed_at": "2026-07-29T10:00:00.000Z",
          "name": "RECONN -- Moskva",
          "value": "geoasn/12722-3438",
          "content_hash": "757ca232749a2002",
          "object_json": {
            "id": "incident--6b357a05-6ac5-5546-2dce-f93305353b56",
            "name": "RECONN -- Moskva",
            "type": "incident",
            "score": 300631.5789473684,
            "title": "RECONN -- Moskva",
            "value": "geoasn/12722-3438",
            "method": "median",
            "location": "geoasn/12722-3438",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1209600
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-9fb34fcba4e9011f0b554e3a",
      "entity_type": "asn",
      "entity_key": "AS34552",
      "geography": "RU",
      "started_at": "2026-08-12T20:15:00.000Z",
      "last_observed_at": "2026-08-12T20:15:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.411460491582797
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS34552"
      ],
      "affected_services": [],
      "affected_regions": [
        "RU"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:23.785Z",
      "updated_at": "2026-10-03T23:50:23.743Z",
      "evidence": [
        {
          "event_id": "ise-9fb34fcba4e9011f0b554e3a",
          "stix_object_id": "incident--948e4553-256b-5309-5f4f-c6fc4da44be8",
          "platform": "ioda",
          "observed_at": "2026-08-12T20:15:00.000Z",
          "name": "TKURAL-AS -- Russian Federation",
          "value": "geoasn/34552-ru",
          "content_hash": "9bf3e1f20c5408b6",
          "object_json": {
            "id": "incident--948e4553-256b-5309-5f4f-c6fc4da44be8",
            "name": "TKURAL-AS -- Russian Federation",
            "type": "incident",
            "score": 2579053.3333333335,
            "title": "TKURAL-AS -- Russian Federation",
            "value": "geoasn/34552-ru",
            "method": "median",
            "location": "geoasn/34552-RU",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1547432
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-a4c61685c56af3b0aa246e00",
      "entity_type": "asn",
      "entity_key": "AS12846",
      "geography": "RU",
      "started_at": "2026-07-29T10:00:00.000Z",
      "last_observed_at": "2026-07-29T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.338410195859793
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS12846"
      ],
      "affected_services": [],
      "affected_regions": [
        "RU"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:18.086Z",
      "updated_at": "2026-10-03T23:50:17.409Z",
      "evidence": [
        {
          "event_id": "ise-a4c61685c56af3b0aa246e00",
          "stix_object_id": "incident--ef85af3d-7601-5ac2-41f5-b345f34f1ec6",
          "platform": "ioda",
          "observed_at": "2026-07-29T10:00:00.000Z",
          "name": "AS12846 -- Russian Federation",
          "value": "geoasn/12846-ru",
          "content_hash": "ecc6b9a03f3d5778",
          "object_json": {
            "id": "incident--ef85af3d-7601-5ac2-41f5-b345f34f1ec6",
            "name": "AS12846 -- Russian Federation",
            "type": "incident",
            "score": 2179766.614583333,
            "title": "AS12846 -- Russian Federation",
            "value": "geoasn/12846-ru",
            "method": "median",
            "location": "geoasn/12846-RU",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1350049
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-ac24b9f38ace21313081a13f",
      "entity_type": "asn",
      "entity_key": "AS44533",
      "geography": "RU",
      "started_at": "2026-07-29T11:05:00.000Z",
      "last_observed_at": "2026-07-29T11:05:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.419885598055268
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS44533"
      ],
      "affected_services": [],
      "affected_regions": [
        "RU"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:18.372Z",
      "updated_at": "2026-10-03T23:50:18.383Z",
      "evidence": [
        {
          "event_id": "ise-ac24b9f38ace21313081a13f",
          "stix_object_id": "incident--b1c3f34d-37e6-5e6e-9618-477485eba66e",
          "platform": "ioda",
          "observed_at": "2026-07-29T11:05:00.000Z",
          "name": "Davydov-NET -- Russian Federation",
          "value": "geoasn/44533-ru",
          "content_hash": "67087f18b46d1fd9",
          "object_json": {
            "id": "incident--b1c3f34d-37e6-5e6e-9618-477485eba66e",
            "name": "Davydov-NET -- Russian Federation",
            "type": "incident",
            "score": 262956.52173913043,
            "title": "Davydov-NET -- Russian Federation",
            "value": "geoasn/44533-ru",
            "method": "median",
            "location": "geoasn/44533-RU",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1209600
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-b6992853c0b14b6257df3447",
      "entity_type": "asn",
      "entity_key": "AS5573",
      "geography": "3480",
      "started_at": "2026-07-29T10:00:00.000Z",
      "last_observed_at": "2026-07-29T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.352198474119211
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS5573"
      ],
      "affected_services": [],
      "affected_regions": [
        "3480"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:17.361Z",
      "updated_at": "2026-10-03T23:50:17.757Z",
      "evidence": [
        {
          "event_id": "ise-b6992853c0b14b6257df3447",
          "stix_object_id": "incident--42b3cffa-4ab1-5dd1-4d19-a25662eb487e",
          "platform": "ioda",
          "observed_at": "2026-07-29T10:00:00.000Z",
          "name": "KRASNET-AS -- Krasnoyarsk",
          "value": "geoasn/5573-3480",
          "content_hash": "76c09ba74e0bb49c",
          "object_json": {
            "id": "incident--42b3cffa-4ab1-5dd1-4d19-a25662eb487e",
            "name": "KRASNET-AS -- Krasnoyarsk",
            "type": "incident",
            "score": 2250081.6666666665,
            "title": "KRASNET-AS -- Krasnoyarsk",
            "value": "geoasn/5573-3480",
            "method": "median",
            "location": "geoasn/5573-3480",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1350049
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-b6e3afb75afd4bf1bf193baf",
      "entity_type": "asn",
      "entity_key": "AS12846",
      "geography": "3472",
      "started_at": "2026-07-29T10:00:00.000Z",
      "last_observed_at": "2026-07-29T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.338187766004681
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS12846"
      ],
      "affected_services": [],
      "affected_regions": [
        "3472"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:16.789Z",
      "updated_at": "2026-10-03T23:50:18.026Z",
      "evidence": [
        {
          "event_id": "ise-b6e3afb75afd4bf1bf193baf",
          "stix_object_id": "incident--c1ea6344-550e-5313-3aca-d05037d9b37b",
          "platform": "ioda",
          "observed_at": "2026-07-29T10:00:00.000Z",
          "name": "AS12846 -- Altay",
          "value": "geoasn/12846-3472",
          "content_hash": "d40a09526f682585",
          "object_json": {
            "id": "incident--c1ea6344-550e-5313-3aca-d05037d9b37b",
            "name": "AS12846 -- Altay",
            "type": "incident",
            "score": 2178650.5026455023,
            "title": "AS12846 -- Altay",
            "value": "geoasn/12846-3472",
            "method": "median",
            "location": "geoasn/12846-3472",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1350049
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-c294c416f7f69f12d2c5f5d2",
      "entity_type": "asn",
      "entity_key": "AS196742",
      "geography": "3418",
      "started_at": "2026-09-16T08:40:00.000Z",
      "last_observed_at": "2026-09-16T08:40:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.76783820858804
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS196742"
      ],
      "affected_services": [],
      "affected_regions": [
        "3418"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-30T03:05:24.833Z",
      "updated_at": "2026-10-03T23:50:33.993Z",
      "evidence": [
        {
          "event_id": "ise-c294c416f7f69f12d2c5f5d2",
          "stix_object_id": "incident--61c36a6e-dd1d-54a2-a308-e62fa7b5c7bf",
          "platform": "ioda",
          "observed_at": "2026-09-16T08:40:00.000Z",
          "name": "EKRAN-AS -- Kaliningrad",
          "value": "geoasn/196742-3418",
          "content_hash": "b991f29dbeb3dc37",
          "object_json": {
            "id": "incident--61c36a6e-dd1d-54a2-a308-e62fa7b5c7bf",
            "name": "EKRAN-AS -- Kaliningrad",
            "type": "incident",
            "score": 585918.8461538461,
            "title": "EKRAN-AS -- Kaliningrad",
            "value": "geoasn/196742-3418",
            "method": "median",
            "location": "geoasn/196742-3418",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1523389
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-d8e70f48110c61801870c3e0",
      "entity_type": "asn",
      "entity_key": "AS49505",
      "geography": "3423",
      "started_at": "2026-07-29T14:40:00.000Z",
      "last_observed_at": "2026-07-29T14:40:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.021002675043153
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS49505"
      ],
      "affected_services": [],
      "affected_regions": [
        "3423"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:18.525Z",
      "updated_at": "2026-10-03T23:50:18.501Z",
      "evidence": [
        {
          "event_id": "ise-d8e70f48110c61801870c3e0",
          "stix_object_id": "incident--ccf8413d-a2ab-5571-32b5-85f0246d547d",
          "platform": "ioda",
          "observed_at": "2026-07-29T14:40:00.000Z",
          "name": "SELECTEL -- City of St. Petersburg",
          "value": "geoasn/49505-3423",
          "content_hash": "7b5ac4b1e19f9a90",
          "object_json": {
            "id": "incident--ccf8413d-a2ab-5571-32b5-85f0246d547d",
            "name": "SELECTEL -- City of St. Petersburg",
            "type": "incident",
            "score": 104953.88933440257,
            "title": "SELECTEL -- City of St. Petersburg",
            "value": "geoasn/49505-3423",
            "method": "median",
            "location": "geoasn/49505-3423",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1208100
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-dfc4eccb3da2e45e33333491",
      "entity_type": "asn",
      "entity_key": "AS49476",
      "geography": "RU",
      "started_at": "2026-09-17T10:00:00.000Z",
      "last_observed_at": "2026-09-17T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.377849265341756
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS49476"
      ],
      "affected_services": [],
      "affected_regions": [
        "RU"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-30T03:05:25.553Z",
      "updated_at": "2026-10-03T23:50:34.941Z",
      "evidence": [
        {
          "event_id": "ise-dfc4eccb3da2e45e33333491",
          "stix_object_id": "incident--4de4547f-ac67-5ae1-1312-d567675abc78",
          "platform": "ioda",
          "observed_at": "2026-09-17T10:00:00.000Z",
          "name": "MTT-AS -- Russian Federation",
          "value": "geoasn/49476-ru",
          "content_hash": "35d451af9e2ec4e4",
          "object_json": {
            "id": "incident--4de4547f-ac67-5ae1-1312-d567675abc78",
            "name": "MTT-AS -- Russian Federation",
            "type": "incident",
            "score": 2386981.6666666665,
            "title": "MTT-AS -- Russian Federation",
            "value": "geoasn/49476-ru",
            "method": "median",
            "location": "geoasn/49476-RU",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1432189
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-f8624cd975c8ff89f193fa74",
      "entity_type": "asn",
      "entity_key": "AS5573",
      "geography": "RU",
      "started_at": "2026-07-29T10:00:00.000Z",
      "last_observed_at": "2026-07-29T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.352198474119211
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS5573"
      ],
      "affected_services": [],
      "affected_regions": [
        "RU"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:16.428Z",
      "updated_at": "2026-10-03T23:50:18.332Z",
      "evidence": [
        {
          "event_id": "ise-f8624cd975c8ff89f193fa74",
          "stix_object_id": "incident--3c6e608e-f46c-5e82-9052-b921a6c8b6d2",
          "platform": "ioda",
          "observed_at": "2026-07-29T10:00:00.000Z",
          "name": "KRASNET-AS -- Russian Federation",
          "value": "geoasn/5573-ru",
          "content_hash": "789a08626aa1ebbf",
          "object_json": {
            "id": "incident--3c6e608e-f46c-5e82-9052-b921a6c8b6d2",
            "name": "KRASNET-AS -- Russian Federation",
            "type": "incident",
            "score": 2250081.6666666665,
            "title": "KRASNET-AS -- Russian Federation",
            "value": "geoasn/5573-ru",
            "method": "median",
            "location": "geoasn/5573-RU",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1350049
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-024ae7c869a97b2f6a787b2d",
      "entity_type": "asn",
      "entity_key": "AS204720",
      "geography": "RU",
      "started_at": "2026-09-21T15:45:00.000Z",
      "last_observed_at": "2026-09-21T15:45:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.054587956698519
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS204720"
      ],
      "affected_services": [],
      "affected_regions": [
        "RU"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-10-02T02:59:09.076Z",
      "updated_at": "2026-10-03T23:50:36.277Z",
      "evidence": [
        {
          "event_id": "ise-024ae7c869a97b2f6a787b2d",
          "stix_object_id": "incident--ed1c313b-569f-5ffb-6a8a-0aa788a35be2",
          "platform": "ioda",
          "observed_at": "2026-09-21T15:45:00.000Z",
          "name": "CDNetworks -- Russian Federation",
          "value": "geoasn/204720-ru",
          "content_hash": "5742691d4129a316",
          "object_json": {
            "id": "incident--ed1c313b-569f-5ffb-6a8a-0aa788a35be2",
            "name": "CDNetworks -- Russian Federation",
            "type": "incident",
            "score": 113392.44680851063,
            "title": "CDNetworks -- Russian Federation",
            "value": "geoasn/204720-ru",
            "method": "median",
            "location": "geoasn/204720-RU",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1065889
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-3f436e433c785afb8fc1baf9",
      "entity_type": "asn",
      "entity_key": "AS45054",
      "geography": "RU",
      "started_at": "2026-08-12T10:00:00.000Z",
      "last_observed_at": "2026-08-12T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.421695108171448
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS45054"
      ],
      "affected_services": [],
      "affected_regions": [
        "RU"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:23.342Z",
      "updated_at": "2026-10-03T23:50:23.182Z",
      "evidence": [
        {
          "event_id": "ise-3f436e433c785afb8fc1baf9",
          "stix_object_id": "incident--c7cdba4d-fbeb-5c6d-b5a8-2511e6d10fcb",
          "platform": "ioda",
          "observed_at": "2026-08-12T10:00:00.000Z",
          "name": "Metrobit-AS -- Russian Federation",
          "value": "geoasn/45054-ru",
          "content_hash": "f0428331986825ed",
          "object_json": {
            "id": "incident--c7cdba4d-fbeb-5c6d-b5a8-2511e6d10fcb",
            "name": "Metrobit-AS -- Russian Federation",
            "type": "incident",
            "score": 2640553.3333333335,
            "title": "Metrobit-AS -- Russian Federation",
            "value": "geoasn/45054-ru",
            "method": "median",
            "location": "geoasn/45054-RU",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1584332
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-57725dee6768392dd8d52f07",
      "entity_type": "asn",
      "entity_key": "AS39134",
      "geography": "3438",
      "started_at": "2026-09-10T18:20:00.000Z",
      "last_observed_at": "2026-09-10T18:20:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.304402913237346
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS39134"
      ],
      "affected_services": [],
      "affected_regions": [
        "3438"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-26T10:52:07.363Z",
      "updated_at": "2026-10-03T23:50:31.947Z",
      "evidence": [
        {
          "event_id": "ise-57725dee6768392dd8d52f07",
          "stix_object_id": "incident--60d66fdb-b4a7-5b3c-1df6-06e83c905f17",
          "platform": "ioda",
          "observed_at": "2026-09-10T18:20:00.000Z",
          "name": "UNITEDNET -- Moskva",
          "value": "geoasn/39134-3438",
          "content_hash": "b0c89b3e8cd4fca3",
          "object_json": {
            "id": "incident--60d66fdb-b4a7-5b3c-1df6-06e83c905f17",
            "name": "UNITEDNET -- Moskva",
            "type": "incident",
            "score": 201558.33333333334,
            "title": "UNITEDNET -- Moskva",
            "value": "geoasn/39134-3438",
            "method": "median",
            "location": "geoasn/39134-3438",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1814025
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-5c8a259933e5f282570cce9a",
      "entity_type": "asn",
      "entity_key": "AS49476",
      "geography": "3438",
      "started_at": "2026-09-17T10:00:00.000Z",
      "last_observed_at": "2026-09-17T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.377849265341756
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS49476"
      ],
      "affected_services": [],
      "affected_regions": [
        "3438"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-30T03:05:25.561Z",
      "updated_at": "2026-10-03T23:50:34.974Z",
      "evidence": [
        {
          "event_id": "ise-5c8a259933e5f282570cce9a",
          "stix_object_id": "incident--520c1a0e-ce43-5504-51a2-ba120dd6e687",
          "platform": "ioda",
          "observed_at": "2026-09-17T10:00:00.000Z",
          "name": "MTT-AS -- Moskva",
          "value": "geoasn/49476-3438",
          "content_hash": "abbfb0315b56b1f3",
          "object_json": {
            "id": "incident--520c1a0e-ce43-5504-51a2-ba120dd6e687",
            "name": "MTT-AS -- Moskva",
            "type": "incident",
            "score": 2386981.6666666665,
            "title": "MTT-AS -- Moskva",
            "value": "geoasn/49476-3438",
            "method": "median",
            "location": "geoasn/49476-3438",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1432189
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-5e9f2b0bdd4ec521217f5a5b",
      "entity_type": "asn",
      "entity_key": "AS196742",
      "geography": "RU",
      "started_at": "2026-09-16T08:40:00.000Z",
      "last_observed_at": "2026-09-16T08:40:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.76783820858804
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS196742"
      ],
      "affected_services": [],
      "affected_regions": [
        "RU"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-30T03:05:24.826Z",
      "updated_at": "2026-10-03T23:50:34.015Z",
      "evidence": [
        {
          "event_id": "ise-5e9f2b0bdd4ec521217f5a5b",
          "stix_object_id": "incident--9a614c4a-a46c-5f4f-5aad-6aa12abd6d34",
          "platform": "ioda",
          "observed_at": "2026-09-16T08:40:00.000Z",
          "name": "EKRAN-AS -- Russian Federation",
          "value": "geoasn/196742-ru",
          "content_hash": "84555600d3b72b31",
          "object_json": {
            "id": "incident--9a614c4a-a46c-5f4f-5aad-6aa12abd6d34",
            "name": "EKRAN-AS -- Russian Federation",
            "type": "incident",
            "score": 585918.8461538461,
            "title": "EKRAN-AS -- Russian Federation",
            "value": "geoasn/196742-ru",
            "method": "median",
            "location": "geoasn/196742-RU",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1523389
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-85f56f61f4c91ad9f6a0e355",
      "entity_type": "asn",
      "entity_key": "AS204720",
      "geography": "3438",
      "started_at": "2026-09-21T15:45:00.000Z",
      "last_observed_at": "2026-09-21T15:45:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.146901484616637
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS204720"
      ],
      "affected_services": [],
      "affected_regions": [
        "3438"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-10-02T01:42:06.164Z",
      "updated_at": "2026-10-03T23:50:36.267Z",
      "evidence": [
        {
          "event_id": "ise-85f56f61f4c91ad9f6a0e355",
          "stix_object_id": "incident--96278837-7070-558b-ca2e-001ff7d4ddab",
          "platform": "ioda",
          "observed_at": "2026-09-21T15:45:00.000Z",
          "name": "CDNetworks -- Moskva",
          "value": "geoasn/204720-3438",
          "content_hash": "7db6abc675a82435",
          "object_json": {
            "id": "incident--96278837-7070-558b-ca2e-001ff7d4ddab",
            "name": "CDNetworks -- Moskva",
            "type": "incident",
            "score": 140248.55263157893,
            "title": "CDNetworks -- Moskva",
            "value": "geoasn/204720-3438",
            "method": "median",
            "location": "geoasn/204720-3438",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1065889
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-8b31dc6b833fb48f033d94dd",
      "entity_type": "asn",
      "entity_key": "AS39134",
      "geography": "RU",
      "started_at": "2026-09-10T18:20:00.000Z",
      "last_observed_at": "2026-09-10T18:20:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.304402913237346
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS39134"
      ],
      "affected_services": [],
      "affected_regions": [
        "RU"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-26T10:52:07.370Z",
      "updated_at": "2026-10-03T23:50:31.955Z",
      "evidence": [
        {
          "event_id": "ise-8b31dc6b833fb48f033d94dd",
          "stix_object_id": "incident--22a1054d-7fc8-5cfe-da7e-3b78dec9a977",
          "platform": "ioda",
          "observed_at": "2026-09-10T18:20:00.000Z",
          "name": "UNITEDNET -- Russian Federation",
          "value": "geoasn/39134-ru",
          "content_hash": "0048cd2032b2aa41",
          "object_json": {
            "id": "incident--22a1054d-7fc8-5cfe-da7e-3b78dec9a977",
            "name": "UNITEDNET -- Russian Federation",
            "type": "incident",
            "score": 201558.33333333334,
            "title": "UNITEDNET -- Russian Federation",
            "value": "geoasn/39134-ru",
            "method": "median",
            "location": "geoasn/39134-RU",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1814025
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-8b9b9d4ce4a9a39dc9a16d77",
      "entity_type": "asn",
      "entity_key": "AS12722",
      "geography": "RU",
      "started_at": "2026-07-29T10:00:00.000Z",
      "last_observed_at": "2026-07-29T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.452155612143538
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS12722"
      ],
      "affected_services": [],
      "affected_regions": [
        "RU"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:17.102Z",
      "updated_at": "2026-10-03T23:50:17.908Z",
      "evidence": [
        {
          "event_id": "ise-8b9b9d4ce4a9a39dc9a16d77",
          "stix_object_id": "incident--c034f0fe-4173-51df-1990-eb98f228dd16",
          "platform": "ioda",
          "observed_at": "2026-07-29T10:00:00.000Z",
          "name": "RECONN -- Russian Federation",
          "value": "geoasn/12722-ru",
          "content_hash": "e64bafd7125e93e5",
          "object_json": {
            "id": "incident--c034f0fe-4173-51df-1990-eb98f228dd16",
            "name": "RECONN -- Russian Federation",
            "type": "incident",
            "score": 283239.6694214876,
            "title": "RECONN -- Russian Federation",
            "value": "geoasn/12722-ru",
            "method": "median",
            "location": "geoasn/12722-RU",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1209600
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-8dfea164bd2d05cfcc1f5cb8",
      "entity_type": "asn",
      "entity_key": "AS45054",
      "geography": "3423",
      "started_at": "2026-08-12T10:00:00.000Z",
      "last_observed_at": "2026-08-12T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.421695108171448
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS45054"
      ],
      "affected_services": [],
      "affected_regions": [
        "3423"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:23.349Z",
      "updated_at": "2026-10-03T23:50:23.192Z",
      "evidence": [
        {
          "event_id": "ise-8dfea164bd2d05cfcc1f5cb8",
          "stix_object_id": "incident--6ca410a6-47d3-5776-0827-cbed88df5911",
          "platform": "ioda",
          "observed_at": "2026-08-12T10:00:00.000Z",
          "name": "Metrobit-AS -- City of St. Petersburg",
          "value": "geoasn/45054-3423",
          "content_hash": "f97f450a8a398a42",
          "object_json": {
            "id": "incident--6ca410a6-47d3-5776-0827-cbed88df5911",
            "name": "Metrobit-AS -- City of St. Petersburg",
            "type": "incident",
            "score": 2640553.3333333335,
            "title": "Metrobit-AS -- City of St. Petersburg",
            "value": "geoasn/45054-3423",
            "method": "median",
            "location": "geoasn/45054-3423",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1584332
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-90f7deb8d6d0bcd35b4715b9",
      "entity_type": "asn",
      "entity_key": "AS34552",
      "geography": "3459",
      "started_at": "2026-08-12T20:15:00.000Z",
      "last_observed_at": "2026-08-12T20:15:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.411460491582797
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS34552"
      ],
      "affected_services": [],
      "affected_regions": [
        "3459"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:23.795Z",
      "updated_at": "2026-10-03T23:50:23.721Z",
      "evidence": [
        {
          "event_id": "ise-90f7deb8d6d0bcd35b4715b9",
          "stix_object_id": "incident--8d77c50b-c76b-5f90-3685-ca43cdaf0010",
          "platform": "ioda",
          "observed_at": "2026-08-12T20:15:00.000Z",
          "name": "TKURAL-AS -- Sverdlovsk",
          "value": "geoasn/34552-3459",
          "content_hash": "30373621bb807c51",
          "object_json": {
            "id": "incident--8d77c50b-c76b-5f90-3685-ca43cdaf0010",
            "name": "TKURAL-AS -- Sverdlovsk",
            "type": "incident",
            "score": 2579053.3333333335,
            "title": "TKURAL-AS -- Sverdlovsk",
            "value": "geoasn/34552-3459",
            "method": "median",
            "location": "geoasn/34552-3459",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1547432
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-99e7b160ca1c63c9bac0169b",
      "entity_type": "asn",
      "entity_key": "AS49505",
      "geography": "RU",
      "started_at": "2026-07-29T14:50:00.000Z",
      "last_observed_at": "2026-07-29T14:50:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.006526971234462
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS49505"
      ],
      "affected_services": [],
      "affected_regions": [
        "RU"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:18.591Z",
      "updated_at": "2026-10-03T23:50:18.528Z",
      "evidence": [
        {
          "event_id": "ise-99e7b160ca1c63c9bac0169b",
          "stix_object_id": "incident--062e94db-ccae-5d9d-9f05-76074783cec7",
          "platform": "ioda",
          "observed_at": "2026-07-29T14:50:00.000Z",
          "name": "SELECTEL -- Russian Federation",
          "value": "geoasn/49505-ru",
          "content_hash": "bd629c0bb2c33a36",
          "object_json": {
            "id": "incident--062e94db-ccae-5d9d-9f05-76074783cec7",
            "name": "SELECTEL -- Russian Federation",
            "type": "incident",
            "score": 101513.24085750316,
            "title": "SELECTEL -- Russian Federation",
            "value": "geoasn/49505-ru",
            "method": "median",
            "location": "geoasn/49505-RU",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1207500
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-20078c458f794fb3c70986c8",
      "entity_type": "asn",
      "entity_key": "AS12722",
      "geography": null,
      "started_at": "2026-07-28T14:30:00.000Z",
      "last_observed_at": "2026-07-28T14:30:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.452155612143538
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS12722"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:15.865Z",
      "updated_at": "2026-10-03T23:50:16.463Z",
      "evidence": [
        {
          "event_id": "ise-20078c458f794fb3c70986c8",
          "stix_object_id": "incident--62329e24-0845-5893-c880-d4b12f5ef635",
          "platform": "ioda",
          "observed_at": "2026-07-28T14:30:00.000Z",
          "name": "AS12722 (RECONN)",
          "value": "asn/12722",
          "content_hash": "c7612272a4c2fb1e",
          "object_json": {
            "id": "incident--62329e24-0845-5893-c880-d4b12f5ef635",
            "name": "AS12722 (RECONN)",
            "type": "incident",
            "score": 283239.6694214876,
            "title": "AS12722 (RECONN)",
            "value": "asn/12722",
            "method": "median",
            "location": "asn/12722",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1209600
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-2182e2a04ad2ff4e6476699e",
      "entity_type": "asn",
      "entity_key": "AS28709",
      "geography": null,
      "started_at": "2026-08-19T15:40:00.000Z",
      "last_observed_at": "2026-08-19T15:40:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.900364670378861
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS28709"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:25.992Z",
      "updated_at": "2026-10-03T23:50:26.392Z",
      "evidence": [
        {
          "event_id": "ise-2182e2a04ad2ff4e6476699e",
          "stix_object_id": "incident--511ba4cc-8c09-56dd-c7a9-36548222f7bf",
          "platform": "ioda",
          "observed_at": "2026-08-19T15:40:00.000Z",
          "name": "AS28709 (VKONTAKTE-REGIONAL-CDN)",
          "value": "asn/28709",
          "content_hash": "bdbbb7f58698ca81",
          "object_json": {
            "id": "incident--511ba4cc-8c09-56dd-c7a9-36548222f7bf",
            "name": "AS28709 (VKONTAKTE-REGIONAL-CDN)",
            "type": "incident",
            "score": 794994.5,
            "title": "AS28709 (VKONTAKTE-REGIONAL-CDN)",
            "value": "asn/28709",
            "method": "median",
            "location": "asn/28709",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1589989
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-2d549ba4ef586287aff5e3ca",
      "entity_type": "asn",
      "entity_key": "AS45054",
      "geography": null,
      "started_at": "2026-08-11T23:10:00.000Z",
      "last_observed_at": "2026-08-11T23:10:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.4322562599207584
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS45054"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:22.994Z",
      "updated_at": "2026-10-03T23:50:22.615Z",
      "evidence": [
        {
          "event_id": "ise-2d549ba4ef586287aff5e3ca",
          "stix_object_id": "incident--21f0869e-cd95-59c2-68d8-da71409308e0",
          "platform": "ioda",
          "observed_at": "2026-08-11T23:10:00.000Z",
          "name": "AS45054 (Metrobit-AS)",
          "value": "asn/45054",
          "content_hash": "f48a657d6530b3c9",
          "object_json": {
            "id": "incident--21f0869e-cd95-59c2-68d8-da71409308e0",
            "name": "AS45054 (Metrobit-AS)",
            "type": "incident",
            "score": 2705553.3333333335,
            "title": "AS45054 (Metrobit-AS)",
            "value": "asn/45054",
            "method": "median",
            "location": "asn/45054",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1623332
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-814e8c3bf9ee4eb217a8a556",
      "entity_type": "asn",
      "entity_key": "AS39134",
      "geography": null,
      "started_at": "2026-08-12T12:25:00.000Z",
      "last_observed_at": "2026-08-12T12:25:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.343071404830795
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS39134"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:23.445Z",
      "updated_at": "2026-10-03T23:50:23.292Z",
      "evidence": [
        {
          "event_id": "ise-814e8c3bf9ee4eb217a8a556",
          "stix_object_id": "incident--a6cbe297-4c8b-5972-6529-1864cf5f0cbc",
          "platform": "ioda",
          "observed_at": "2026-08-12T12:25:00.000Z",
          "name": "AS39134 (UNITEDNET)",
          "value": "asn/39134",
          "content_hash": "07d0d304d1a67402",
          "object_json": {
            "id": "incident--a6cbe297-4c8b-5972-6529-1864cf5f0cbc",
            "name": "AS39134 (UNITEDNET)",
            "type": "incident",
            "score": 220327.868852459,
            "title": "AS39134 (UNITEDNET)",
            "value": "asn/39134",
            "method": "median",
            "location": "asn/39134",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1209600
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-4169843f07d18a2d91d2f938",
      "entity_type": "asn",
      "entity_key": "AS44533",
      "geography": null,
      "started_at": "2026-07-29T11:05:00.000Z",
      "last_observed_at": "2026-07-29T11:05:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 4.9962863277452465
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS44533"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:18.388Z",
      "updated_at": "2026-10-03T23:50:18.373Z",
      "evidence": [
        {
          "event_id": "ise-4169843f07d18a2d91d2f938",
          "stix_object_id": "incident--4cfe7bb5-79dc-58db-f63b-86a1861cba91",
          "platform": "ioda",
          "observed_at": "2026-07-29T11:05:00.000Z",
          "name": "AS44533 (Davydov-NET)",
          "value": "asn/44533",
          "content_hash": "714fdae938e359e4",
          "object_json": {
            "id": "incident--4cfe7bb5-79dc-58db-f63b-86a1861cba91",
            "name": "AS44533 (Davydov-NET)",
            "type": "incident",
            "score": 99147.54098360657,
            "title": "AS44533 (Davydov-NET)",
            "value": "asn/44533",
            "method": "median",
            "location": "asn/44533",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1209600
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-53e20714146668553ce1a94f",
      "entity_type": "asn",
      "entity_key": "AS49505",
      "geography": null,
      "started_at": "2026-07-29T14:10:00.000Z",
      "last_observed_at": "2026-07-29T14:10:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 4.470065082521543
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS49505"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:18.435Z",
      "updated_at": "2026-10-03T23:50:18.425Z",
      "evidence": [
        {
          "event_id": "ise-53e20714146668553ce1a94f",
          "stix_object_id": "incident--6157971b-54be-5066-42d2-ba0d1961791c",
          "platform": "ioda",
          "observed_at": "2026-07-29T14:10:00.000Z",
          "name": "AS49505 (SELECTEL)",
          "value": "asn/49505",
          "content_hash": "226b33e6c0008152",
          "object_json": {
            "id": "incident--6157971b-54be-5066-42d2-ba0d1961791c",
            "name": "AS49505 (SELECTEL)",
            "type": "incident",
            "score": 29515.515222482438,
            "title": "AS49505 (SELECTEL)",
            "value": "asn/49505",
            "method": "median",
            "location": "asn/49505",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1209900
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-f87d6dd3823845de3befaece",
      "entity_type": "asn",
      "entity_key": "AS5573",
      "geography": null,
      "started_at": "2026-07-28T14:30:00.000Z",
      "last_observed_at": "2026-07-28T14:30:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.374213425250696
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS5573"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:15.675Z",
      "updated_at": "2026-10-03T23:50:16.067Z",
      "evidence": [
        {
          "event_id": "ise-f87d6dd3823845de3befaece",
          "stix_object_id": "incident--6ba16635-7e45-519f-bbd1-faa429390f05",
          "platform": "ioda",
          "observed_at": "2026-07-28T14:30:00.000Z",
          "name": "AS5573 (KRASNET-AS)",
          "value": "asn/5573",
          "content_hash": "4dcc2f755d06af5a",
          "object_json": {
            "id": "incident--6ba16635-7e45-519f-bbd1-faa429390f05",
            "name": "AS5573 (KRASNET-AS)",
            "type": "incident",
            "score": 2367081.6666666665,
            "title": "AS5573 (KRASNET-AS)",
            "value": "asn/5573",
            "method": "median",
            "location": "asn/5573",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1420249
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-ee07fa6959710b94b4785a44",
      "entity_type": "asn",
      "entity_key": "AS196742",
      "geography": null,
      "started_at": "2026-09-16T08:40:00.000Z",
      "last_observed_at": "2026-09-16T08:40:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.76783820858804
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS196742"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-30T03:05:24.819Z",
      "updated_at": "2026-10-03T23:50:34.003Z",
      "evidence": [
        {
          "event_id": "ise-ee07fa6959710b94b4785a44",
          "stix_object_id": "incident--68f9432b-2975-5702-1b84-ff1ba9442fd8",
          "platform": "ioda",
          "observed_at": "2026-09-16T08:40:00.000Z",
          "name": "AS196742 (EKRAN-AS)",
          "value": "asn/196742",
          "content_hash": "d917a14c2489b7d1",
          "object_json": {
            "id": "incident--68f9432b-2975-5702-1b84-ff1ba9442fd8",
            "name": "AS196742 (EKRAN-AS)",
            "type": "incident",
            "score": 585918.8461538461,
            "title": "AS196742 (EKRAN-AS)",
            "value": "asn/196742",
            "method": "median",
            "location": "asn/196742",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1523389
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-927d311629c15f1b0f37d2d2",
      "entity_type": "asn",
      "entity_key": "AS34552",
      "geography": null,
      "started_at": "2026-08-12T20:15:00.000Z",
      "last_observed_at": "2026-08-12T20:15:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.411460491582797
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS34552"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:23.775Z",
      "updated_at": "2026-10-03T23:50:23.732Z",
      "evidence": [
        {
          "event_id": "ise-927d311629c15f1b0f37d2d2",
          "stix_object_id": "incident--de867844-8df0-5a47-40f9-a59f61d03515",
          "platform": "ioda",
          "observed_at": "2026-08-12T20:15:00.000Z",
          "name": "AS34552 (TKURAL-AS)",
          "value": "asn/34552",
          "content_hash": "0cc89bc9271cd027",
          "object_json": {
            "id": "incident--de867844-8df0-5a47-40f9-a59f61d03515",
            "name": "AS34552 (TKURAL-AS)",
            "type": "incident",
            "score": 2579053.3333333335,
            "title": "AS34552 (TKURAL-AS)",
            "value": "asn/34552",
            "method": "median",
            "location": "asn/34552",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1547432
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-60f85de5cb6d797ab1379c46",
      "entity_type": "asn",
      "entity_key": "AS12846",
      "geography": null,
      "started_at": "2026-07-28T14:30:00.000Z",
      "last_observed_at": "2026-07-28T14:30:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.360425146683529
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS12846"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:15.556Z",
      "updated_at": "2026-10-03T23:50:15.995Z",
      "evidence": [
        {
          "event_id": "ise-60f85de5cb6d797ab1379c46",
          "stix_object_id": "incident--f6fe6a19-d849-5eca-5ab0-0064165f1973",
          "platform": "ioda",
          "observed_at": "2026-07-28T14:30:00.000Z",
          "name": "AS12846 ()",
          "value": "asn/12846",
          "content_hash": "1cb3dadef382d302",
          "object_json": {
            "id": "incident--f6fe6a19-d849-5eca-5ab0-0064165f1973",
            "name": "AS12846 ()",
            "type": "incident",
            "score": 2293110.364583333,
            "title": "AS12846 ()",
            "value": "asn/12846",
            "method": "median",
            "location": "asn/12846",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1420249
          }
        }
      ],
      "derivations": []
    }
  ],
  "context": [],
  "audit": {
    "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.",
    "weights": {
      "anomaly": 0.3,
      "breadth": 0.2,
      "persistence": 0.15,
      "corroboration": 0.2,
      "baseline_deviation": 0.15
    },
    "derivation_ids": [],
    "observation_ids": [
      "incident--972380da-c68e-51d3-d5f3-a4433a188c2f",
      "incident--a2768311-0dca-5eb4-f60f-91886bd0929c",
      "incident--61fe454d-6639-5c4a-e262-1e668969d9a9",
      "incident--b3adc8b8-feef-53aa-5d9e-ffe1abb152fc",
      "incident--358c35b9-d4f7-572b-57a2-11f8fbe3fc13",
      "incident--87fe6026-77de-5fb6-72a7-5fc0ca44857d",
      "incident--43b12eff-efed-51a1-5415-686ee2bf7278",
      "incident--d2353bf0-3183-5a31-aea2-0f53c72594ee",
      "incident--bc8fabe1-2212-5797-ffac-dfa2d90be8ef",
      "incident--ef8fb152-7e25-5500-ec87-3ac2b871218c",
      "incident--925cec8b-3da7-5760-81a4-15937ad4080d",
      "incident--a1c7bb79-fdb0-51f4-fd0f-3e8c0196bf5d",
      "incident--69dcf051-754a-5216-4897-9edbd254ea42",
      "incident--f72e988e-c64f-5348-1911-6f51a94c0e24",
      "incident--cc9c735f-6042-554b-1714-55862841044e",
      "incident--4e6010b3-0067-50f8-166a-4b956c51ea11",
      "incident--c43f1b0b-9a34-5ff1-2107-28dbf90402b4",
      "incident--e4134f70-d520-5061-2243-0c094a3a2bfc",
      "incident--6dffb24e-c747-5fe5-ad91-dee2b78f588a",
      "incident--50108551-a8e1-59a3-67af-b55475395aac",
      "incident--0d391d24-0a29-5601-b0db-66ab15365ba2",
      "incident--f734dc66-43e7-5fec-8592-643c723fb449",
      "incident--c4b17ff7-62cd-5d32-1d31-031fe2af44bc",
      "incident--06fc4712-94fa-5391-27e8-b23bfe7fb48e",
      "incident--6f624583-2ee1-5a6c-c0b2-9dec46a71b35",
      "incident--b89578c5-0592-5f99-b57d-1d23aa40ce09",
      "incident--80817e5d-d1df-59c1-03ca-135d7d67b493",
      "incident--cb859fc7-4343-51bd-de00-0cab3acec1c4",
      "incident--583973c0-fae0-577f-7a72-cd961603fdac",
      "incident--12bf1db2-d2db-5745-9ca2-ffc41288d845",
      "incident--9d4649cc-6083-5831-86cd-a65e986cc5ad",
      "incident--7c25d070-18b5-565f-c1a0-dc65d74a3b27",
      "incident--79e5f4e7-d4bd-5d7f-e1fa-a9893aa3fb14",
      "incident--4ee8cd9c-ce63-528d-eea5-6a164a33373b",
      "incident--b40ec85e-a777-5665-3d53-789a17870885",
      "incident--8ed7b82d-75b4-573b-6b12-2e00b846bbd3",
      "incident--88870302-abf8-567e-70a0-6e0beb96fb54",
      "incident--6b357a05-6ac5-5546-2dce-f93305353b56",
      "incident--948e4553-256b-5309-5f4f-c6fc4da44be8",
      "incident--ef85af3d-7601-5ac2-41f5-b345f34f1ec6",
      "incident--b1c3f34d-37e6-5e6e-9618-477485eba66e",
      "incident--42b3cffa-4ab1-5dd1-4d19-a25662eb487e",
      "incident--c1ea6344-550e-5313-3aca-d05037d9b37b",
      "incident--61c36a6e-dd1d-54a2-a308-e62fa7b5c7bf",
      "incident--ccf8413d-a2ab-5571-32b5-85f0246d547d",
      "incident--4de4547f-ac67-5ae1-1312-d567675abc78",
      "incident--3c6e608e-f46c-5e82-9052-b921a6c8b6d2",
      "incident--ed1c313b-569f-5ffb-6a8a-0aa788a35be2",
      "incident--c7cdba4d-fbeb-5c6d-b5a8-2511e6d10fcb",
      "incident--60d66fdb-b4a7-5b3c-1df6-06e83c905f17",
      "incident--520c1a0e-ce43-5504-51a2-ba120dd6e687",
      "incident--9a614c4a-a46c-5f4f-5aad-6aa12abd6d34",
      "incident--96278837-7070-558b-ca2e-001ff7d4ddab",
      "incident--22a1054d-7fc8-5cfe-da7e-3b78dec9a977",
      "incident--c034f0fe-4173-51df-1990-eb98f228dd16",
      "incident--6ca410a6-47d3-5776-0827-cbed88df5911",
      "incident--8d77c50b-c76b-5f90-3685-ca43cdaf0010",
      "incident--062e94db-ccae-5d9d-9f05-76074783cec7",
      "incident--62329e24-0845-5893-c880-d4b12f5ef635",
      "incident--511ba4cc-8c09-56dd-c7a9-36548222f7bf",
      "incident--21f0869e-cd95-59c2-68d8-da71409308e0",
      "incident--a6cbe297-4c8b-5972-6529-1864cf5f0cbc",
      "incident--4cfe7bb5-79dc-58db-f63b-86a1861cba91",
      "incident--6157971b-54be-5066-42d2-ba0d1961791c",
      "incident--6ba16635-7e45-519f-bbd1-faa429390f05",
      "incident--68f9432b-2975-5702-1b84-ff1ba9442fd8",
      "incident--de867844-8df0-5a47-40f9-a59f61d03515",
      "incident--f6fe6a19-d849-5eca-5ab0-0064165f1973"
    ],
    "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score."
  }
}