{ "service": "h3xa", "kind": "executive-briefing", "generated_at": "2026-10-28T18:08:39.819Z", "model_version": "h3xa-iss-1.1", "situation": { "id": "sit-de3b4c840cca571f723ebdf7", "scope_type": "country", "scope_key": "IR", "geography": "IR", "title": "Internet disruption in IR", "started_at": "2026-07-25T22:00:00.000Z", "last_observed_at": "2026-10-02T03:10:00.000Z", "status": "resolved", "classification": "PARTIAL_OUTAGE", "trajectory": "RESOLVED", "stress_score": 69, "confidence": 78, "event_count": 17, "affected_asns": [ "AS204213", "AS203951", "AS208161", "AS49796", "AS206065", "AS198154", "AS44285", "AS204104", "AS51026" ], "affected_services": [ "Web connectivity", "HTTPS", "Facebook Messenger", "Signal", "Telegram", "WhatsApp", "Tor", "ChatGPT", "Claude", "Facebook", "Gemini", "Instagram", "ProtonVPN", "TikTok", "X", "YouTube", "Psiphon" ], "affected_regions": [ "IR", "1829", "1825" ], "source_count": 3, "record_origin": "unrecorded", "first_seen": "2026-08-29T22:33:28.810Z", "updated_at": "2026-10-03T23:50:38.048Z" }, "events": [ { "id": "ise-86c7b249c3567b1d2b796c66", "entity_type": "country", "entity_key": "IR", "geography": "IR", "started_at": "2026-08-10T00:00:00.000Z", "last_observed_at": "2026-10-02T03:10:00.000Z", "status": "resolved", "classification": "SERVICE_BLOCKING", "trajectory": "RESOLVED", "stress_score": 69, "confidence": 15, "components": { "anomaly": 1, "breadth": 0.5, "persistence": 1, "corroboration": 0, "baseline_deviation": 0.9459173396933546 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.5, "statistical_significance": 1 }, "baseline": { "signals": [ "voidly.anomaly_rate" ], "signal_count": 1 }, "current_measurement": { "voidly.anomaly_rate": 0.20921985815602837 }, "deviation": { "max_anomaly": 1, "max_deviation": 0.9459173396933546 }, "affected_asns": [ "AS204213", "AS203951", "AS208161", "AS49796" ], "affected_services": [ "Web connectivity", "HTTPS", "Facebook Messenger", "Signal", "Telegram", "WhatsApp", "Tor", "ChatGPT", "Claude", "Facebook", "Gemini", "Instagram", "ProtonVPN", "TikTok", "X", "YouTube", "Psiphon" ], "affected_regions": [ "IR" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "insufficient corroboration" ], "observation_count": 36, "ingestion_method": null, "first_seen": "2026-08-29T22:33:20.316Z", "updated_at": "2026-10-03T23:50:14.205Z", "evidence": [ { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--573b8db3-c190-5fb0-118e-2c4fae22012f", "platform": "voidly-atlas", "observed_at": "2022-08-12T00:00:00.000Z", "name": "Pre-protest restrictions", "value": "efdd8e0bc414", "content_hash": "16b511b20351e902", "object_json": { "id": "incident--573b8db3-c190-5fb0-118e-2c4fae22012f", "name": "Pre-protest restrictions", "type": "incident", "title": "Pre-protest restrictions", "value": "efdd8e0bc414", "status": "confirmed", "sources": [ "OONI", "Voidly ML" ], "end_time": null, "severity": "critical", "confidence": 71, "start_time": "2022-08-12T00:00:00Z", "description": "Anomaly rate: 94.6% (46 measurements).", "anomaly_rate": 0.9459173396933546, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "incident_type": "censorship", "affected_domains": [], "affected_services": [ "Web connectivity", "HTTPS" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--6ace1b87-cfd1-5b3b-0465-5538e8fc203b", "platform": "voidly-atlas", "observed_at": "2022-09-13T00:00:00.000Z", "name": "Mahsa Amini protests internet shutdown", "value": "b9830e9be448", "content_hash": "b28f741d36b6f8c8", "object_json": { "id": "incident--6ace1b87-cfd1-5b3b-0465-5538e8fc203b", "name": "Mahsa Amini protests internet shutdown", "type": "incident", "title": "Mahsa Amini protests internet shutdown", "value": "b9830e9be448", "status": "confirmed", "sources": [ "OONI", "Voidly ML" ], "end_time": null, "severity": "critical", "confidence": 87, "start_time": "2022-09-13T00:00:00Z", "description": "Anomaly rate: 86.3% (687 measurements).", "anomaly_rate": 0.8629129273569802, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "incident_type": "censorship", "affected_domains": [], "affected_services": [ "Web connectivity", "HTTPS" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--ce94b90a-6026-5cf2-9e84-3cfdb1ebd0b6", "platform": "voidly-atlas", "observed_at": "2023-01-01T00:00:00.000Z", "name": "Mahsa Amini protests internet shutdown", "value": "615192a70d71", "content_hash": "c67ea03c260495c6", "object_json": { "id": "incident--ce94b90a-6026-5cf2-9e84-3cfdb1ebd0b6", "name": "Mahsa Amini protests internet shutdown", "type": "incident", "title": "Mahsa Amini protests internet shutdown", "value": "615192a70d71", "status": "confirmed", "sources": [ "OONI", "Voidly ML" ], "end_time": null, "severity": "critical", "confidence": 95, "start_time": "2023-01-01T00:00:00Z", "description": "Anomaly rate: 100.0% (23435 measurements).", "anomaly_rate": 1, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "incident_type": "censorship", "affected_domains": [], "affected_services": [ "Web connectivity", "HTTPS" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--1b921b1d-f3a5-5239-14b0-c7788c7450d0", "platform": "voidly-atlas", "observed_at": "2026-08-10T00:00:00.000Z", "name": "Censorship detected in IR", "value": "ir-2026-2354", "content_hash": "c066fb17818da5f5", "object_json": { "id": "incident--1b921b1d-f3a5-5239-14b0-c7788c7450d0", "name": "Censorship detected in IR", "type": "incident", "title": "Censorship detected in IR", "value": "ir-2026-2354", "status": "suspected", "sources": [ "ooni" ], "end_time": "2026-08-10T23:59:59Z", "severity": "critical", "confidence": 90, "start_time": "2026-08-10T00:00:00Z", "description": null, "anomaly_rate": 1, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "censorship", "duration_hours": null, "affected_domains": [], "affected_services": [ "Facebook Messenger", "Signal", "Telegram", "WhatsApp" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--ce83e849-16eb-533f-7a2c-725cc3ed4500", "platform": "voidly-atlas", "observed_at": "2026-08-10T22:30:00.000Z", "name": "Internet connectivity disruption in Iran", "value": "ir-2026-2353", "content_hash": "27b9bd22ea469e2f", "object_json": { "id": "incident--ce83e849-16eb-533f-7a2c-725cc3ed4500", "name": "Internet connectivity disruption in Iran", "type": "incident", "title": "Internet connectivity disruption in Iran", "value": "ir-2026-2353", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 67, "start_time": "2026-08-10T22:30:00Z", "description": "IODA detected significant connectivity drop in Iran. 2 critical alerts recorded.", "anomaly_rate": 0.020659951003369623, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--50f767bf-1435-5cf2-cde0-1f2aa02f0769", "platform": "voidly-atlas", "observed_at": "2026-08-11T00:00:00.000Z", "name": "Censorship detected in IR", "value": "ir-2026-2356", "content_hash": "3635a94199d6d8ff", "object_json": { "id": "incident--50f767bf-1435-5cf2-cde0-1f2aa02f0769", "name": "Censorship detected in IR", "type": "incident", "title": "Censorship detected in IR", "value": "ir-2026-2356", "status": "suspected", "sources": [ "ooni" ], "end_time": "2026-08-11T23:59:59Z", "severity": "critical", "confidence": 90, "start_time": "2026-08-11T00:00:00Z", "description": null, "anomaly_rate": 1, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "censorship", "duration_hours": null, "affected_domains": [], "affected_services": [ "Facebook Messenger", "Signal", "Telegram", "WhatsApp" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--48a441c1-c030-5424-80b1-e7919b07c525", "platform": "voidly-atlas", "observed_at": "2026-08-11T19:05:00.000Z", "name": "Internet connectivity disruption in Iran", "value": "ir-2026-2355", "content_hash": "ee822c3324603d34", "object_json": { "id": "incident--48a441c1-c030-5424-80b1-e7919b07c525", "name": "Internet connectivity disruption in Iran", "type": "incident", "title": "Internet connectivity disruption in Iran", "value": "ir-2026-2355", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-08-11T19:05:00Z", "description": "IODA detected significant connectivity drop in Iran. 1 critical alerts recorded.", "anomaly_rate": 0.011111111111111112, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--ff1c33bb-f281-54fe-e213-bc0b2211fcb0", "platform": "voidly-atlas", "observed_at": "2026-08-12T00:00:00.000Z", "name": "Censorship detected in IR", "value": "ir-2026-2358", "content_hash": "9ffb4b38019a8001", "object_json": { "id": "incident--ff1c33bb-f281-54fe-e213-bc0b2211fcb0", "name": "Censorship detected in IR", "type": "incident", "title": "Censorship detected in IR", "value": "ir-2026-2358", "status": "suspected", "sources": [ "ooni", "censoredplanet" ], "end_time": "2026-08-12T23:59:59Z", "severity": "critical", "confidence": 90, "start_time": "2026-08-12T00:00:00Z", "description": null, "anomaly_rate": 1, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "censorship", "duration_hours": null, "affected_domains": [], "affected_services": [ "Facebook Messenger", "Signal", "Telegram", "WhatsApp" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--725fbab7-f54c-5abc-86cb-b388c04a8ca4", "platform": "voidly-atlas", "observed_at": "2026-08-12T08:10:00.000Z", "name": "Internet connectivity disruption in Iran", "value": "ir-2026-2357", "content_hash": "68f2f77fadab7ee3", "object_json": { "id": "incident--725fbab7-f54c-5abc-86cb-b388c04a8ca4", "name": "Internet connectivity disruption in Iran", "type": "incident", "title": "Internet connectivity disruption in Iran", "value": "ir-2026-2357", "status": "active", "sources": [ "ioda" ], "end_time": "2026-08-12T23:00:00Z", "severity": "critical", "confidence": 67, "start_time": "2026-08-12T08:10:00Z", "description": "IODA detected significant connectivity drop in Iran. 3 critical alerts recorded.", "anomaly_rate": 0.24251152073732718, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--ebd67b84-b3f9-5634-3e71-c94490574318", "platform": "voidly-atlas", "observed_at": "2026-08-13T00:10:00.000Z", "name": "Internet connectivity disruption in Iran", "value": "ir-2026-2360", "content_hash": "f50cf75553a5749e", "object_json": { "id": "incident--ebd67b84-b3f9-5634-3e71-c94490574318", "name": "Internet connectivity disruption in Iran", "type": "incident", "title": "Internet connectivity disruption in Iran", "value": "ir-2026-2360", "status": "active", "sources": [ "ioda" ], "end_time": "2026-08-13T11:30:00Z", "severity": "critical", "confidence": 67, "start_time": "2026-08-13T00:10:00Z", "description": "IODA detected significant connectivity drop in Iran. 4 critical alerts recorded.", "anomaly_rate": 0.23660714285714285, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--a0a127ec-c80d-523f-5815-e0d3ab4ff2bc", "platform": "voidly-atlas", "observed_at": "2026-08-26T05:25:00.000Z", "name": "Internet connectivity disruption in Iran", "value": "ir-2026-2395", "content_hash": "5129d75c451f3b67", "object_json": { "id": "incident--a0a127ec-c80d-523f-5815-e0d3ab4ff2bc", "name": "Internet connectivity disruption in Iran", "type": "incident", "title": "Internet connectivity disruption in Iran", "value": "ir-2026-2395", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 70, "start_time": "2026-08-26T05:25:00Z", "description": "IODA detected significant connectivity drop in Iran. 6 critical alerts recorded.", "anomaly_rate": 0.01606078750011204, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--a08a092e-01cf-5a7d-5329-4b95afb1153a", "platform": "voidly-atlas", "observed_at": "2026-08-27T00:00:00.000Z", "name": "Censorship detected in IR", "value": "ir-2026-2400", "content_hash": "05a4a772ac543b1a", "object_json": { "id": "incident--a08a092e-01cf-5a7d-5329-4b95afb1153a", "name": "Censorship detected in IR", "type": "incident", "title": "Censorship detected in IR", "value": "ir-2026-2400", "status": "suspected", "sources": [ "ooni", "censoredplanet" ], "end_time": "2026-08-27T23:59:59Z", "severity": "critical", "confidence": 90, "start_time": "2026-08-27T00:00:00Z", "description": null, "anomaly_rate": 1, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [ "AS204213" ], "incident_type": "censorship", "duration_hours": 23.9997, "affected_domains": [ "signal.org" ], "affected_services": [ "Facebook Messenger", "Signal", "Telegram", "WhatsApp" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--59b2dd04-459d-52a6-44c5-e4e92f0b9924", "platform": "voidly-atlas", "observed_at": "2026-08-27T10:00:00.000Z", "name": "Internet connectivity disruption in Iran", "value": "ir-2026-2399", "content_hash": "8020ab47b958c94a", "object_json": { "id": "incident--59b2dd04-459d-52a6-44c5-e4e92f0b9924", "name": "Internet connectivity disruption in Iran", "type": "incident", "title": "Internet connectivity disruption in Iran", "value": "ir-2026-2399", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-08-27T10:00:00Z", "description": "IODA detected significant connectivity drop in Iran. 1 critical alerts recorded.", "anomaly_rate": 0.23333333333333334, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": 0, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--4f62f526-32c9-5ea6-ee0a-b21316170be8", "platform": "voidly-atlas", "observed_at": "2026-08-28T00:00:00.000Z", "name": "Censorship detected in IR", "value": "ir-2026-2402", "content_hash": "89561740703d85d3", "object_json": { "id": "incident--4f62f526-32c9-5ea6-ee0a-b21316170be8", "name": "Censorship detected in IR", "type": "incident", "title": "Censorship detected in IR", "value": "ir-2026-2402", "status": "suspected", "sources": [ "ooni" ], "end_time": "2026-08-28T23:59:59Z", "severity": "critical", "confidence": 87, "start_time": "2026-08-28T00:00:00Z", "description": null, "anomaly_rate": 0.9130434782608695, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "censorship", "duration_hours": 23.9997, "affected_domains": [], "affected_services": [ "Facebook Messenger", "Signal", "Telegram", "Tor", "WhatsApp" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--780b1c85-b22f-5204-d683-84bd609d7d49", "platform": "voidly-atlas", "observed_at": "2026-08-28T10:10:00.000Z", "name": "Internet connectivity disruption in Iran", "value": "ir-2026-2401", "content_hash": "ad95e9d746b54e91", "object_json": { "id": "incident--780b1c85-b22f-5204-d683-84bd609d7d49", "name": "Internet connectivity disruption in Iran", "type": "incident", "title": "Internet connectivity disruption in Iran", "value": "ir-2026-2401", "status": "active", "sources": [ "ioda" ], "end_time": "2026-08-28T22:20:00Z", "severity": "critical", "confidence": 65, "start_time": "2026-08-28T10:10:00Z", "description": "IODA detected significant connectivity drop in Iran. 1 critical alerts recorded.", "anomaly_rate": 0.2081447963800905, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": 12.1667, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--4c9623df-7df4-541e-6027-8882cc47dc57", "platform": "voidly-atlas", "observed_at": "2026-08-29T00:00:00.000Z", "name": "Censorship detected in IR", "value": "ir-2026-2403", "content_hash": "a07ba193a6af9604", "object_json": { "id": "incident--4c9623df-7df4-541e-6027-8882cc47dc57", "name": "Censorship detected in IR", "type": "incident", "title": "Censorship detected in IR", "value": "ir-2026-2403", "status": "suspected", "sources": [ "ooni" ], "end_time": "2026-08-29T23:59:59Z", "severity": "critical", "confidence": 87, "start_time": "2026-08-29T00:00:00Z", "description": null, "anomaly_rate": 0.9354838709677419, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "censorship", "duration_hours": 23.9997, "affected_domains": [], "affected_services": [ "Facebook Messenger", "Signal", "Telegram", "WhatsApp" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--02fd700b-4809-5e74-2608-d5df7fa551da", "platform": "voidly-atlas", "observed_at": "2026-08-30T11:20:00.000Z", "name": "Internet connectivity disruption in Iran", "value": "ir-2026-2404", "content_hash": "3d15442187fc2d5b", "object_json": { "id": "incident--02fd700b-4809-5e74-2608-d5df7fa551da", "name": "Internet connectivity disruption in Iran", "type": "incident", "title": "Internet connectivity disruption in Iran", "value": "ir-2026-2404", "status": "active", "sources": [ "ioda" ], "end_time": "2026-08-30T13:20:00Z", "severity": "critical", "confidence": 65, "start_time": "2026-08-30T11:20:00Z", "description": "IODA detected significant connectivity drop in Iran. 1 critical alerts recorded.", "anomaly_rate": 0.22477064220183487, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--cf67058b-8e0b-5a08-eb9f-c49b1f28f591", "platform": "voidly-atlas", "observed_at": "2026-09-23T00:00:00.000Z", "name": "Censorship detected in IR", "value": "ir-2026-2470", "content_hash": "82c2c360e35beca3", "object_json": { "id": "incident--cf67058b-8e0b-5a08-eb9f-c49b1f28f591", "name": "Censorship detected in IR", "type": "incident", "title": "Censorship detected in IR", "value": "ir-2026-2470", "status": "suspected", "sources": [ "ooni", "censoredplanet" ], "end_time": "2026-09-23T23:59:59Z", "severity": "critical", "confidence": 90, "start_time": "2026-09-23T00:00:00Z", "description": null, "anomaly_rate": 1, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [ "AS203951", "AS204213" ], "incident_type": "censorship", "duration_hours": null, "affected_domains": [ "bbc.com", "chat.openai.com", "chatgpt.com", "claude.ai", "facebook.com", "gemini.google.com", "getlantern.org", "google.com", "huggingface.co", "instagram.com", "medium.com", "nytimes.com", "openai.com", "protonvpn.com", "psiphon.ca", "reddit.com", "signal.org", "substack.com", "telegram.org", "theguardian.com", "tiktok.com", "tumblr.com", "twitter.com", "whatsapp.com", "youtube.com" ], "affected_services": [ "ChatGPT", "Claude", "Facebook", "Facebook Messenger", "Gemini", "Instagram", "ProtonVPN", "Signal", "Telegram", "TikTok", "WhatsApp", "X", "YouTube" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--68f9e182-8433-57f3-5391-7600521bcf0d", "platform": "voidly-atlas", "observed_at": "2026-09-23T10:30:00.000Z", "name": "Internet connectivity disruption in Iran", "value": "ir-2026-2469", "content_hash": "78ce17b5f95e5532", "object_json": { "id": "incident--68f9e182-8433-57f3-5391-7600521bcf0d", "name": "Internet connectivity disruption in Iran", "type": "incident", "title": "Internet connectivity disruption in Iran", "value": "ir-2026-2469", "status": "active", "sources": [ "ioda" ], "end_time": "2026-09-23T12:00:00Z", "severity": "critical", "confidence": 67, "start_time": "2026-09-23T10:30:00Z", "description": "IODA detected significant connectivity drop in Iran. 2 critical alerts recorded.", "anomaly_rate": 0.12092721991049697, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": 1.5, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--8ef1c6e9-410b-57a7-42bb-40993df1adfb", "platform": "voidly-atlas", "observed_at": "2026-09-24T00:00:00.000Z", "name": "Censorship detected in IR", "value": "ir-2026-2474", "content_hash": "a9e4cae93e4cbd51", "object_json": { "id": "incident--8ef1c6e9-410b-57a7-42bb-40993df1adfb", "name": "Censorship detected in IR", "type": "incident", "title": "Censorship detected in IR", "value": "ir-2026-2474", "status": "suspected", "sources": [ "ooni", "censoredplanet" ], "end_time": "2026-09-24T23:59:59Z", "severity": "critical", "confidence": 90, "start_time": "2026-09-24T00:00:00Z", "description": null, "anomaly_rate": 1, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [ "AS208161" ], "incident_type": "censorship", "duration_hours": 23.9997, "affected_domains": [ "psiphon.ca", "youtube.com" ], "affected_services": [ "Facebook Messenger", "Psiphon", "Signal", "Telegram", "WhatsApp", "YouTube" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--e7eea531-488d-544d-70aa-a52947abdeca", "platform": "voidly-atlas", "observed_at": "2026-09-24T04:10:00.000Z", "name": "Internet connectivity disruption in Iran", "value": "ir-2026-2472", "content_hash": "ab0d6ae6a1109f2b", "object_json": { "id": "incident--e7eea531-488d-544d-70aa-a52947abdeca", "name": "Internet connectivity disruption in Iran", "type": "incident", "title": "Internet connectivity disruption in Iran", "value": "ir-2026-2472", "status": "active", "sources": [ "ioda" ], "end_time": "2026-09-24T23:45:00Z", "severity": "critical", "confidence": 65, "start_time": "2026-09-24T04:10:00Z", "description": "IODA detected significant connectivity drop in Iran. 1 critical alerts recorded.", "anomaly_rate": 0.20689655172413793, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": 19.5833, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--29326644-a114-54a4-97a7-9da77d7afb4d", "platform": "voidly-atlas", "observed_at": "2026-09-25T00:00:00.000Z", "name": "Censorship detected in IR", "value": "ir-2026-2477", "content_hash": "94632302e7dae5b9", "object_json": { "id": "incident--29326644-a114-54a4-97a7-9da77d7afb4d", "name": "Censorship detected in IR", "type": "incident", "title": "Censorship detected in IR", "value": "ir-2026-2477", "status": "suspected", "sources": [ "ooni" ], "end_time": "2026-09-25T23:59:59Z", "severity": "critical", "confidence": 90, "start_time": "2026-09-25T00:00:00Z", "description": null, "anomaly_rate": 1, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "censorship", "duration_hours": 23.9997, "affected_domains": [], "affected_services": [ "Facebook Messenger", "Signal", "Telegram", "WhatsApp" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--b176d0a0-c774-523c-ffb4-cee000139401", "platform": "voidly-atlas", "observed_at": "2026-09-25T03:20:00.000Z", "name": "Internet connectivity disruption in Iran", "value": "ir-2026-2475", "content_hash": "7c2e840f81c7022b", "object_json": { "id": "incident--b176d0a0-c774-523c-ffb4-cee000139401", "name": "Internet connectivity disruption in Iran", "type": "incident", "title": "Internet connectivity disruption in Iran", "value": "ir-2026-2475", "status": "active", "sources": [ "ioda" ], "end_time": "2026-09-25T20:05:00Z", "severity": "critical", "confidence": 67, "start_time": "2026-09-25T03:20:00Z", "description": "IODA detected significant connectivity drop in Iran. 3 critical alerts recorded.", "anomaly_rate": 0.23308575575191018, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": 16.75, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--642b9484-a5fe-5581-d094-2298f67dfc29", "platform": "voidly-atlas", "observed_at": "2026-09-26T00:00:00.000Z", "name": "Censorship detected in IR", "value": "ir-2026-2478", "content_hash": "135553210ddbe2cb", "object_json": { "id": "incident--642b9484-a5fe-5581-d094-2298f67dfc29", "name": "Censorship detected in IR", "type": "incident", "title": "Censorship detected in IR", "value": "ir-2026-2478", "status": "suspected", "sources": [ "ooni" ], "end_time": "2026-09-26T23:59:59Z", "severity": "critical", "confidence": 90, "start_time": "2026-09-26T00:00:00Z", "description": null, "anomaly_rate": 1, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "censorship", "duration_hours": 23.9997, "affected_domains": [], "affected_services": [ "Facebook Messenger", "Signal", "Telegram", "WhatsApp" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--8e23c039-9c5c-529f-b945-275311d7e172", "platform": "voidly-atlas", "observed_at": "2026-09-27T00:00:00.000Z", "name": "Censorship detected in IR", "value": "ir-2026-2480", "content_hash": "936c7757dc1b2661", "object_json": { "id": "incident--8e23c039-9c5c-529f-b945-275311d7e172", "name": "Censorship detected in IR", "type": "incident", "title": "Censorship detected in IR", "value": "ir-2026-2480", "status": "suspected", "sources": [ "ooni", "censoredplanet" ], "end_time": "2026-09-27T23:59:59Z", "severity": "critical", "confidence": 90, "start_time": "2026-09-27T00:00:00Z", "description": null, "anomaly_rate": 1, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [ "AS203951", "AS204213" ], "incident_type": "censorship", "duration_hours": null, "affected_domains": [ "bbc.com", "chat.openai.com", "chatgpt.com", "claude.ai", "facebook.com", "gemini.google.com", "getlantern.org", "google.com", "huggingface.co", "instagram.com", "medium.com", "nytimes.com", "openai.com", "protonvpn.com", "psiphon.ca", "reddit.com", "signal.org", "substack.com", "telegram.org", "theguardian.com", "tiktok.com", "tumblr.com", "twitter.com", "whatsapp.com", "youtube.com" ], "affected_services": [ "ChatGPT", "Claude", "Facebook", "Facebook Messenger", "Gemini", "Instagram", "ProtonVPN", "Signal", "Telegram", "TikTok", "WhatsApp", "X", "YouTube" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--ed7e239b-c442-5b8e-53ac-9802a28b048e", "platform": "voidly-atlas", "observed_at": "2026-09-27T05:10:00.000Z", "name": "Internet connectivity disruption in Iran", "value": "ir-2026-2479", "content_hash": "f818ab927894ef7b", "object_json": { "id": "incident--ed7e239b-c442-5b8e-53ac-9802a28b048e", "name": "Internet connectivity disruption in Iran", "type": "incident", "title": "Internet connectivity disruption in Iran", "value": "ir-2026-2479", "status": "active", "sources": [ "ioda" ], "end_time": "2026-09-27T22:15:00Z", "severity": "critical", "confidence": 65, "start_time": "2026-09-27T05:10:00Z", "description": "IODA detected significant connectivity drop in Iran. 1 critical alerts recorded.", "anomaly_rate": 0.21428571428571427, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--aff776c2-ccdf-5579-b264-0c324ae45235", "platform": "voidly-atlas", "observed_at": "2026-09-28T00:00:00.000Z", "name": "Censorship detected in IR", "value": "ir-2026-2484", "content_hash": "b1d8bde8e2e7e528", "object_json": { "id": "incident--aff776c2-ccdf-5579-b264-0c324ae45235", "name": "Censorship detected in IR", "type": "incident", "title": "Censorship detected in IR", "value": "ir-2026-2484", "status": "suspected", "sources": [ "ooni", "censoredplanet" ], "end_time": "2026-09-28T23:59:59Z", "severity": "critical", "confidence": 90, "start_time": "2026-09-28T00:00:00Z", "description": null, "anomaly_rate": 1, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [ "AS204213" ], "incident_type": "censorship", "duration_hours": null, "affected_domains": [ "facebook.com" ], "affected_services": [ "Facebook", "Facebook Messenger", "Signal", "Telegram", "WhatsApp" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--7d454ac1-3e7a-5793-62fd-feb1c2ba2ff7", "platform": "voidly-atlas", "observed_at": "2026-09-28T10:40:00.000Z", "name": "Internet connectivity disruption in Iran", "value": "ir-2026-2483", "content_hash": "345fa9cf8cb02a57", "object_json": { "id": "incident--7d454ac1-3e7a-5793-62fd-feb1c2ba2ff7", "name": "Internet connectivity disruption in Iran", "type": "incident", "title": "Internet connectivity disruption in Iran", "value": "ir-2026-2483", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-28T10:40:00Z", "description": "IODA detected significant connectivity drop in Iran. 1 critical alerts recorded.", "anomaly_rate": 0.011235955056179775, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--1bcb955d-cc60-5ff3-7559-7b4d7edfb188", "platform": "voidly-atlas", "observed_at": "2026-09-29T00:00:00.000Z", "name": "Censorship detected in IR", "value": "ir-2026-2486", "content_hash": "220f2fb066965b38", "object_json": { "id": "incident--1bcb955d-cc60-5ff3-7559-7b4d7edfb188", "name": "Censorship detected in IR", "type": "incident", "title": "Censorship detected in IR", "value": "ir-2026-2486", "status": "suspected", "sources": [ "ooni" ], "end_time": "2026-09-29T23:59:59Z", "severity": "critical", "confidence": 90, "start_time": "2026-09-29T00:00:00Z", "description": null, "anomaly_rate": 1, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "censorship", "duration_hours": null, "affected_domains": [], "affected_services": [ "Facebook Messenger", "Signal", "Telegram", "WhatsApp" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--3f3d9f5e-fea9-5c19-44bb-5cc9ac2bdbbf", "platform": "voidly-atlas", "observed_at": "2026-09-29T14:40:00.000Z", "name": "Internet connectivity disruption in Iran", "value": "ir-2026-2485", "content_hash": "489ae2f93c99413d", "object_json": { "id": "incident--3f3d9f5e-fea9-5c19-44bb-5cc9ac2bdbbf", "name": "Internet connectivity disruption in Iran", "type": "incident", "title": "Internet connectivity disruption in Iran", "value": "ir-2026-2485", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-29T14:40:00Z", "description": "IODA detected significant connectivity drop in Iran. 1 critical alerts recorded.", "anomaly_rate": 0.02696420269642027, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--759642e6-658f-5ed5-fbd5-063f4d7326c0", "platform": "voidly-atlas", "observed_at": "2026-09-30T00:00:00.000Z", "name": "Censorship detected in IR", "value": "ir-2026-2488", "content_hash": "c3a3b4e55238aa98", "object_json": { "id": "incident--759642e6-658f-5ed5-fbd5-063f4d7326c0", "name": "Censorship detected in IR", "type": "incident", "title": "Censorship detected in IR", "value": "ir-2026-2488", "status": "suspected", "sources": [ "ooni", "censoredplanet" ], "end_time": "2026-09-30T23:59:59Z", "severity": "critical", "confidence": 90, "start_time": "2026-09-30T00:00:00Z", "description": null, "anomaly_rate": 1, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [ "AS204213", "AS49796" ], "incident_type": "censorship", "duration_hours": null, "affected_domains": [ "bbc.com", "chat.openai.com", "chatgpt.com", "claude.ai", "facebook.com", "gemini.google.com", "getlantern.org", "google.com", "huggingface.co", "instagram.com", "medium.com", "nytimes.com", "openai.com", "protonvpn.com", "psiphon.ca", "reddit.com", "signal.org", "substack.com", "telegram.org", "theguardian.com", "tiktok.com", "tumblr.com", "twitter.com", "whatsapp.com", "youtube.com" ], "affected_services": [ "ChatGPT", "Claude", "Facebook", "Facebook Messenger", "Gemini", "Instagram", "ProtonVPN", "Signal", "Telegram", "TikTok", "WhatsApp", "X", "YouTube" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--746e8403-8312-58eb-468c-a544c49fe3e3", "platform": "voidly-atlas", "observed_at": "2026-09-30T19:00:00.000Z", "name": "Internet connectivity disruption in Iran", "value": "ir-2026-2487", "content_hash": "a2797d8e1545a5b4", "object_json": { "id": "incident--746e8403-8312-58eb-468c-a544c49fe3e3", "name": "Internet connectivity disruption in Iran", "type": "incident", "title": "Internet connectivity disruption in Iran", "value": "ir-2026-2487", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-30T19:00:00Z", "description": "IODA detected significant connectivity drop in Iran. 1 critical alerts recorded.", "anomaly_rate": 0.0111731843575419, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--9eacc482-3c3b-5b27-bee2-24c9db1d70ce", "platform": "voidly-atlas", "observed_at": "2026-10-01T00:00:00.000Z", "name": "Censorship detected in IR", "value": "ir-2026-2492", "content_hash": "a122e32c46c36262", "object_json": { "id": "incident--9eacc482-3c3b-5b27-bee2-24c9db1d70ce", "name": "Censorship detected in IR", "type": "incident", "title": "Censorship detected in IR", "value": "ir-2026-2492", "status": "suspected", "sources": [ "ooni", "censoredplanet" ], "end_time": "2026-10-01T23:59:59Z", "severity": "critical", "confidence": 90, "start_time": "2026-10-01T00:00:00Z", "description": null, "anomaly_rate": 1, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "censorship", "duration_hours": null, "affected_domains": [], "affected_services": [ "Facebook Messenger", "Signal", "Telegram", "WhatsApp" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--e5f1079b-5871-50b2-b1af-0e0e78c2b49a", "platform": "voidly-atlas", "observed_at": "2026-10-01T21:00:00.000Z", "name": "Internet connectivity disruption in Iran", "value": "ir-2026-2491", "content_hash": "785c8b56ab7220e7", "object_json": { "id": "incident--e5f1079b-5871-50b2-b1af-0e0e78c2b49a", "name": "Internet connectivity disruption in Iran", "type": "incident", "title": "Internet connectivity disruption in Iran", "value": "ir-2026-2491", "status": "active", "sources": [ "ioda" ], "end_time": "2026-10-01T21:05:00Z", "severity": "critical", "confidence": 67, "start_time": "2026-10-01T21:00:00Z", "description": "IODA detected significant connectivity drop in Iran. 4 critical alerts recorded.", "anomaly_rate": 0.21897983965734047, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--ebcf4c82-8393-5791-b06f-ba967dd153a5", "platform": "voidly-atlas", "observed_at": "2026-10-02T00:00:00.000Z", "name": "Censorship detected in IR", "value": "ir-2026-2495", "content_hash": "31a0db48dd644327", "object_json": { "id": "incident--ebcf4c82-8393-5791-b06f-ba967dd153a5", "name": "Censorship detected in IR", "type": "incident", "title": "Censorship detected in IR", "value": "ir-2026-2495", "status": "suspected", "sources": [ "ooni" ], "end_time": "2026-10-02T23:59:59Z", "severity": "critical", "confidence": 90, "start_time": "2026-10-02T00:00:00Z", "description": null, "anomaly_rate": 1, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "censorship", "duration_hours": null, "affected_domains": [], "affected_services": [ "Facebook Messenger", "Signal", "Telegram", "WhatsApp" ] } }, { "event_id": "ise-86c7b249c3567b1d2b796c66", "stix_object_id": "incident--4d29f9ec-7f41-56eb-3662-d8d04840f508", "platform": "voidly-atlas", "observed_at": "2026-10-02T03:10:00.000Z", "name": "Internet connectivity disruption in Iran", "value": "ir-2026-2493", "content_hash": "ca42e8f8ab1ec05e", "object_json": { "id": "incident--4d29f9ec-7f41-56eb-3662-d8d04840f508", "name": "Internet connectivity disruption in Iran", "type": "incident", "title": "Internet connectivity disruption in Iran", "value": "ir-2026-2493", "status": "active", "sources": [ "ioda" ], "end_time": "2026-10-02T04:20:00Z", "severity": "critical", "confidence": 67, "start_time": "2026-10-02T03:10:00Z", "description": "IODA detected significant connectivity drop in Iran. 2 critical alerts recorded.", "anomaly_rate": 0.20921985815602837, "country_code": "IR", "country_name": "Iran", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } } ], "derivations": [] }, { "id": "ise-e4c0f948900ad04c62453cd4", "entity_type": "asn", "entity_key": "AS206065", "geography": "1829", "started_at": "2026-07-25T22:00:00.000Z", "last_observed_at": "2026-07-25T22:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.ping-slash24.score" ], "signal_count": 1 }, "current_measurement": { "ioda.ping-slash24.score": 5.803155399968551 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS206065" ], "affected_services": [], "affected_regions": [ "1829" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:13.970Z", "updated_at": "2026-10-03T23:50:14.758Z", "evidence": [ { "event_id": "ise-e4c0f948900ad04c62453cd4", "stix_object_id": "incident--9ba5e885-dede-5cb0-833b-9b5823146794", "platform": "ioda", "observed_at": "2026-07-25T22:00:00.000Z", "name": "FDI -- Tehran", "value": "geoasn/206065-1829", "content_hash": "e3e179c0d2cc3066", "object_json": { "id": "incident--9ba5e885-dede-5cb0-833b-9b5823146794", "name": "FDI -- Tehran", "type": "incident", "score": 635557.3076923076, "title": "FDI -- Tehran", "value": "geoasn/206065-1829", "method": "median", "location": "geoasn/206065-1829", "datasource": "ping-slash24", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1652449 } } ], "derivations": [] }, { "id": "ise-9dfee63c07cb4ae39eb88366", "entity_type": "asn", "entity_key": "AS204104", "geography": "1825", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.574048188797887 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS204104" ], "affected_services": [], "affected_regions": [ "1825" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:17.606Z", "updated_at": "2026-10-03T23:50:17.076Z", "evidence": [ { "event_id": "ise-9dfee63c07cb4ae39eb88366", "stix_object_id": "incident--4bb21001-2ffd-5a5b-c919-c662dcc6caf8", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "GITI-AS -- Fars", "value": "geoasn/204104-1825", "content_hash": "b8e27814494fefb1", "object_json": { "id": "incident--4bb21001-2ffd-5a5b-c919-c662dcc6caf8", "name": "GITI-AS -- Fars", "type": "incident", "score": 375013.61111111107, "title": "GITI-AS -- Fars", "value": "geoasn/204104-1825", "method": "median", "location": "geoasn/204104-1825", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1350049 } } ], "derivations": [] }, { "id": "ise-b66d29a6685615e6cb9ddad0", "entity_type": "asn", "entity_key": "AS206065", "geography": "IR", "started_at": "2026-07-25T22:30:00.000Z", "last_observed_at": "2026-07-25T22:30:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.ping-slash24.score" ], "signal_count": 1 }, "current_measurement": { "ioda.ping-slash24.score": 5.608332570940073 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS206065" ], "affected_services": [], "affected_regions": [ "IR" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:13.979Z", "updated_at": "2026-10-03T23:50:14.768Z", "evidence": [ { "event_id": "ise-b66d29a6685615e6cb9ddad0", "stix_object_id": "incident--726c1eac-f0b1-5f98-d806-8ea08bd4dba7", "platform": "ioda", "observed_at": "2026-07-25T22:30:00.000Z", "name": "FDI -- Iran (Islamic Republic Of)", "value": "geoasn/206065-ir", "content_hash": "459f457023af8292", "object_json": { "id": "incident--726c1eac-f0b1-5f98-d806-8ea08bd4dba7", "name": "FDI -- Iran (Islamic Republic Of)", "type": "incident", "score": 405818.1818181818, "title": "FDI -- Iran (Islamic Republic Of)", "value": "geoasn/206065-ir", "method": "median", "location": "geoasn/206065-IR", "datasource": "ping-slash24", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209600 } } ], "derivations": [] }, { "id": "ise-b6a9de5c27d9cf2ca649fb16", "entity_type": "asn", "entity_key": "AS44285", "geography": "IR", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.394668908437831 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS44285" ], "affected_services": [], "affected_regions": [ "IR" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:16.832Z", "updated_at": "2026-10-03T23:50:18.019Z", "evidence": [ { "event_id": "ise-b6a9de5c27d9cf2ca649fb16", "stix_object_id": "incident--1dcbee31-45cf-5554-3366-5882c4b2de5c", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "SEFROYEKPARDAZENG-AS -- Iran (Islamic Republic Of)", "value": "geoasn/44285-ir", "content_hash": "523261356e5d5133", "object_json": { "id": "incident--1dcbee31-45cf-5554-3366-5882c4b2de5c", "name": "SEFROYEKPARDAZENG-AS -- Iran (Islamic Republic Of)", "type": "incident", "score": 248123.07692307694, "title": "SEFROYEKPARDAZENG-AS -- Iran (Islamic Republic Of)", "value": "geoasn/44285-ir", "method": "median", "location": "geoasn/44285-IR", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209600 } } ], "derivations": [] }, { "id": "ise-e335b78fa69af348444855d3", "entity_type": "asn", "entity_key": "AS204104", "geography": "IR", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.333643023318649 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS204104" ], "affected_services": [], "affected_regions": [ "IR" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:17.619Z", "updated_at": "2026-10-03T23:50:17.085Z", "evidence": [ { "event_id": "ise-e335b78fa69af348444855d3", "stix_object_id": "incident--33ceff7c-9e71-5cb1-7ba6-0cb81443d95b", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "GITI-AS -- Iran (Islamic Republic Of)", "value": "geoasn/204104-ir", "content_hash": "3413f40037b6d6e0", "object_json": { "id": "incident--33ceff7c-9e71-5cb1-7ba6-0cb81443d95b", "name": "GITI-AS -- Iran (Islamic Republic Of)", "type": "incident", "score": 215596.15384615384, "title": "GITI-AS -- Iran (Islamic Republic Of)", "value": "geoasn/204104-ir", "method": "median", "location": "geoasn/204104-IR", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1121100 } } ], "derivations": [] }, { "id": "ise-15b30b85eb90f77ad32eec8a", "entity_type": "asn", "entity_key": "AS44285", "geography": "1825", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.128402500063538 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS44285" ], "affected_services": [], "affected_regions": [ "1825" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:17.412Z", "updated_at": "2026-10-03T23:50:17.747Z", "evidence": [ { "event_id": "ise-15b30b85eb90f77ad32eec8a", "stix_object_id": "incident--84b82fd0-8da3-5953-b60b-a85faa64e5e6", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "SEFROYEKPARDAZENG-AS -- Fars", "value": "geoasn/44285-1825", "content_hash": "4a0b67bbf621b65d", "object_json": { "id": "incident--84b82fd0-8da3-5953-b60b-a85faa64e5e6", "name": "SEFROYEKPARDAZENG-AS -- Fars", "type": "incident", "score": 134400, "title": "SEFROYEKPARDAZENG-AS -- Fars", "value": "geoasn/44285-1825", "method": "median", "location": "geoasn/44285-1825", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209600 } } ], "derivations": [] }, { "id": "ise-24c83bb28d50a5fd91276f23", "entity_type": "asn", "entity_key": "AS51026", "geography": "1825", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 6.142938971294898 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS51026" ], "affected_services": [], "affected_regions": [ "1825" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:17.948Z", "updated_at": "2026-10-03T23:50:17.286Z", "evidence": [ { "event_id": "ise-24c83bb28d50a5fd91276f23", "stix_object_id": "incident--e2a530ec-473d-5e96-4321-ee7481e52c84", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "MobinhostInfrastructure -- Fars", "value": "geoasn/51026-1825", "content_hash": "abffa83a5242f9c0", "object_json": { "id": "incident--e2a530ec-473d-5e96-4321-ee7481e52c84", "name": "MobinhostInfrastructure -- Fars", "type": "incident", "score": 1389756.3235294118, "title": "MobinhostInfrastructure -- Fars", "value": "geoasn/51026-1825", "method": "median", "location": "geoasn/51026-1825", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1350049 } } ], "derivations": [] }, { "id": "ise-471b877728d0724d9e30edec", "entity_type": "asn", "entity_key": "AS51026", "geography": "IR", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 6.130349853177955 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS51026" ], "affected_services": [], "affected_regions": [ "IR" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:18.323Z", "updated_at": "2026-10-03T23:50:17.577Z", "evidence": [ { "event_id": "ise-471b877728d0724d9e30edec", "stix_object_id": "incident--f289910e-4c20-5ede-2bd4-7be262c17ded", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "MobinhostInfrastructure -- Iran (Islamic Republic Of)", "value": "geoasn/51026-ir", "content_hash": "77c2ba48ad7df76b", "object_json": { "id": "incident--f289910e-4c20-5ede-2bd4-7be262c17ded", "name": "MobinhostInfrastructure -- Iran (Islamic Republic Of)", "type": "incident", "score": 1350049, "title": "MobinhostInfrastructure -- Iran (Islamic Republic Of)", "value": "geoasn/51026-ir", "method": "median", "location": "geoasn/51026-IR", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1350049 } } ], "derivations": [] }, { "id": "ise-5ccfd4464b975e478135764b", "entity_type": "asn", "entity_key": "AS206065", "geography": "1825", "started_at": "2026-07-25T23:10:00.000Z", "last_observed_at": "2026-07-25T23:10:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.ping-slash24.score" ], "signal_count": 1 }, "current_measurement": { "ioda.ping-slash24.score": 5.660370140769218 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS206065" ], "affected_services": [], "affected_regions": [ "1825" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:13.995Z", "updated_at": "2026-10-03T23:50:14.792Z", "evidence": [ { "event_id": "ise-5ccfd4464b975e478135764b", "stix_object_id": "incident--b5877e5c-7187-5ddd-1cb1-37bf2d631128", "platform": "ioda", "observed_at": "2026-07-25T23:10:00.000Z", "name": "FDI -- Fars", "value": "geoasn/206065-1825", "content_hash": "12ca32cdd63b4c8f", "object_json": { "id": "incident--b5877e5c-7187-5ddd-1cb1-37bf2d631128", "name": "FDI -- Fars", "type": "incident", "score": 457476.9230769231, "title": "FDI -- Fars", "value": "geoasn/206065-1825", "method": "median", "location": "geoasn/206065-1825", "datasource": "ping-slash24", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209600 } } ], "derivations": [] }, { "id": "ise-8938ed1507e647628608d45f", "entity_type": "asn", "entity_key": "AS44285", "geography": "1829", "started_at": "2026-07-29T10:00:00.000Z", "last_observed_at": "2026-07-29T10:00:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.516121435524078 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS44285" ], "affected_services": [], "affected_regions": [ "1829" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:17.450Z", "updated_at": "2026-10-03T23:50:17.735Z", "evidence": [ { "event_id": "ise-8938ed1507e647628608d45f", "stix_object_id": "incident--34deb1e3-4d4f-572f-b59b-ab10107cd23f", "platform": "ioda", "observed_at": "2026-07-29T10:00:00.000Z", "name": "SEFROYEKPARDAZENG-AS -- Tehran", "value": "geoasn/44285-1829", "content_hash": "fbd295acbf5ef053", "object_json": { "id": "incident--34deb1e3-4d4f-572f-b59b-ab10107cd23f", "name": "SEFROYEKPARDAZENG-AS -- Tehran", "type": "incident", "score": 328186.0465116279, "title": "SEFROYEKPARDAZENG-AS -- Tehran", "value": "geoasn/44285-1829", "method": "median", "location": "geoasn/44285-1829", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209600 } } ], "derivations": [] }, { "id": "ise-8dbb73c180c021e49dc1c3c5", "entity_type": "asn", "entity_key": "AS198154", "geography": "IR", "started_at": "2026-07-26T07:10:00.000Z", "last_observed_at": "2026-07-26T07:10:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 31, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.04000000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.26310021227115 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS198154" ], "affected_services": [], "affected_regions": [ "IR" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:14.156Z", "updated_at": "2026-10-03T23:50:14.981Z", "evidence": [ { "event_id": "ise-8dbb73c180c021e49dc1c3c5", "stix_object_id": "incident--abd75d41-699f-51a0-e048-302fd627d8c3", "platform": "ioda", "observed_at": "2026-07-26T07:10:00.000Z", "name": "parsabr -- Iran (Islamic Republic Of)", "value": "geoasn/198154-ir", "content_hash": "6374e48fba0e1d11", "object_json": { "id": "incident--abd75d41-699f-51a0-e048-302fd627d8c3", "name": "parsabr -- Iran (Islamic Republic Of)", "type": "incident", "score": 183272.7272727273, "title": "parsabr -- Iran (Islamic Republic Of)", "value": "geoasn/198154-ir", "method": "median", "location": "geoasn/198154-IR", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209600 } } ], "derivations": [] }, { "id": "ise-21d610054192e2b5eebdbba5", "entity_type": "asn", "entity_key": "AS204104", "geography": null, "started_at": "2026-07-28T14:30:00.000Z", "last_observed_at": "2026-07-28T14:30:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 4.7898461898619 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS204104" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:15.685Z", "updated_at": "2026-10-03T23:50:16.091Z", "evidence": [ { "event_id": "ise-21d610054192e2b5eebdbba5", "stix_object_id": "incident--f1df012a-34b5-5d5b-0f62-0d03747b96db", "platform": "ioda", "observed_at": "2026-07-28T14:30:00.000Z", "name": "AS204104 (GITI-AS)", "value": "asn/204104", "content_hash": "acda4bba145678fe", "object_json": { "id": "incident--f1df012a-34b5-5d5b-0f62-0d03747b96db", "name": "AS204104 (GITI-AS)", "type": "incident", "score": 61636.666666666664, "title": "AS204104 (GITI-AS)", "value": "asn/204104", "method": "median", "location": "asn/204104", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 961532 } } ], "derivations": [] }, { "id": "ise-220bda06a080a5dec0dc1c81", "entity_type": "asn", "entity_key": "AS51026", "geography": null, "started_at": "2026-07-28T14:30:00.000Z", "last_observed_at": "2026-07-28T14:30:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 6.140130350269066 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS51026" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:15.798Z", "updated_at": "2026-10-03T23:50:16.556Z", "evidence": [ { "event_id": "ise-220bda06a080a5dec0dc1c81", "stix_object_id": "incident--09011661-d505-542a-20fa-88b5cc944637", "platform": "ioda", "observed_at": "2026-07-28T14:30:00.000Z", "name": "AS51026 (MobinhostInfrastructure)", "value": "asn/51026", "content_hash": "5545202d2817d035", "object_json": { "id": "incident--09011661-d505-542a-20fa-88b5cc944637", "name": "AS51026 (MobinhostInfrastructure)", "type": "incident", "score": 1380797.638888889, "title": "AS51026 (MobinhostInfrastructure)", "value": "asn/51026", "method": "median", "location": "asn/51026", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1420249 } } ], "derivations": [] }, { "id": "ise-9c519d212d850ba213b184f9", "entity_type": "asn", "entity_key": "AS198154", "geography": null, "started_at": "2026-07-26T06:55:00.000Z", "last_observed_at": "2026-07-26T06:55:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.20758320755521 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS198154" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:14.147Z", "updated_at": "2026-10-03T23:50:14.974Z", "evidence": [ { "event_id": "ise-9c519d212d850ba213b184f9", "stix_object_id": "incident--8ded13d9-7644-5552-043b-5fd423914461", "platform": "ioda", "observed_at": "2026-07-26T06:55:00.000Z", "name": "AS198154 (parsabr)", "value": "asn/198154", "content_hash": "6ff9ceb9689710d2", "object_json": { "id": "incident--8ded13d9-7644-5552-043b-5fd423914461", "name": "AS198154 (parsabr)", "type": "incident", "score": 161280, "title": "AS198154 (parsabr)", "value": "asn/198154", "method": "median", "location": "asn/198154", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209600 } } ], "derivations": [] }, { "id": "ise-18ab34e93357d2648f1987fc", "entity_type": "asn", "entity_key": "AS206065", "geography": null, "started_at": "2026-07-25T22:30:00.000Z", "last_observed_at": "2026-07-25T22:30:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.ping-slash24.score" ], "signal_count": 1 }, "current_measurement": { "ioda.ping-slash24.score": 5.608332570940073 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS206065" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:13.987Z", "updated_at": "2026-10-03T23:50:14.778Z", "evidence": [ { "event_id": "ise-18ab34e93357d2648f1987fc", "stix_object_id": "incident--1cbcb01b-17f4-5126-4254-fa198cbf54c0", "platform": "ioda", "observed_at": "2026-07-25T22:30:00.000Z", "name": "AS206065 (FDI)", "value": "asn/206065", "content_hash": "f861be78dad9f4d8", "object_json": { "id": "incident--1cbcb01b-17f4-5126-4254-fa198cbf54c0", "name": "AS206065 (FDI)", "type": "incident", "score": 405818.1818181818, "title": "AS206065 (FDI)", "value": "asn/206065", "method": "median", "location": "asn/206065", "datasource": "ping-slash24", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209600 } } ], "derivations": [] }, { "id": "ise-5259af4d72b013be8037049e", "entity_type": "asn", "entity_key": "AS44285", "geography": null, "started_at": "2026-07-28T14:30:00.000Z", "last_observed_at": "2026-07-28T14:30:00.000Z", "status": "resolved", "classification": "UNKNOWN_DISRUPTION", "trajectory": "RESOLVED", "stress_score": 30, "confidence": 0, "components": { "anomaly": 0, "breadth": 0.020000000000000004, "persistence": 1, "corroboration": 0, "baseline_deviation": 1 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.6, "statistical_significance": 0 }, "baseline": { "signals": [ "ioda.bgp.score" ], "signal_count": 1 }, "current_measurement": { "ioda.bgp.score": 5.394668908437831 }, "deviation": { "max_anomaly": 0, "max_deviation": 1 }, "affected_asns": [ "AS44285" ], "affected_services": [], "affected_regions": [], "source_count": 1, "alternative_explanations": [ "single-source signal", "low statistical significance", "insufficient corroboration", "ambiguous geography", "isolated observation" ], "observation_count": 1, "ingestion_method": null, "first_seen": "2026-08-29T22:33:15.242Z", "updated_at": "2026-10-03T23:50:15.739Z", "evidence": [ { "event_id": "ise-5259af4d72b013be8037049e", "stix_object_id": "incident--0d3bd93a-286b-51b9-a7a7-49314c081d8c", "platform": "ioda", "observed_at": "2026-07-28T14:30:00.000Z", "name": "AS44285 (SEFROYEKPARDAZENG-AS)", "value": "asn/44285", "content_hash": "08aba26d5fc60c86", "object_json": { "id": "incident--0d3bd93a-286b-51b9-a7a7-49314c081d8c", "name": "AS44285 (SEFROYEKPARDAZENG-AS)", "type": "incident", "score": 248123.07692307694, "title": "AS44285 (SEFROYEKPARDAZENG-AS)", "value": "asn/44285", "method": "median", "location": "asn/44285", "datasource": "bgp", "outage_type": "connectivity-drop", "spec_version": "2.1", "duration_seconds": 1209600 } } ], "derivations": [] } ], "context": [], "audit": { "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.", "weights": { "anomaly": 0.3, "breadth": 0.2, "persistence": 0.15, "corroboration": 0.2, "baseline_deviation": 0.15 }, "derivation_ids": [], "observation_ids": [ "incident--573b8db3-c190-5fb0-118e-2c4fae22012f", "incident--6ace1b87-cfd1-5b3b-0465-5538e8fc203b", "incident--ce94b90a-6026-5cf2-9e84-3cfdb1ebd0b6", "incident--1b921b1d-f3a5-5239-14b0-c7788c7450d0", "incident--ce83e849-16eb-533f-7a2c-725cc3ed4500", "incident--50f767bf-1435-5cf2-cde0-1f2aa02f0769", "incident--48a441c1-c030-5424-80b1-e7919b07c525", "incident--ff1c33bb-f281-54fe-e213-bc0b2211fcb0", "incident--725fbab7-f54c-5abc-86cb-b388c04a8ca4", "incident--ebd67b84-b3f9-5634-3e71-c94490574318", "incident--a0a127ec-c80d-523f-5815-e0d3ab4ff2bc", "incident--a08a092e-01cf-5a7d-5329-4b95afb1153a", "incident--59b2dd04-459d-52a6-44c5-e4e92f0b9924", "incident--4f62f526-32c9-5ea6-ee0a-b21316170be8", "incident--780b1c85-b22f-5204-d683-84bd609d7d49", "incident--4c9623df-7df4-541e-6027-8882cc47dc57", "incident--02fd700b-4809-5e74-2608-d5df7fa551da", "incident--cf67058b-8e0b-5a08-eb9f-c49b1f28f591", "incident--68f9e182-8433-57f3-5391-7600521bcf0d", "incident--8ef1c6e9-410b-57a7-42bb-40993df1adfb", "incident--e7eea531-488d-544d-70aa-a52947abdeca", "incident--29326644-a114-54a4-97a7-9da77d7afb4d", "incident--b176d0a0-c774-523c-ffb4-cee000139401", "incident--642b9484-a5fe-5581-d094-2298f67dfc29", "incident--8e23c039-9c5c-529f-b945-275311d7e172", "incident--ed7e239b-c442-5b8e-53ac-9802a28b048e", "incident--aff776c2-ccdf-5579-b264-0c324ae45235", "incident--7d454ac1-3e7a-5793-62fd-feb1c2ba2ff7", "incident--1bcb955d-cc60-5ff3-7559-7b4d7edfb188", "incident--3f3d9f5e-fea9-5c19-44bb-5cc9ac2bdbbf", "incident--759642e6-658f-5ed5-fbd5-063f4d7326c0", "incident--746e8403-8312-58eb-468c-a544c49fe3e3", "incident--9eacc482-3c3b-5b27-bee2-24c9db1d70ce", "incident--e5f1079b-5871-50b2-b1af-0e0e78c2b49a", "incident--ebcf4c82-8393-5791-b06f-ba967dd153a5", "incident--4d29f9ec-7f41-56eb-3662-d8d04840f508", "incident--9ba5e885-dede-5cb0-833b-9b5823146794", "incident--4bb21001-2ffd-5a5b-c919-c662dcc6caf8", "incident--726c1eac-f0b1-5f98-d806-8ea08bd4dba7", "incident--1dcbee31-45cf-5554-3366-5882c4b2de5c", "incident--33ceff7c-9e71-5cb1-7ba6-0cb81443d95b", "incident--84b82fd0-8da3-5953-b60b-a85faa64e5e6", "incident--e2a530ec-473d-5e96-4321-ee7481e52c84", "incident--f289910e-4c20-5ede-2bd4-7be262c17ded", "incident--b5877e5c-7187-5ddd-1cb1-37bf2d631128", "incident--34deb1e3-4d4f-572f-b59b-ab10107cd23f", "incident--abd75d41-699f-51a0-e048-302fd627d8c3", "incident--f1df012a-34b5-5d5b-0f62-0d03747b96db", "incident--09011661-d505-542a-20fa-88b5cc944637", "incident--8ded13d9-7644-5552-043b-5fd423914461", "incident--1cbcb01b-17f4-5126-4254-fa198cbf54c0", "incident--0d3bd93a-286b-51b9-a7a7-49314c081d8c" ], "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score." } }