{"copyright":"This data is Copyright (c) 2021-2026 Georgia Tech Research Corporation. All Rights Reserved. This data is provided for academic and educational use only; commercial use and bulk scraping are prohibited. Your use of this API is subject to our Acceptable Use Policy which can be found at https://grip.inetintel.cc.gatech.edu/aup/","data":[{"asinfo":{"206910":{"asrank":{"asn":"206910","asnDegree":{"customer":0,"peer":2,"provider":4},"asnName":"BESTCONNECT-AS","organization":{"country":{"iso":"PL"},"orgId":"ORG-JCTA3-RIPE","orgName":"Janusz Ciurus trading as Bestconnect"},"rank":12794},"hegemony":3.2756668199814076e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-invalid-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"single-ip"},{"count":1,"name":"rpki-some-oldcomer-invalid-roa"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0015366077423095703,"proc_time_tagger":0.006366252899169922,"total_tags_cnt":28},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670700-206910","insert_ts":1789671983,"last_modified_ts":1789671983,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"185.172.86.164/32","super_pfx":"185.172.84.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["206910"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["206910"],"prefixes":["185.172.86.164/32","185.172.84.0/22"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["206910"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789670700},{"asinfo":{"17294":{"asrank":{"asn":"17294","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"BI-631","organization":{"country":{"iso":"US"},"orgId":"BI-631-ARIN","orgName":"Build io, Inc."},"rank":12794},"hegemony":3.2756668199814076e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":2,"name":"irr-TC-all-oldcomer-no-record"},{"count":2,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":2,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":2,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":2,"name":"irr-REACH-all-oldcomer-no-record"},{"count":2,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":2,"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"count":2,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":2,"name":"rpki-all-oldcomer-invalid-roa"},{"count":2,"name":"irr-RADB-all-oldcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":2,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":2,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":2,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":2,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":2,"name":"outdated-info"},{"count":2,"name":"sub-path-longer"},{"count":2,"name":"single-ip"},{"count":2,"name":"rpki-some-oldcomer-invalid-roa"},{"count":2,"name":"irr-BELL-all-oldcomer-no-record"},{"count":2,"name":"long-prefix"}],"pfx_events_cnt":2,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.003299236297607422,"proc_time_tagger":0.004168272018432617,"total_tags_cnt":28},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670700-17294","insert_ts":1789671983,"last_modified_ts":1789671983,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"66.71.205.131/32","super_pfx":"66.71.204.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]},{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"66.71.205.132/32","super_pfx":"66.71.204.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["17294"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["17294"],"prefixes":["66.71.204.0/22","66.71.205.132/32","66.71.205.131/32"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["17294"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789670700},{"asinfo":{"263767":{"asrank":{"asn":"263767","asnDegree":{"customer":10,"peer":1,"provider":3},"asnName":"","organization":{"country":{"iso":"VE"},"orgId":"@aut-263767-LACNIC","orgName":"CORPORACI\u00d3N GALA IT, C.A."},"rank":2201},"hegemony":3.951783899288073e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.04487013816833496,"proc_time_tagger":0.013982772827148438,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670700-263767","insert_ts":1789671983,"last_modified_ts":1789671983,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"38.137.234.0/24","super_pfx":"38.137.234.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["263767"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["263767"],"prefixes":["38.137.234.0/24","38.137.234.0/23"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["263767"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer","hegemony-valley-paths"]]},"view_ts":1789670700},{"asinfo":{"52695":{"asrank":{"asn":"52695","asnDegree":{"customer":7,"peer":26,"provider":4},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-52695-LACNIC","orgName":"NETFACIL LTDA ME"},"rank":2826},"hegemony":1.7947640294924506e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":12,"name":"irr-TC-all-oldcomer-no-record"},{"count":12,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":12,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":12,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":12,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":12,"name":"irr-REACH-all-oldcomer-no-record"},{"count":12,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":12,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":12,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":12,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":12,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":12,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":12,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":12,"name":"no-common-hops-sub-pfx"},{"count":12,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":12,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":12,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":12,"name":"rpki-all-oldcomer-unknown-roa"},{"count":12,"name":"sub-path-equal"},{"count":12,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":12,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":12,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":12,"name":"outdated-info"},{"count":12,"name":"no-common-hops-super-pfx"},{"count":12,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":12,"name":"rpki-some-oldcomer-unknown-roa"},{"count":12,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":12,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.010706186294555664,"proc_time_tagger":0.05568695068359375,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670400-52695","insert_ts":1789671681,"last_modified_ts":1789671681,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.73.171.0/24","super_pfx":"177.73.168.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"138.99.191.0/24","super_pfx":"138.99.188.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"138.99.189.0/24","super_pfx":"138.99.188.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.73.174.0/24","super_pfx":"177.73.168.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.73.169.0/24","super_pfx":"177.73.168.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.73.173.0/24","super_pfx":"177.73.168.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.73.172.0/24","super_pfx":"177.73.168.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"138.99.190.0/24","super_pfx":"138.99.188.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.73.175.0/24","super_pfx":"177.73.168.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"138.99.188.0/24","super_pfx":"138.99.188.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.73.170.0/24","super_pfx":"177.73.168.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.73.168.0/24","super_pfx":"177.73.168.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["52695"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["52695"],"prefixes":["177.73.170.0/24","177.73.169.0/24","177.73.174.0/24","177.73.173.0/24","177.73.175.0/24","177.73.172.0/24","138.99.188.0/24","138.99.188.0/22","177.73.171.0/24","177.73.168.0/24","138.99.189.0/24","138.99.190.0/24","177.73.168.0/21","138.99.191.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["52695"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[[]]},"view_ts":1789670400},{"asinfo":{"53051":{"asrank":{"asn":"53051","asnDegree":{"customer":0,"peer":25,"provider":3},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-53051-LACNIC","orgName":"Com NT TELECOM LTDA - ME"},"rank":12794},"hegemony":1.3102352710608292e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":4,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":4,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":4,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":4,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":4,"name":"irr-REACH-all-oldcomer-no-record"},{"count":4,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":4,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":4,"name":"irr-TC-all-oldcomer-more-specific-record"},{"count":4,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-RADB-all-oldcomer-no-record"},{"count":4,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":4,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":4,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":4,"name":"rpki-all-oldcomer-valid-roa"},{"count":4,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":4,"name":"no-common-hops-sub-pfx"},{"count":4,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":4,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":4,"name":"sub-path-equal"},{"count":4,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":4,"name":"rpki-some-oldcomer-valid-roa"},{"count":4,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":4,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":4,"name":"outdated-info"},{"count":4,"name":"no-common-hops-super-pfx"},{"count":4,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":4,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-exact-record"}],"pfx_events_cnt":4,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0023183822631835938,"proc_time_tagger":0.015184640884399414,"total_tags_cnt":28},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670400-53051","insert_ts":1789671681,"last_modified_ts":1789671681,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"187.84.28.0/22","super_pfx":"187.84.24.0/21","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"187.84.20.0/22","super_pfx":"187.84.16.0/21","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"187.84.16.0/22","super_pfx":"187.84.16.0/21","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"187.84.24.0/22","super_pfx":"187.84.24.0/21","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["53051"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["53051"],"prefixes":["187.84.24.0/22","187.84.16.0/22","187.84.16.0/21","187.84.28.0/22","187.84.20.0/22","187.84.24.0/21"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["53051"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[[]]},"view_ts":1789670400},{"asinfo":{"269000":{"asrank":{"asn":"269000","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-269000-LACNIC","orgName":"JG TELECOM COM. E SERVS. LTDA"},"rank":12794},"hegemony":3.2756668199814076e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":4,"name":"irr-TC-all-oldcomer-no-record"},{"count":4,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":4,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":4,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":4,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":4,"name":"irr-REACH-all-oldcomer-no-record"},{"count":4,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":4,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":4,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":4,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":4,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":4,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":4,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":4,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":4,"name":"rpki-all-oldcomer-unknown-roa"},{"count":4,"name":"sub-path-equal"},{"count":4,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":4,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":4,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":4,"name":"outdated-info"},{"count":4,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":4,"name":"rpki-some-oldcomer-unknown-roa"},{"count":4,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":4,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0022153854370117188,"proc_time_tagger":0.020478487014770508,"total_tags_cnt":25},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670400-269000","insert_ts":1789671681,"last_modified_ts":1789671681,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"45.177.219.0/24","super_pfx":"45.177.216.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"45.177.218.0/24","super_pfx":"45.177.216.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"45.177.217.0/24","super_pfx":"45.177.216.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"45.177.216.0/24","super_pfx":"45.177.216.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["269000"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["269000"],"prefixes":["45.177.218.0/24","45.177.217.0/24","45.177.219.0/24","45.177.216.0/22","45.177.216.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["269000"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[[]]},"view_ts":1789670400},{"asinfo":{"273774":{"asrank":{"asn":"273774","asnDegree":{"customer":0,"peer":27,"provider":2},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-273774-LACNIC","orgName":"MAXDATA SISTEMAS LTDA"},"rank":12794},"hegemony":3.275588177652073e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":4,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":4,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":4,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":4,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":4,"name":"irr-REACH-all-oldcomer-no-record"},{"count":4,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":4,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":4,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":4,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":4,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":4,"name":"rpki-all-oldcomer-valid-roa"},{"count":4,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":4,"name":"no-common-hops-sub-pfx"},{"count":4,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":4,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":4,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-TC-all-oldcomer-exact-record"},{"count":4,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":4,"name":"rpki-some-oldcomer-valid-roa"},{"count":4,"name":"sub-path-shorter"},{"count":4,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":4,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":4,"name":"outdated-info"},{"count":4,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":4,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":4,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.001956462860107422,"proc_time_tagger":0.013255596160888672,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670400-273774","insert_ts":1789671681,"last_modified_ts":1789671681,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"45.177.251.0/24","super_pfx":"45.177.250.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"45.177.249.0/24","super_pfx":"45.177.248.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"45.177.250.0/24","super_pfx":"45.177.250.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"45.177.248.0/24","super_pfx":"45.177.248.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["273774"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["273774"],"prefixes":["45.177.249.0/24","45.177.250.0/23","45.177.248.0/24","45.177.251.0/24","45.177.248.0/23","45.177.250.0/24"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["273774"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789670400},{"asinfo":{"265305":{"asrank":{"asn":"265305","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-265305-LACNIC","orgName":"INTERMIRA INFORMATICA E TELECOMUNICA\u00c7\u00d5ES LTDA-ME"},"rank":12794},"hegemony":3.2756668199814076e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":4,"name":"irr-TC-all-oldcomer-no-record"},{"count":4,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":4,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":4,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":4,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":4,"name":"irr-REACH-all-oldcomer-no-record"},{"count":4,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":4,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":4,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":4,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":4,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":4,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":4,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":4,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":4,"name":"rpki-all-oldcomer-unknown-roa"},{"count":4,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":4,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":4,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":4,"name":"outdated-info"},{"count":4,"name":"sub-path-longer"},{"count":4,"name":"no-common-hops-super-pfx"},{"count":4,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":4,"name":"rpki-some-oldcomer-unknown-roa"},{"count":4,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":4,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.002374887466430664,"proc_time_tagger":0.011671304702758789,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670400-265305","insert_ts":1789671681,"last_modified_ts":1789671681,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"168.121.11.0/24","super_pfx":"168.121.8.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"168.121.8.0/24","super_pfx":"168.121.8.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"168.121.10.0/24","super_pfx":"168.121.8.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"168.121.9.0/24","super_pfx":"168.121.8.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["265305"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["265305"],"prefixes":["168.121.8.0/22","168.121.10.0/24","168.121.8.0/24","168.121.9.0/24","168.121.11.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["265305"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer"]]},"view_ts":1789670400},{"asinfo":{"44244":{"asrank":{"asn":"44244","asnDegree":{"customer":1,"peer":0,"provider":1},"asnName":"IranCell-AS","organization":{"country":{"iso":"IR"},"orgId":"ORG-ICSA1-RIPE","orgName":"Iran Cell Service and Communication Company"},"rank":7805},"hegemony":0.0003943083934552619}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-manrs-member"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004925727844238281,"proc_time_tagger":0.004643678665161133,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670400-44244","insert_ts":1789671681,"last_modified_ts":1789671681,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"5.119.70.0/24","super_pfx":"5.119.64.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["44244"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["44244"],"prefixes":["5.119.70.0/24","5.119.64.0/20"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["44244"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789670400},{"asinfo":{"262364":{"asrank":{"asn":"262364","asnDegree":{"customer":0,"peer":26,"provider":2},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-262364-LACNIC","orgName":"VIASATDIGITAL TELECOM LTDA"},"rank":12794},"hegemony":6.551333639962815e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":3,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":3,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":3,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":3,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":3,"name":"irr-REACH-all-oldcomer-no-record"},{"count":3,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":3,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":3,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":3,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":3,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":3,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":3,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":3,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":3,"name":"rpki-all-oldcomer-unknown-roa"},{"count":2,"name":"irr-TC-all-oldcomer-exact-record"},{"count":3,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":3,"name":"outdated-info"},{"count":2,"name":"sub-path-longer"},{"count":2,"name":"no-common-hops-super-pfx"},{"count":3,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":3,"name":"rpki-some-oldcomer-unknown-roa"},{"count":3,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-more-specific-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"no-common-hops-sub-pfx"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"sub-path-shorter"}],"pfx_events_cnt":3,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0016956329345703125,"proc_time_tagger":0.015531063079833984,"total_tags_cnt":31},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670400-262364","insert_ts":1789671681,"last_modified_ts":1789671681,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.128.32.0/22","super_pfx":"177.128.32.0/21","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.128.36.0/22","super_pfx":"177.128.32.0/21","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.128.34.0/24","super_pfx":"177.128.32.0/22","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["262364"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["262364"],"prefixes":["177.128.34.0/24","177.128.32.0/21","177.128.36.0/22","177.128.32.0/22"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["262364"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer"]]},"view_ts":1789670400},{"asinfo":{"35491":{"asrank":{"asn":"35491","asnDegree":{"customer":2,"peer":4,"provider":4},"asnName":"TPNETS","organization":{"country":{"iso":"PL"},"orgId":"ORG-TA165-RIPE","orgName":"TPnets.com Sp. z o.o."},"rank":5958},"hegemony":2.535334886728823e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-invalid-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"sub-path-equal"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"rpki-some-oldcomer-invalid-roa"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004048347473144531,"proc_time_tagger":0.008350133895874023,"total_tags_cnt":28},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670400-35491","insert_ts":1789671681,"last_modified_ts":1789671681,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"46.148.79.149/32","super_pfx":"46.148.64.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["35491"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["35491"],"prefixes":["46.148.79.149/32","46.148.64.0/20"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["35491"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789670400},{"asinfo":{"1540":{"asrank":{"asn":"1540","asnDegree":{"customer":0,"peer":4,"provider":1},"asnName":"DNIC-ASBLK-01534-01546","organization":{"country":{"iso":"US"},"orgId":"HEADQU-3-ARIN","orgName":"Headquarters, USAISC"},"rank":12794},"hegemony":0.004934663807321587}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"superpaths-include-subpaths"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005145072937011719,"proc_time_tagger":0.0031087398529052734,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670400-1540","insert_ts":1789671681,"last_modified_ts":1789671681,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"143.74.16.0/24","super_pfx":"143.74.16.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}]}],"summary":{"ases":["1540"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["1540"],"prefixes":["143.74.16.0/23","143.74.16.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}],"tr_worthy":false,"victims":["1540"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789670400},{"asinfo":{"1540":{"asrank":{"asn":"1540","asnDegree":{"customer":0,"peer":4,"provider":1},"asnName":"DNIC-ASBLK-01534-01546","organization":{"country":{"iso":"US"},"orgId":"HEADQU-3-ARIN","orgName":"Headquarters, USAISC"},"rank":12794},"hegemony":0.004934663807321587},"721":{"asrank":{"asn":"721","asnDegree":{"customer":3,"peer":0,"provider":1},"asnName":"DNIC-ASBLK-00721-00726","organization":{"country":{"iso":"US"},"orgId":"USDDD-ARIN","orgName":"United States Department of Defense (DoD)"},"rank":430},"hegemony":0.021555623144874463}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"oldcomer-newcomer-all-siblings"},{"count":1,"name":"oldcomer-newcomer-some-siblings"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0003809928894042969,"proc_time_tagger":0.025070667266845703,"total_tags_cnt":69},"event_type":"submoas","finished_ts":null,"id":"submoas-1789670400-721=1540","insert_ts":1789671680,"last_modified_ts":1789671680,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10},{"confidence":87,"explanation":"all newcomer origins are siblings with at least one customer of a potential victim","inference_id":"all-newcomers-siblings-with-oldcomers-customer","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"143.74.16.0/23","super_pfx":"143.74.0.0/16","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"hegemony-valley-paths"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"some-newcomers-are-rel-downstream"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"}]}],"summary":{"ases":["721","1540"],"attackers":["1540"],"inference_result":{"inferences":[{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1}],"primary_inference":{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1}},"newcomers":["721","1540"],"prefixes":["143.74.16.0/23","143.74.0.0/16"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"hegemony-valley-paths"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"all-origins-same-country"},{"name":"some-newcomers-are-rel-downstream"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["721"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789670400},{"asinfo":{"12741":{"asrank":{"asn":"12741","asnDegree":{"customer":427,"peer":716,"provider":3},"asnName":"AS-NETIA","organization":{"country":{"iso":"PL"},"orgId":"ORG-NTS2-RIPE","orgName":"Netia SA"},"rank":100},"hegemony":0.0006691438080987418},"198000":{"asrank":{"asn":"198000","asnDegree":{"customer":0,"peer":2,"provider":2},"asnName":"SMPOLNOC","organization":{"country":{"iso":"PL"},"orgId":"ORG-SM27-RIPE","orgName":"Spoldzielnia Mieszkaniowa \"Polnoc\""},"rank":12794},"hegemony":2.948100137983267e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"not-previously-announced-by-any-newcomer"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"some-victims-stub-ases"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-upstream"},{"count":1,"name":"long-prefix"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-providers"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-providers"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"some-newcomers-are-rel-upstream"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"all-victims-stub-ases"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.00042557716369628906,"proc_time_tagger":0.02085590362548828,"total_tags_cnt":68},"event_type":"submoas","finished_ts":null,"id":"submoas-1789670400-198000=12741","insert_ts":1789671680,"last_modified_ts":1789671681,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":91,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s). Probably, they are providing services to their customers (e.g., blackholing)","inference_id":"all-newcomers-providers","labels":["legitimate"],"suspicion_level":20},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10},{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"185.48.169.141/32","super_pfx":"185.48.168.0/22","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"single-ip"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"single-peer-on-attacker-path"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"long-prefix"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"all-victims-stub-ases"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]}],"summary":{"ases":["12741","198000"],"attackers":["12741"],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["12741","198000"],"prefixes":["185.48.168.0/22","185.48.169.141/32"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"some-victims-stub-ases"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"some-newcomers-are-providers"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"all-victims-stub-ases"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"single-ip"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"all-newcomers-are-rel-upstream"},{"name":"long-prefix"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["198000"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789670400},{"asinfo":{"11280":{"asrank":{"asn":"11280","asnDegree":{"customer":3,"peer":22,"provider":3},"asnName":"SNAPPYDSL-ASN1","organization":{"country":{"iso":"US"},"orgId":"COFS-ARIN","orgName":"SNAPPYDSL.NET"},"rank":4894},"hegemony":6.061384335857524e-06},"174":{"asrank":{"asn":"174","asnDegree":{"customer":6472,"peer":85,"provider":0},"asnName":"COGENT-174","organization":{"country":{"iso":"US"},"orgId":"COGC-ARIN","orgName":"Cogent Communications, LLC"},"rank":4},"hegemony":0.08410160802110535}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-manrs-member"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"submoas-causing-moas-subpfx"},{"count":1,"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-some-newcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-some-newcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"some-newcomers-are-rel-upstream"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-some-newcomer-exact-record"},{"count":1,"name":"irr-ARIN-some-newcomer-more-specific-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"some-newcomers-routeviews-peer"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0006835460662841797,"proc_time_tagger":0.04506111145019531,"total_tags_cnt":69},"event_type":"submoas","finished_ts":null,"id":"submoas-1789670400-174=11280_174","insert_ts":1789671681,"last_modified_ts":1789671681,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":65,"explanation":"some newcomers are more specific than their IRR records","inference_id":"some-newcomers-more-specific-record","labels":["legitimate"],"suspicion_level":40},{"confidence":68,"explanation":"all newcomer(s) are downstream customer(s) of the oldcomer(s)","inference_id":"all-newcomers-customers-rel-downstream","labels":["legitimate"],"suspicion_level":20},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":70,"explanation":"some newcomers have exact IRR records","inference_id":"some-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":20},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"208.30.14.0/23","super_pfx":"208.0.0.0/11","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"submoas-causing-moas-subpfx"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-some-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ALTDB-some-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"hegemony-valley-paths"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-ALTDB-some-newcomer-exact-record"},{"name":"irr-ARIN-some-newcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"some-newcomers-routeviews-peer"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"some-newcomers-are-rel-downstream"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]}],"summary":{"ases":["11280","174"],"attackers":["11280","174"],"inference_result":{"inferences":[{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}},"newcomers":["11280","174"],"prefixes":["208.0.0.0/11","208.30.14.0/23"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"submoas-causing-moas-subpfx"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-some-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"hegemony-valley-paths"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-ALTDB-some-newcomer-exact-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"some-newcomers-are-rel-downstream"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-some-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-ARIN-some-newcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"some-newcomers-routeviews-peer"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["174"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789670400},{"asinfo":{"270757":{"asrank":{"asn":"270757","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-270757-LACNIC","orgName":"VIP NET PROVEDOR DE SERVICOS DE INTERNET LTDA"},"rank":12794},"hegemony":4.094485222065092e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":6,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":6,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":6,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":6,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":6,"name":"irr-REACH-all-oldcomer-no-record"},{"count":6,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":6,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":6,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":6,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":6,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":6,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":6,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":6,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":6,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":6,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":6,"name":"rpki-all-oldcomer-unknown-roa"},{"count":3,"name":"sub-path-equal"},{"count":6,"name":"irr-TC-all-oldcomer-exact-record"},{"count":6,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":6,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":6,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":6,"name":"outdated-info"},{"count":6,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":6,"name":"rpki-some-oldcomer-unknown-roa"},{"count":6,"name":"irr-BELL-all-oldcomer-no-record"},{"count":2,"name":"sub-path-longer"},{"count":2,"name":"no-common-hops-super-pfx"},{"count":1,"name":"no-common-hops-sub-pfx"},{"count":1,"name":"sub-path-shorter"}],"pfx_events_cnt":6,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.007565736770629883,"proc_time_tagger":0.04093432426452637,"total_tags_cnt":29},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670100-270757","insert_ts":1789671379,"last_modified_ts":1789671379,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"200.39.132.0/24","super_pfx":"200.39.132.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"200.39.135.0/24","super_pfx":"200.39.134.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"200.39.134.0/24","super_pfx":"200.39.134.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"200.39.132.0/23","super_pfx":"200.39.132.0/22","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"200.39.134.0/23","super_pfx":"200.39.132.0/22","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"200.39.133.0/24","super_pfx":"200.39.132.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["270757"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["270757"],"prefixes":["200.39.132.0/22","200.39.134.0/24","200.39.132.0/24","200.39.132.0/23","200.39.133.0/24","200.39.135.0/24","200.39.134.0/23"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["270757"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer"],[]]},"view_ts":1789670100},{"asinfo":{"17294":{"asrank":{"asn":"17294","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"BI-631","organization":{"country":{"iso":"US"},"orgId":"BI-631-ARIN","orgName":"Build io, Inc."},"rank":12794},"hegemony":3.2756668199814076e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":2,"name":"irr-TC-all-oldcomer-no-record"},{"count":2,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":2,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":2,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":2,"name":"irr-REACH-all-oldcomer-no-record"},{"count":2,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":2,"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"count":2,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":2,"name":"rpki-all-oldcomer-invalid-roa"},{"count":2,"name":"irr-RADB-all-oldcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":2,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":2,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":2,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":2,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":2,"name":"outdated-info"},{"count":2,"name":"sub-path-longer"},{"count":2,"name":"single-ip"},{"count":2,"name":"rpki-some-oldcomer-invalid-roa"},{"count":2,"name":"irr-BELL-all-oldcomer-no-record"},{"count":2,"name":"long-prefix"}],"pfx_events_cnt":2,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.002183198928833008,"proc_time_tagger":0.005003690719604492,"total_tags_cnt":28},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670100-17294","insert_ts":1789671379,"last_modified_ts":1789671379,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"66.71.205.81/32","super_pfx":"66.71.204.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]},{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"66.71.205.130/32","super_pfx":"66.71.204.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["17294"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["17294"],"prefixes":["66.71.205.81/32","66.71.204.0/22","66.71.205.130/32"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["17294"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789670100},{"asinfo":{"265447":{"asrank":{"asn":"265447","asnDegree":{"customer":0,"peer":1,"provider":7},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-265447-LACNIC","orgName":"Hilink Comunica\u00e7\u00f5es"},"rank":12794},"hegemony":9.826341152625054e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0007526874542236328,"proc_time_tagger":0.003577709197998047,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670100-265447","insert_ts":1789671379,"last_modified_ts":1789671379,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"170.238.36.237/32","super_pfx":"170.238.36.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["265447"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["265447"],"prefixes":["170.238.36.237/32","170.238.36.0/23"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["265447"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789670100},{"asinfo":{"199524":{"asrank":{"asn":"199524","asnDegree":{"customer":93,"peer":4921,"provider":46},"asnName":"GCORE","organization":{"country":{"iso":"LU"},"orgId":"ORG-WIG6-RIPE","orgName":"G-Core Labs S.A."},"rank":372},"hegemony":8.20781106889173e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":2,"name":"all-newcomers-ris-peer"},{"count":2,"name":"irr-TC-all-oldcomer-no-record"},{"count":2,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":2,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":2,"name":"some-newcomers-dps-asn"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"count":2,"name":"irr-REACH-all-oldcomer-no-record"},{"count":2,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":2,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"has-dps-asn"},{"count":2,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":2,"name":"rpki-all-oldcomer-invalid-roa"},{"count":2,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":2,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":2,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":2,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":2,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":2,"name":"no-common-hops-sub-pfx"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":2,"name":"due-to-dps-asn"},{"count":2,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":2,"name":"sub-path-equal"},{"count":2,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":2,"name":"all-newcomers-dps-asn"},{"count":2,"name":"outdated-info"},{"count":2,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":2,"name":"no-common-hops-super-pfx"},{"count":2,"name":"single-ip"},{"count":2,"name":"rpki-some-oldcomer-invalid-roa"},{"count":2,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":2,"name":"all-newcomers-routeviews-peer"},{"count":2,"name":"irr-BELL-all-oldcomer-no-record"},{"count":2,"name":"long-prefix"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"}],"pfx_events_cnt":2,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0018587112426757812,"proc_time_tagger":0.006273746490478516,"total_tags_cnt":38},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670100-199524","insert_ts":1789671379,"last_modified_ts":1789671379,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"5.252.26.220/32","super_pfx":"5.252.26.0/24","tags":[{"name":"all-newcomers-ris-peer"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"some-newcomers-dps-asn"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"has-dps-asn"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"due-to-dps-asn"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-dps-asn"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"no-common-hops-super-pfx"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-routeviews-peer"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]},{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"93.114.56.212/32","super_pfx":"93.114.56.0/24","tags":[{"name":"all-newcomers-ris-peer"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"some-newcomers-dps-asn"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"has-dps-asn"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"due-to-dps-asn"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-dps-asn"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"no-common-hops-super-pfx"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-routeviews-peer"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["199524"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["199524"],"prefixes":["5.252.26.0/24","5.252.26.220/32","93.114.56.212/32","93.114.56.0/24"],"tags":[{"name":"all-newcomers-ris-peer"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"some-newcomers-dps-asn"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"has-dps-asn"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"due-to-dps-asn"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-dps-asn"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"no-common-hops-super-pfx"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-routeviews-peer"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["199524"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789670100},{"asinfo":{"60404":{"asrank":{"asn":"60404","asnDegree":{"customer":6,"peer":72,"provider":4},"asnName":"Liteserver","organization":{"country":{"iso":"NL"},"orgId":"ORG-TIGB3-RIPE","orgName":"The Infrastructure Group B.V."},"rank":3370},"hegemony":8.767707078944489e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"no-common-hops-sub-pfx"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"sub-path-equal"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"no-common-hops-super-pfx"},{"count":1,"name":"irr-RIPE-all-oldcomer-exact-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0009520053863525391,"proc_time_tagger":0.0059320926666259766,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670100-60404","insert_ts":1789671379,"last_modified_ts":1789671379,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"5.2.64.0/24","super_pfx":"5.2.64.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-RIPE-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["60404"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["60404"],"prefixes":["5.2.64.0/20","5.2.64.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-RIPE-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["60404"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[[]]},"view_ts":1789670100},{"asinfo":{"262364":{"asrank":{"asn":"262364","asnDegree":{"customer":0,"peer":26,"provider":2},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-262364-LACNIC","orgName":"VIASATDIGITAL TELECOM LTDA"},"rank":12794},"hegemony":6.551333639962815e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-more-specific-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"no-common-hops-sub-pfx"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"sub-path-equal"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"no-common-hops-super-pfx"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0009610652923583984,"proc_time_tagger":0.005326271057128906,"total_tags_cnt":28},"event_type":"defcon","finished_ts":null,"id":"defcon-1789670100-262364","insert_ts":1789671379,"last_modified_ts":1789671379,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.128.34.0/24","super_pfx":"177.128.32.0/21","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["262364"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["262364"],"prefixes":["177.128.34.0/24","177.128.32.0/21"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["262364"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["hegemony-valley-paths"]]},"view_ts":1789670100},{"asinfo":{"198000":{"asrank":{"asn":"198000","asnDegree":{"customer":0,"peer":2,"provider":2},"asnName":"SMPOLNOC","organization":{"country":{"iso":"PL"},"orgId":"ORG-SM27-RIPE","orgName":"Spoldzielnia Mieszkaniowa \"Polnoc\""},"rank":12794},"hegemony":2.948100137983267e-06},"20804":{"asrank":{"asn":"20804","asnDegree":{"customer":292,"peer":198,"provider":3},"asnName":"ASN-TELENERGO","organization":{"country":{"iso":"PL"},"orgId":"ORG-TS16-RIPE","orgName":"Exatel S.A."},"rank":108},"hegemony":0.00021337751873116607}},"debug":{},"duration":300,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-upstream"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-upstream"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"has-dps-asn"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"all-victims-stub-ases"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"some-victims-stub-ases"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-providers"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"due-to-dps-asn"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-providers"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-dps-asn"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0007493495941162109,"proc_time_tagger":0.01826786994934082,"total_tags_cnt":70},"event_type":"submoas","finished_ts":1789670400,"id":"submoas-1789670100-198000=20804","insert_ts":1789671379,"last_modified_ts":1789671681,"pfx_events":[{"finished_ts":1789670400,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5},{"confidence":91,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s). Probably, they are providing services to their customers (e.g., blackholing)","inference_id":"all-newcomers-providers","labels":["legitimate"],"suspicion_level":20},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10},{"confidence":60,"explanation":"The event is caused by ASNs performing DoS Protection Services (DPS)","inference_id":"dps-asn","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"185.48.169.141/32","super_pfx":"185.48.168.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"has-dps-asn"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"all-victims-stub-ases"},{"name":"single-ip"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"some-victims-stub-ases"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"due-to-dps-asn"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"some-newcomers-dps-asn"}]}],"summary":{"ases":["198000","20804"],"attackers":["20804"],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["198000","20804"],"prefixes":["185.48.168.0/22","185.48.169.141/32"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"has-dps-asn"},{"name":"outdated-info"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"some-newcomers-are-providers"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"all-origins-same-country"},{"name":"due-to-dps-asn"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"some-newcomers-dps-asn"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"all-victims-stub-ases"},{"name":"single-ip"},{"name":"some-victims-stub-ases"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"}],"tr_worthy":false,"victims":["198000"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789670100},{"asinfo":{"152565":{"asrank":{"asn":"152565","asnDegree":{"customer":17,"peer":6,"provider":6},"asnName":"JOYSVC-AS-IN","organization":{"country":{"iso":"IN"},"orgId":"@aut-152565-APNIC","orgName":"JOY SERVICES"},"rank":1327},"hegemony":1.3135761203801701e-05},"154115":{"asrank":{"asn":"154115","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"KANHALABSORG-AS-IN","organization":{"country":{"iso":"IN"},"orgId":"ORG-KA67-AP-APNIC","orgName":"KANHALABS-ORG"},"rank":12794},"hegemony":5.732279310891128e-07}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-upstream"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-upstream"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"all-victims-stub-ases"},{"count":1,"name":"not-previously-announced-by-any-newcomer"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"some-victims-stub-ases"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-providers"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-providers"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"single-rel-upstream-chain"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0007681846618652344,"proc_time_tagger":0.013254880905151367,"total_tags_cnt":68},"event_type":"submoas","finished_ts":1789670700,"id":"submoas-1789670100-154115=152565","insert_ts":1789671379,"last_modified_ts":1789671983,"pfx_events":[{"finished_ts":1789670700,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":91,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s). Probably, they are providing services to their customers (e.g., blackholing)","inference_id":"all-newcomers-providers","labels":["legitimate"],"suspicion_level":20},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10},{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"103.109.84.112/32","super_pfx":"103.109.84.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"outdated-info"},{"name":"all-victims-stub-ases"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"single-ip"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"some-victims-stub-ases"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"all-newcomer-pfxs"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"single-rel-upstream-chain"}]}],"summary":{"ases":["152565","154115"],"attackers":["152565"],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["152565","154115"],"prefixes":["103.109.84.112/32","103.109.84.0/22"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"outdated-info"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"some-newcomers-are-providers"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"all-origins-same-country"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"all-victims-stub-ases"},{"name":"single-ip"},{"name":"some-victims-stub-ases"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"single-rel-upstream-chain"}],"tr_worthy":false,"victims":["154115"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789670100},{"asinfo":{"31252":{"asrank":{"asn":"31252","asnDegree":{"customer":16,"peer":12,"provider":4},"asnName":"STARNET-AS","organization":{"country":{"iso":"MD"},"orgId":"ORG-SSS72-RIPE","orgName":"StarNet Solutii SRL"},"rank":1672},"hegemony":5.563690786182313e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":7,"name":"irr-TC-all-oldcomer-no-record"},{"count":7,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":7,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":7,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":7,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":7,"name":"irr-REACH-all-oldcomer-no-record"},{"count":7,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":7,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":7,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":7,"name":"irr-RADB-all-oldcomer-no-record"},{"count":7,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":7,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":7,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":7,"name":"rpki-all-oldcomer-valid-roa"},{"count":7,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":7,"name":"no-common-hops-sub-pfx"},{"count":7,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":7,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":7,"name":"sub-path-equal"},{"count":7,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":7,"name":"rpki-some-oldcomer-valid-roa"},{"count":7,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":7,"name":"outdated-info"},{"count":7,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":7,"name":"no-common-hops-super-pfx"},{"count":7,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":7,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":7,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.004274606704711914,"proc_time_tagger":0.09418082237243652,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789669800-31252","insert_ts":1789671079,"last_modified_ts":1789671079,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"188.138.214.0/23","super_pfx":"188.138.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"95.65.117.0/24","super_pfx":"95.65.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"89.28.30.0/23","super_pfx":"89.28.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"37.233.60.0/23","super_pfx":"37.233.0.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"89.28.12.0/24","super_pfx":"89.28.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"89.28.110.0/24","super_pfx":"89.28.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"188.138.140.0/24","super_pfx":"188.138.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["31252"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["31252"],"prefixes":["95.65.117.0/24","188.138.214.0/23","37.233.60.0/23","188.138.140.0/24","188.138.128.0/17","37.233.0.0/18","89.28.30.0/23","89.28.110.0/24","89.28.0.0/17","89.28.12.0/24","95.65.0.0/17"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["31252"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[[]]},"view_ts":1789669800},{"asinfo":{"6568":{"asrank":{"asn":"6568","asnDegree":{"customer":20,"peer":17,"provider":3},"asnName":"","organization":{"country":{"iso":"BO"},"orgId":"@aut-6568-LACNIC","orgName":"EMPRESA NACIONAL DE TELECOMUNICACIONES SOCIEDAD ANONIMA"},"rank":1286},"hegemony":9.56181764583171e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"no-common-hops-sub-pfx"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"sub-path-equal"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"no-common-hops-super-pfx"},{"count":1,"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-manrs-member"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0007035732269287109,"proc_time_tagger":0.0072727203369140625,"total_tags_cnt":28},"event_type":"defcon","finished_ts":null,"id":"defcon-1789669800-6568","insert_ts":1789671079,"last_modified_ts":1789671080,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"190.129.167.0/24","super_pfx":"190.129.160.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["6568"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["6568"],"prefixes":["190.129.167.0/24","190.129.160.0/20"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["6568"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789669800},{"asinfo":{"44244":{"asrank":{"asn":"44244","asnDegree":{"customer":1,"peer":0,"provider":1},"asnName":"IranCell-AS","organization":{"country":{"iso":"IR"},"orgId":"ORG-ICSA1-RIPE","orgName":"Iran Cell Service and Communication Company"},"rank":7805},"hegemony":0.0003943083934552619}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-manrs-member"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005218982696533203,"proc_time_tagger":0.018281221389770508,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789669800-44244","insert_ts":1789671079,"last_modified_ts":1789671080,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"5.125.7.0/24","super_pfx":"5.125.0.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["44244"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["44244"],"prefixes":["5.125.0.0/20","5.125.7.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["44244"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789669800},{"asinfo":{"197207":{"asrank":{"asn":"197207","asnDegree":{"customer":3,"peer":0,"provider":2},"asnName":"MCCI-AS","organization":{"country":{"iso":"IR"},"orgId":"ORG-MCCO2-RIPE","orgName":"Mobile Communication Company of Iran PLC"},"rank":4894},"hegemony":0.0007375962788592804}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.00042366981506347656,"proc_time_tagger":0.015157938003540039,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1789669800-197207","insert_ts":1789671079,"last_modified_ts":1789671080,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"204.18.217.0/24","super_pfx":"204.18.208.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["197207"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["197207"],"prefixes":["204.18.217.0/24","204.18.208.0/20"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["197207"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer","hegemony-valley-paths"]]},"view_ts":1789669800},{"asinfo":{"21497":{"asrank":{"asn":"21497","asnDegree":{"customer":88,"peer":153,"provider":5},"asnName":"UMC-AS","organization":{"country":{"iso":"UA"},"orgId":"ORG-UMC1-RIPE","orgName":"PrJSC \"VF UKRAINE\""},"rank":277},"hegemony":0.00028313000960244594}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"},{"count":1,"name":"superpaths-include-subpaths"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0003807544708251953,"proc_time_tagger":0.006594657897949219,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789669800-21497","insert_ts":1789671079,"last_modified_ts":1789671080,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"178.136.43.236/32","super_pfx":"178.136.40.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"superpaths-include-subpaths"}]}],"summary":{"ases":["21497"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["21497"],"prefixes":["178.136.40.0/21","178.136.43.236/32"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"superpaths-include-subpaths"}],"tr_worthy":false,"victims":["21497"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789669800},{"asinfo":{"12586":{"asrank":{"asn":"12586","asnDegree":{"customer":16,"peer":25,"provider":8},"asnName":"ASGHOSTNET","organization":{"country":{"iso":"DE"},"orgId":"ORG-GG3-RIPE","orgName":"GHOSTnet GmbH"},"rank":1091},"hegemony":5.415247500077215e-05},"218833":{"asrank":{"asn":"218833","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"ANYCAST-LAB","organization":{"country":{"iso":"DE"},"orgId":"ORG-PU43-RIPE","orgName":"Portalix UG (haftungsbeschraenkt)"},"rank":12794},"hegemony":8.189167049953519e-08}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"rpki-all-newcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-valid-roa"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-some-newcomer-exact-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-some-newcomer-more-specific-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"anycast-prefix"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0008993148803710938,"proc_time_tagger":0.058570146560668945,"total_tags_cnt":34},"event_type":"moas","finished_ts":null,"id":"moas-1789669800-12586_218833","insert_ts":1789671079,"last_modified_ts":1789671079,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":65,"explanation":"some newcomers are more specific than their IRR records","inference_id":"some-newcomers-more-specific-record","labels":["legitimate"],"suspicion_level":40},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":70,"explanation":"some newcomers have exact IRR records","inference_id":"some-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":20}],"prefix":"94.249.165.0/24","tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"all-newcomers"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-some-newcomer-exact-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-some-newcomer-more-specific-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"anycast-prefix"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"}]}],"summary":{"ases":["218833","12586"],"attackers":["218833","12586"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["218833","12586"],"prefixes":["94.249.165.0/24"],"tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"all-newcomers"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-some-newcomer-exact-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-some-newcomer-more-specific-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"anycast-prefix"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"}],"tr_worthy":false,"victims":[]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789669800},{"asinfo":{"174":{"asrank":{"asn":"174","asnDegree":{"customer":6472,"peer":85,"provider":0},"asnName":"COGENT-174","organization":{"country":{"iso":"US"},"orgId":"COGC-ARIN","orgName":"Cogent Communications, LLC"},"rank":4},"hegemony":0.08410160802110535},"25840":{"asrank":{"asn":"25840","asnDegree":{"customer":0,"peer":1,"provider":3},"asnName":"CASCADE-ACCESS-LLC-CA-ESTOR1","organization":{"country":{"iso":"US"},"orgId":"CAL-50-ARIN","orgName":"Cascade Access, LLC"},"rank":12794},"hegemony":4.176475195476295e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"not-previously-announced-by-any-newcomer"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"some-newcomers-manrs-member"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"some-newcomers-routeviews-peer"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.000423431396484375,"proc_time_tagger":0.01658010482788086,"total_tags_cnt":69},"event_type":"submoas","finished_ts":null,"id":"submoas-1789669800-174=25840","insert_ts":1789671079,"last_modified_ts":1789671079,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all newcomers are customers of victims","inference_id":"all-newcomers-customers","labels":["legitimate"],"suspicion_level":20},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"38.125.76.0/22","super_pfx":"38.0.0.0/8","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"some-newcomers-manrs-member"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"some-newcomers-routeviews-peer"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"some-newcomers-are-rel-downstream"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"}]}],"summary":{"ases":["25840","174"],"attackers":["25840"],"inference_result":{"inferences":[{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}},"newcomers":["25840","174"],"prefixes":["38.125.76.0/22","38.0.0.0/8"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"some-newcomers-are-rel-downstream"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"some-newcomers-routeviews-peer"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["174"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789669800},{"asinfo":{"12586":{"asrank":{"asn":"12586","asnDegree":{"customer":16,"peer":25,"provider":8},"asnName":"ASGHOSTNET","organization":{"country":{"iso":"DE"},"orgId":"ORG-GG3-RIPE","orgName":"GHOSTnet GmbH"},"rank":1091},"hegemony":5.415247500077215e-05},"218833":{"asrank":{"asn":"218833","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"ANYCAST-LAB","organization":{"country":{"iso":"DE"},"orgId":"ORG-PU43-RIPE","orgName":"Portalix UG (haftungsbeschraenkt)"},"rank":12794},"hegemony":8.189167049953519e-08}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"anycast-prefix"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-some-newcomer-exact-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"submoas-causing-moas-subpfx"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-providers"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"rpki-some-newcomer-valid-roa"},{"count":1,"name":"some-newcomers-are-rel-upstream"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"rpki-all-newcomer-valid-roa"},{"count":1,"name":"irr-RIPE-some-newcomer-more-specific-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0012233257293701172,"proc_time_tagger":0.07236385345458984,"total_tags_cnt":66},"event_type":"submoas","finished_ts":null,"id":"submoas-1789669800-12586=12586_218833","insert_ts":1789671079,"last_modified_ts":1789671079,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":65,"explanation":"some newcomers are more specific than their IRR records","inference_id":"some-newcomers-more-specific-record","labels":["legitimate"],"suspicion_level":40},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":70,"explanation":"some newcomers have exact IRR records","inference_id":"some-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"94.249.165.0/24","super_pfx":"94.249.128.0/17","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"anycast-prefix"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-some-newcomer-exact-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"submoas-causing-moas-subpfx"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-providers"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"hegemony-valley-paths"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-RIPE-some-newcomer-more-specific-record"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"}]}],"summary":{"ases":["12586","218833"],"attackers":["12586","218833"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["12586","218833"],"prefixes":["94.249.165.0/24","94.249.128.0/17"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"submoas-causing-moas-subpfx"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"hegemony-valley-paths"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-origins-same-country"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-some-newcomer-more-specific-record"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"anycast-prefix"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-RIPE-some-newcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-providers"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["12586"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789669800},{"asinfo":{"263303":{"asrank":{"asn":"263303","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-263303-LACNIC","orgName":"PROVEDOR DE INTERNET SANTI LTDA - ME"},"rank":12794},"hegemony":3.2756668199814076e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":4,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":4,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":4,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":4,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":4,"name":"irr-REACH-all-oldcomer-no-record"},{"count":4,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":4,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":4,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":4,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":4,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":4,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":4,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":4,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":4,"name":"rpki-all-oldcomer-unknown-roa"},{"count":4,"name":"irr-TC-all-oldcomer-exact-record"},{"count":4,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":4,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":4,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":4,"name":"outdated-info"},{"count":4,"name":"sub-path-longer"},{"count":4,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":4,"name":"rpki-some-oldcomer-unknown-roa"},{"count":4,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":4,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0018982887268066406,"proc_time_tagger":0.026475191116333008,"total_tags_cnt":25},"event_type":"defcon","finished_ts":null,"id":"defcon-1789669500-263303","insert_ts":1789670786,"last_modified_ts":1789670786,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.190.251.0/24","super_pfx":"177.190.250.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.190.248.0/24","super_pfx":"177.190.248.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.190.250.0/24","super_pfx":"177.190.250.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.190.249.0/24","super_pfx":"177.190.248.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["263303"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["263303"],"prefixes":["177.190.250.0/24","177.190.248.0/23","177.190.251.0/24","177.190.248.0/24","177.190.249.0/24","177.190.250.0/23"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["263303"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer"]]},"view_ts":1789669500},{"asinfo":{"28602":{"asrank":{"asn":"28602","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-28602-LACNIC","orgName":"CENTRO DE PROC. DE DADOS DO ESTADO DE MATO GROSSO"},"rank":12794},"hegemony":1.3102352710608292e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":2,"name":"irr-TC-all-oldcomer-no-record"},{"count":2,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":2,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":2,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":2,"name":"irr-REACH-all-oldcomer-no-record"},{"count":2,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":2,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":2,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":2,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":2,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":2,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":2,"name":"rpki-all-oldcomer-unknown-roa"},{"count":2,"name":"sub-path-shorter"},{"count":2,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":2,"name":"outdated-info"},{"count":2,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":2,"name":"rpki-some-oldcomer-unknown-roa"},{"count":2,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":2,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0008823871612548828,"proc_time_tagger":0.004474163055419922,"total_tags_cnt":25},"event_type":"defcon","finished_ts":null,"id":"defcon-1789669500-28602","insert_ts":1789670786,"last_modified_ts":1789670786,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"201.49.168.0/21","super_pfx":"201.49.160.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-shorter"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"201.49.160.0/21","super_pfx":"201.49.160.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-shorter"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["28602"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["28602"],"prefixes":["201.49.168.0/21","201.49.160.0/20","201.49.160.0/21"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-shorter"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["28602"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789669500},{"asinfo":{"270467":{"asrank":{"asn":"270467","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-270467-LACNIC","orgName":"Conecta Telecom"},"rank":12794},"hegemony":3.2756668199814076e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":4,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":4,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":4,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":4,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":4,"name":"irr-REACH-all-oldcomer-no-record"},{"count":4,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":4,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":4,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":4,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":4,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":4,"name":"rpki-all-oldcomer-valid-roa"},{"count":4,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":4,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":4,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":4,"name":"sub-path-equal"},{"count":4,"name":"irr-TC-all-oldcomer-exact-record"},{"count":4,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":4,"name":"rpki-some-oldcomer-valid-roa"},{"count":4,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":4,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":4,"name":"outdated-info"},{"count":4,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":4,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":4,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.001926422119140625,"proc_time_tagger":0.022261381149291992,"total_tags_cnt":25},"event_type":"defcon","finished_ts":null,"id":"defcon-1789669500-270467","insert_ts":1789670786,"last_modified_ts":1789670786,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"200.50.200.0/24","super_pfx":"200.50.200.0/22","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"200.50.203.0/24","super_pfx":"200.50.200.0/22","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"200.50.201.0/24","super_pfx":"200.50.200.0/22","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"200.50.202.0/24","super_pfx":"200.50.200.0/22","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["270467"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["270467"],"prefixes":["200.50.200.0/22","200.50.201.0/24","200.50.203.0/24","200.50.202.0/24","200.50.200.0/24"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["270467"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[[]]},"view_ts":1789669500},{"asinfo":{"31252":{"asrank":{"asn":"31252","asnDegree":{"customer":16,"peer":12,"provider":4},"asnName":"STARNET-AS","organization":{"country":{"iso":"MD"},"orgId":"ORG-SSS72-RIPE","orgName":"StarNet Solutii SRL"},"rank":1672},"hegemony":5.563690786182313e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":3,"name":"irr-TC-all-oldcomer-no-record"},{"count":3,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":3,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":3,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":3,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":3,"name":"irr-REACH-all-oldcomer-no-record"},{"count":3,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":3,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":3,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-RADB-all-oldcomer-no-record"},{"count":3,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":3,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":3,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":3,"name":"rpki-all-oldcomer-valid-roa"},{"count":3,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":3,"name":"no-common-hops-sub-pfx"},{"count":3,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":3,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":3,"name":"sub-path-equal"},{"count":3,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":3,"name":"rpki-some-oldcomer-valid-roa"},{"count":3,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":3,"name":"outdated-info"},{"count":3,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":3,"name":"no-common-hops-super-pfx"},{"count":3,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":3,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":3,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0013949871063232422,"proc_time_tagger":0.02056598663330078,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789669500-31252","insert_ts":1789670786,"last_modified_ts":1789670786,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"178.168.14.0/24","super_pfx":"178.168.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"95.65.23.0/24","super_pfx":"95.65.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"95.65.83.0/24","super_pfx":"95.65.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["31252"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["31252"],"prefixes":["95.65.83.0/24","95.65.23.0/24","178.168.0.0/17","95.65.0.0/17","178.168.14.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["31252"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[[]]},"view_ts":1789669500},{"asinfo":{"52626":{"asrank":{"asn":"52626","asnDegree":{"customer":1,"peer":2,"provider":3},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-52626-LACNIC","orgName":"NovaNet Provedor e Web Ltda"},"rank":7805},"hegemony":3.3573464814355862e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":2,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":2,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":2,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":2,"name":"irr-REACH-all-oldcomer-no-record"},{"count":2,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-oldcomer-exact-record"},{"count":2,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"hegemony-valley-paths"},{"count":2,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":2,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":2,"name":"rpki-all-oldcomer-valid-roa"},{"count":2,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":2,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-TC-all-oldcomer-exact-record"},{"count":2,"name":"rpki-some-oldcomer-valid-roa"},{"count":2,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":2,"name":"sub-path-shorter"},{"count":2,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":2,"name":"outdated-info"},{"count":2,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":2,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":2,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0011391639709472656,"proc_time_tagger":0.00892329216003418,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1789669500-52626","insert_ts":1789670786,"last_modified_ts":1789670786,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"179.189.192.0/21","super_pfx":"179.189.192.0/20","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-exact-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"179.189.200.0/21","super_pfx":"179.189.192.0/20","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-exact-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["52626"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["52626"],"prefixes":["179.189.192.0/20","179.189.192.0/21","179.189.200.0/21"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-exact-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["52626"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789669500},{"asinfo":{"28634":{"asrank":{"asn":"28634","asnDegree":{"customer":2,"peer":2067,"provider":4},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-28634-LACNIC","orgName":"Life Tecnologia Ltda."},"rank":4894},"hegemony":8.209612306998794e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"all-newcomers-ris-peer"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"no-common-hops-sub-pfx"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"sub-path-equal"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"no-common-hops-super-pfx"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-manrs-member"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005550384521484375,"proc_time_tagger":0.0039501190185546875,"total_tags_cnt":30},"event_type":"defcon","finished_ts":null,"id":"defcon-1789669500-28634","insert_ts":1789670786,"last_modified_ts":1789670786,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"179.96.137.0/24","super_pfx":"179.96.128.0/20","tags":[{"name":"all-newcomers-ris-peer"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["28634"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["28634"],"prefixes":["179.96.128.0/20","179.96.137.0/24"],"tags":[{"name":"all-newcomers-ris-peer"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["28634"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789669500},{"asinfo":{"59139":{"asrank":{"asn":"59139","asnDegree":{"customer":4,"peer":31,"provider":4},"asnName":"WIFIKU-AS-ID","organization":{"country":{"iso":"ID"},"orgId":"@aut-59139-APNIC","orgName":"PT Wifiku Indonesia"},"rank":4204},"hegemony":3.3407891785029573e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":4,"name":"irr-TC-all-oldcomer-no-record"},{"count":4,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":4,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":4,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":4,"name":"irr-REACH-all-oldcomer-no-record"},{"count":4,"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"count":4,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":4,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":4,"name":"irr-IDNIC-all-oldcomer-more-specific-record"},{"count":4,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":4,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":4,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":4,"name":"rpki-all-oldcomer-valid-roa"},{"count":3,"name":"no-common-hops-sub-pfx"},{"count":4,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":4,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":4,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":4,"name":"rpki-some-oldcomer-valid-roa"},{"count":4,"name":"sub-path-shorter"},{"count":4,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":4,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":4,"name":"outdated-info"},{"count":4,"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"count":4,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":4,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"}],"pfx_events_cnt":4,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.002322673797607422,"proc_time_tagger":0.021220684051513672,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789669500-59139","insert_ts":1789670786,"last_modified_ts":1789670786,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"103.253.0.0/24","super_pfx":"103.253.0.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-more-specific-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"103.253.2.0/24","super_pfx":"103.253.2.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-more-specific-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"103.253.1.0/24","super_pfx":"103.253.0.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-more-specific-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"103.253.3.0/24","super_pfx":"103.253.2.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-more-specific-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["59139"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["59139"],"prefixes":["103.253.2.0/24","103.253.0.0/24","103.253.2.0/23","103.253.1.0/24","103.253.3.0/24","103.253.0.0/23"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-more-specific-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["59139"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789669500},{"asinfo":{"262299":{"asrank":{"asn":"262299","asnDegree":{"customer":0,"peer":24,"provider":3},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-262299-LACNIC","orgName":"FLAVIO JOSE PENSO JUNIOR LTDA"},"rank":12794},"hegemony":1.6377569606126451e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":2,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":2,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":2,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":2,"name":"irr-REACH-all-oldcomer-no-record"},{"count":2,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":2,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"hegemony-valley-paths"},{"count":2,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":2,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":2,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":2,"name":"rpki-all-oldcomer-valid-roa"},{"count":2,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":2,"name":"no-common-hops-sub-pfx"},{"count":2,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":2,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":2,"name":"sub-path-equal"},{"count":2,"name":"irr-TC-all-oldcomer-exact-record"},{"count":2,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":2,"name":"rpki-some-oldcomer-valid-roa"},{"count":2,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":2,"name":"outdated-info"},{"count":2,"name":"no-common-hops-super-pfx"},{"count":2,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":2,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":2,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0012018680572509766,"proc_time_tagger":0.00711369514465332,"total_tags_cnt":28},"event_type":"defcon","finished_ts":null,"id":"defcon-1789669500-262299","insert_ts":1789670786,"last_modified_ts":1789670786,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.54.249.0/24","super_pfx":"177.54.248.0/21","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.54.248.0/24","super_pfx":"177.54.248.0/21","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["262299"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["262299"],"prefixes":["177.54.248.0/24","177.54.249.0/24","177.54.248.0/21"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["262299"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["hegemony-valley-paths"]]},"view_ts":1789669500},{"asinfo":{"136107":{"asrank":{"asn":"136107","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"IDNIC-7ION-AS-ID","organization":{"country":{"iso":"ID"},"orgId":"@aut-136107-APNIC","orgName":"PT. Tujuh Ion Indonesia"},"rank":12794},"hegemony":3.275588177652073e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004878044128417969,"proc_time_tagger":0.002592325210571289,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1789669500-136107","insert_ts":1789670786,"last_modified_ts":1789670786,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"103.233.102.0/24","super_pfx":"103.233.102.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["136107"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["136107"],"prefixes":["103.233.102.0/23","103.233.102.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["136107"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer","hegemony-valley-paths"]]},"view_ts":1789669500},{"asinfo":{"136563":{"asrank":{"asn":"136563","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"IRANETCYBERCAFE-AS-AP","organization":{"country":{"iso":"BD"},"orgId":"ORG-ICC1-AP-APNIC","orgName":"Iranet Cyber Cafe"},"rank":12794},"hegemony":4.91338226647811e-07},"45905":{"asrank":{"asn":"45905","asnDegree":{"customer":5,"peer":0,"provider":4},"asnName":"STARGATE-AS-AP","organization":{"country":{"iso":"BD"},"orgId":"ORG-SCL13-AP-APNIC","orgName":"Stargate Communications Ltd."},"rank":3370},"hegemony":3.27719517818574e-06}},"debug":{},"duration":300,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-APNIC-some-newcomer-exact-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-APNIC-some-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"all-origins-same-country"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0006544589996337891,"proc_time_tagger":0.02061605453491211,"total_tags_cnt":32},"event_type":"moas","finished_ts":1789669800,"id":"moas-1789669500-136563_45905","insert_ts":1789670786,"last_modified_ts":1789671079,"pfx_events":[{"finished_ts":1789669800,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":70,"explanation":"some newcomers have exact IRR records","inference_id":"some-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":20}],"prefix":"123.253.215.0/24","tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"no-origins-prev-view"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"outdated-info"},{"name":"irr-APNIC-some-newcomer-exact-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-APNIC-some-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"all-origins-same-country"}]}],"summary":{"ases":["136563","45905"],"attackers":["136563","45905"],"inference_result":{"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3}],"primary_inference":{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3}},"newcomers":["136563","45905"],"prefixes":["123.253.215.0/24"],"tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"no-origins-prev-view"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"outdated-info"},{"name":"irr-APNIC-some-newcomer-exact-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-APNIC-some-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"all-origins-same-country"}],"tr_worthy":false,"victims":[]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789669500},{"asinfo":{"270529":{"asrank":{"asn":"270529","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-270529-LACNIC","orgName":"PT DE LOYOLA ME"},"rank":12794},"hegemony":3.2756668199814076e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":5,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":5,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":5,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":5,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":5,"name":"irr-REACH-all-oldcomer-no-record"},{"count":5,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":5,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":5,"name":"irr-TC-all-oldcomer-more-specific-record"},{"count":5,"name":"hegemony-valley-paths"},{"count":5,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":5,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":5,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":5,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":5,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":5,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":5,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":5,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":5,"name":"rpki-all-oldcomer-unknown-roa"},{"count":5,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":5,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":5,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":5,"name":"outdated-info"},{"count":5,"name":"sub-path-longer"},{"count":2,"name":"no-common-hops-super-pfx"},{"count":5,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":5,"name":"rpki-some-oldcomer-unknown-roa"},{"count":5,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":5,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0026717185974121094,"proc_time_tagger":0.034281253814697266,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789669200-270529","insert_ts":1789670480,"last_modified_ts":1789670480,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"189.45.184.0/23","super_pfx":"189.45.184.0/22","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"189.45.186.0/24","super_pfx":"189.45.186.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"189.45.184.0/24","super_pfx":"189.45.184.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"189.45.186.0/23","super_pfx":"189.45.184.0/22","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"189.45.187.0/24","super_pfx":"189.45.186.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["270529"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["270529"],"prefixes":["189.45.184.0/24","189.45.187.0/24","189.45.186.0/23","189.45.184.0/23","189.45.184.0/22","189.45.186.0/24"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["270529"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer","hegemony-valley-paths"]]},"view_ts":1789669200},{"asinfo":{"46606":{"asrank":{"asn":"46606","asnDegree":{"customer":0,"peer":1,"provider":4},"asnName":"UNIFIEDLAYER-AS-1","organization":{"country":{"iso":"US"},"orgId":"BLUEH-2-ARIN","orgName":"Unified Layer"},"rank":12794},"hegemony":0.00015478858375659118}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"no-common-hops-super-pfx"},{"count":1,"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.000759124755859375,"proc_time_tagger":0.005747318267822266,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789669200-46606","insert_ts":1789670480,"last_modified_ts":1789670480,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"162.241.215.0/24","super_pfx":"162.241.208.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["46606"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["46606"],"prefixes":["162.241.208.0/21","162.241.215.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["46606"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer","hegemony-valley-paths"]]},"view_ts":1789669200},{"asinfo":{"401696":{"asrank":{"asn":"401696","asnDegree":{"customer":1,"peer":0,"provider":1},"asnName":"COGNETCLOUD","organization":{"country":{"iso":"US"},"orgId":"COGNE-7-ARIN","orgName":"cognetcloud INC"},"rank":7805},"hegemony":1.5117932545090849e-05},"401701":{"asrank":{"asn":"401701","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"COGNETCLOUD-2","organization":{"country":{"iso":"US"},"orgId":"COGNE-7-ARIN","orgName":"cognetcloud INC"},"rank":12794},"hegemony":1.7269039885224857e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"oldcomer-newcomer-all-siblings"},{"count":1,"name":"oldcomer-newcomer-some-siblings"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-more-specific-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"spamhaus-asn-drop"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-valid-roa"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"rpki-all-newcomer-valid-roa"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.000698089599609375,"proc_time_tagger":0.027671098709106445,"total_tags_cnt":68},"event_type":"submoas","finished_ts":null,"id":"submoas-1789669200-401696=401701","insert_ts":1789670480,"last_modified_ts":1789670480,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":75,"explanation":"all newcomers are more specific than their IRR records","inference_id":"all-newcomers-more-specific-irr-record","labels":["legitimate"],"suspicion_level":20},{"confidence":80,"explanation":"the AS was on spamhaus asn-drop list","inference_id":"suspicious-spamhaus-asn","labels":["suspicious","incident"],"suspicion_level":80},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":92,"explanation":"all newcomer(s) are customer(s) of the oldcomer(s) and have advertised the prefix in the past","inference_id":"all-newcomers-customers-announced-prefix","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"156.238.235.0/24","super_pfx":"156.238.232.0/21","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"spamhaus-asn-drop"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"previously-announced-by-all-newcomers"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"}]}],"summary":{"ases":["401696","401701"],"attackers":["401701"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["401696","401701"],"prefixes":["156.238.235.0/24","156.238.232.0/21"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-origins-same-country"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"previously-announced-by-all-newcomers"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"spamhaus-asn-drop"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["401696"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789669200},{"asinfo":{"41676":{"asrank":{"asn":"41676","asnDegree":{"customer":0,"peer":4,"provider":4},"asnName":"JMDI","organization":{"country":{"iso":"PL"},"orgId":"ORG-JJM1-RIPE","orgName":"JMDI Jacek Maleszko"},"rank":12794},"hegemony":6.2236175375389395e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-invalid-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"sub-path-equal"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"rpki-some-oldcomer-invalid-roa"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.00047397613525390625,"proc_time_tagger":0.004347085952758789,"total_tags_cnt":28},"event_type":"defcon","finished_ts":null,"id":"defcon-1789668900-41676","insert_ts":1789670183,"last_modified_ts":1789670183,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"109.233.88.5/32","super_pfx":"109.233.88.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["41676"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["41676"],"prefixes":["109.233.88.0/21","109.233.88.5/32"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["41676"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789668900},{"asinfo":{"2648":{"asrank":{"asn":"2648","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"NOAA-BOULDER","organization":{"country":{"iso":"US"},"orgId":"NOAABO-Z-ARIN","orgName":"National Oceanic and Atmospheric Administration"},"rank":12794},"hegemony":3.594958024973151e-05},"3477":{"asrank":{"asn":"3477","asnDegree":{"customer":10,"peer":0,"provider":2},"asnName":"NOAA-NWAVE","organization":{"country":{"iso":"US"},"orgId":"NOAABO-Z-ARIN","orgName":"National Oceanic and Atmospheric Administration"},"rank":2466},"hegemony":0.00018949277607717242}},"debug":{},"duration":300,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-some-newcomer-exact-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"single-rel-upstream-chain"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-valid-roa"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-valid-roa"},{"count":1,"name":"newcomer-some-siblings"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-some-newcomer-no-record"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"newcomer-all-siblings"},{"count":1,"name":"all-origins-same-country"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0007448196411132812,"proc_time_tagger":0.020430564880371094,"total_tags_cnt":37},"event_type":"moas","finished_ts":1789669200,"id":"moas-1789668900-2648_3477","insert_ts":1789670183,"last_modified_ts":1789670480,"pfx_events":[{"finished_ts":1789669200,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":70,"explanation":"some newcomers have exact IRR records","inference_id":"some-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3}],"prefix":"204.228.188.0/24","tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"no-origins-prev-view"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"outdated-info"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-ARIN-some-newcomer-exact-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"hegemony-valley-paths"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"newcomer-some-siblings"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-ARIN-some-newcomer-no-record"},{"name":"all-newcomers"},{"name":"newcomer-all-siblings"},{"name":"all-origins-same-country"}]}],"summary":{"ases":["3477","2648"],"attackers":["3477","2648"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["3477","2648"],"prefixes":["204.228.188.0/24"],"tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"no-origins-prev-view"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"outdated-info"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-ARIN-some-newcomer-exact-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"hegemony-valley-paths"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"newcomer-some-siblings"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-ARIN-some-newcomer-no-record"},{"name":"all-newcomers"},{"name":"newcomer-all-siblings"},{"name":"all-origins-same-country"}],"tr_worthy":false,"victims":[]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789668900},{"asinfo":{"11432":{"asrank":{"asn":"11432","asnDegree":{"customer":208,"peer":38,"provider":6},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-11432-LACNIC","orgName":"Telium Telecomunica\u00e7\u00f5es Ltda"},"rank":211},"hegemony":4.3366978608861594e-05},"271335":{"asrank":{"asn":"271335","asnDegree":{"customer":0,"peer":0,"provider":5},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-271335-LACNIC","orgName":"GATEWAY ENTERPRISE CORPORATION LTDA ME"},"rank":12794},"hegemony":3.275588177652073e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"some-victims-stub-ases"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-upstream"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"long-prefix"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-TC-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-upstream"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"all-victims-stub-ases"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004665851593017578,"proc_time_tagger":0.010437488555908203,"total_tags_cnt":64},"event_type":"submoas","finished_ts":null,"id":"submoas-1789668900-271335=11432","insert_ts":1789670183,"last_modified_ts":1789670183,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":68,"explanation":"all newcomer(s) are upstream provider(s) of the oldcomer(s)","inference_id":"all-newcomers-providers-rel-upstream","labels":["legitimate"],"suspicion_level":20},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10},{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"207.248.20.157/32","super_pfx":"207.248.20.0/24","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"single-ip"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"long-prefix"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"all-victims-stub-ases"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]}],"summary":{"ases":["271335","11432"],"attackers":["11432"],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["271335","11432"],"prefixes":["207.248.20.157/32","207.248.20.0/24"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"some-victims-stub-ases"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"all-victims-stub-ases"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"single-ip"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"all-newcomers-are-rel-upstream"},{"name":"long-prefix"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["271335"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789668900},{"asinfo":{"1540":{"asrank":{"asn":"1540","asnDegree":{"customer":0,"peer":4,"provider":1},"asnName":"DNIC-ASBLK-01534-01546","organization":{"country":{"iso":"US"},"orgId":"HEADQU-3-ARIN","orgName":"Headquarters, USAISC"},"rank":12794},"hegemony":0.004934663807321587}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"sub-path-equal"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004975795745849609,"proc_time_tagger":0.009769678115844727,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789668600-1540","insert_ts":1789669878,"last_modified_ts":1789669878,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"143.74.23.0/24","super_pfx":"143.74.22.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["1540"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["1540"],"prefixes":["143.74.23.0/24","143.74.22.0/23"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["1540"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["hegemony-valley-paths"]]},"view_ts":1789668600},{"asinfo":{"50673":{"asrank":{"asn":"50673","asnDegree":{"customer":92,"peer":1137,"provider":6},"asnName":"Serverius-as","organization":{"country":{"iso":"NL"},"orgId":"ORG-SHB2-RIPE","orgName":"Serverius Holding B.V."},"rank":341},"hegemony":9.790737116247998e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"all-newcomers-ris-peer"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"no-common-hops-super-pfx"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004673004150390625,"proc_time_tagger":0.02236318588256836,"total_tags_cnt":29},"event_type":"defcon","finished_ts":null,"id":"defcon-1789668600-50673","insert_ts":1789669878,"last_modified_ts":1789669878,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"185.181.165.224/32","super_pfx":"185.181.165.0/24","tags":[{"name":"all-newcomers-ris-peer"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["50673"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["50673"],"prefixes":["185.181.165.224/32","185.181.165.0/24"],"tags":[{"name":"all-newcomers-ris-peer"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["50673"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789668600},{"asinfo":{"51175":{"asrank":{"asn":"51175","asnDegree":{"customer":2,"peer":16,"provider":4},"asnName":"MULTIPLAYPL-AS","organization":{"country":{"iso":"PL"},"orgId":"ORG-MSZO24-RIPE","orgName":"Multiplay Sp. z o.o."},"rank":5958},"hegemony":6.218507304422434e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"no-common-hops-sub-pfx"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"sub-path-equal"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"no-common-hops-super-pfx"},{"count":1,"name":"irr-RIPE-all-oldcomer-exact-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005228519439697266,"proc_time_tagger":0.004588127136230469,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789668600-51175","insert_ts":1789669878,"last_modified_ts":1789669878,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"194.29.182.0/24","super_pfx":"194.29.180.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-RIPE-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["51175"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["51175"],"prefixes":["194.29.180.0/22","194.29.182.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-RIPE-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["51175"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[[]]},"view_ts":1789668600},{"asinfo":{"30844":{"asrank":{"asn":"30844","asnDegree":{"customer":248,"peer":1474,"provider":10},"asnName":"LIQUID-AS","organization":{"country":{"iso":"GB"},"orgId":"ORG-ESSL1-RIPE","orgName":"Liquid Telecommunications Ltd"},"rank":112},"hegemony":0.000785316808866959},"36937":{"asrank":{"asn":"36937","asnDegree":{"customer":6,"peer":0,"provider":1},"asnName":"Neotel-AS","organization":{"country":{"iso":"ZA"},"orgId":"ORG-NPL2-AFRINIC","orgName":"Liquid Telecommunications South Africa (Pty) Ltd"},"rank":3370},"hegemony":0.0002822462388166264}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":3,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":3,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":3,"name":"irr-TC-all-oldcomer-no-record"},{"count":3,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":3,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":3,"name":"all-newcomer-pfxs"},{"count":3,"name":"has-dps-asn"},{"count":3,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":3,"name":"irr-REACH-all-newcomer-no-record"},{"count":3,"name":"irr-BBOI-all-newcomer-no-record"},{"count":3,"name":"irr-all-newcomer-no-record"},{"count":3,"name":"all-newcomers-are-rel-upstream"},{"count":3,"name":"oldcomer-newcomer-all-siblings"},{"count":3,"name":"oldcomer-newcomer-some-siblings"},{"count":3,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":3,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":3,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":3,"name":"some-newcomers-ris-peer"},{"count":3,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":3,"name":"some-newcomers-are-rel-neighbor"},{"count":3,"name":"irr-APNIC-all-newcomer-no-record"},{"count":3,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":3,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":3,"name":"rpki-all-newcomer-unknown-roa"},{"count":3,"name":"due-to-dps-asn"},{"count":3,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":3,"name":"some-newcomers-are-providers"},{"count":3,"name":"irr-RIPE-all-newcomer-no-record"},{"count":3,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":3,"name":"irr-BELL-all-oldcomer-no-record"},{"count":3,"name":"irr-PANIX-all-newcomer-no-record"},{"count":3,"name":"irr-RADB-all-newcomer-no-record"},{"count":3,"name":"all-newcomers-are-providers"},{"count":3,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":3,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":3,"name":"all-newcomers-are-rel-neighbor"},{"count":3,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":3,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":3,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":3,"name":"some-newcomers-dps-asn"},{"count":3,"name":"irr-ARIN-all-newcomer-no-record"},{"count":3,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":3,"name":"irr-TC-all-newcomer-no-record"},{"count":3,"name":"irr-REACH-all-oldcomer-no-record"},{"count":3,"name":"rpki-some-oldcomer-unknown-roa"},{"count":3,"name":"previously-announced-by-some-newcomers"},{"count":3,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":3,"name":"some-newcomer-announced-no-pfxs"},{"count":3,"name":"outdated-info"},{"count":3,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":3,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":3,"name":"newcomer-less-specific"},{"count":3,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":3,"name":"single-rel-upstream-chain"},{"count":3,"name":"hegemony-valley-paths"},{"count":3,"name":"some-newcomers-are-rel-upstream"},{"count":3,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":3,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":3,"name":"rpki-all-oldcomer-unknown-roa"},{"count":3,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":3,"name":"all-newcomer-announced-no-pfxs"},{"count":3,"name":"some-newcomers-routeviews-peer"},{"count":3,"name":"newcomer-more-specific"},{"count":3,"name":"all-newcomers"},{"count":3,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":3,"name":"rpki-some-newcomer-unknown-roa"},{"count":3,"name":"no-origins-prev-view"},{"count":3,"name":"irr-BELL-all-newcomer-no-record"},{"count":3,"name":"irr-AFRINIC-all-oldcomer-no-record"}],"pfx_events_cnt":3,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0017747879028320312,"proc_time_tagger":0.06286787986755371,"total_tags_cnt":71},"event_type":"submoas","finished_ts":null,"id":"submoas-1789668600-36937=30844","insert_ts":1789669878,"last_modified_ts":1789669878,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":91,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s). Probably, they are providing services to their customers (e.g., blackholing)","inference_id":"all-newcomers-providers","labels":["legitimate"],"suspicion_level":20},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10},{"confidence":60,"explanation":"The event is caused by ASNs performing DoS Protection Services (DPS)","inference_id":"dps-asn","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"41.173.24.0/24","super_pfx":"41.160.0.0/12","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"has-dps-asn"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-ris-peer"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"due-to-dps-asn"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"some-newcomers-dps-asn"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"hegemony-valley-paths"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"some-newcomers-routeviews-peer"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":91,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s). Probably, they are providing services to their customers (e.g., blackholing)","inference_id":"all-newcomers-providers","labels":["legitimate"],"suspicion_level":20},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10},{"confidence":60,"explanation":"The event is caused by ASNs performing DoS Protection Services (DPS)","inference_id":"dps-asn","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"41.173.25.0/24","super_pfx":"41.160.0.0/12","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"has-dps-asn"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-ris-peer"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"due-to-dps-asn"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"some-newcomers-dps-asn"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"hegemony-valley-paths"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"some-newcomers-routeviews-peer"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":91,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s). Probably, they are providing services to their customers (e.g., blackholing)","inference_id":"all-newcomers-providers","labels":["legitimate"],"suspicion_level":20},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10},{"confidence":60,"explanation":"The event is caused by ASNs performing DoS Protection Services (DPS)","inference_id":"dps-asn","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"41.173.26.0/24","super_pfx":"41.160.0.0/12","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"has-dps-asn"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-ris-peer"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"due-to-dps-asn"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"some-newcomers-dps-asn"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"hegemony-valley-paths"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"some-newcomers-routeviews-peer"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]}],"summary":{"ases":["36937","30844"],"attackers":["30844"],"inference_result":{"inferences":[{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1}],"primary_inference":{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1}},"newcomers":["36937","30844"],"prefixes":["41.160.0.0/12","41.173.25.0/24","41.173.26.0/24","41.173.24.0/24"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"due-to-dps-asn"},{"name":"some-newcomers-are-providers"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"single-rel-upstream-chain"},{"name":"hegemony-valley-paths"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"has-dps-asn"},{"name":"all-newcomers-are-rel-upstream"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-ris-peer"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"some-newcomers-dps-asn"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"some-newcomers-routeviews-peer"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["36937"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789668600},{"asinfo":{"286":{"asrank":{"asn":"286","asnDegree":{"customer":805,"peer":705,"provider":0},"asnName":"KPN","organization":{"country":{"iso":"US"},"orgId":"ORG-GCI2-RIPE","orgName":"GTT Communications Inc."},"rank":12794},"hegemony":0},"3257":{"asrank":{"asn":"3257","asnDegree":{"customer":1812,"peer":35,"provider":0},"asnName":"GTT-BACKBONE","organization":{"country":{"iso":"US"},"orgId":"ORG-GCI2-RIPE","orgName":"GTT Communications Inc."},"rank":2},"hegemony":0.019308914077053634},"396982":{"asrank":{"asn":"396982","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"GOOGLE-CLOUD-PLATFORM","organization":{"country":{"iso":"US"},"orgId":"GOOGL-2-ARIN","orgName":"Google LLC"},"rank":12794},"hegemony":0.00704012784561183}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"oldcomer-some-siblings"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-peers"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-ris-peer"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-peers"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-manrs-member"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-some-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-exact-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"submoas-causing-moas-superpfx"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-some-oldcomer-exact-record"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"rpki-some-newcomer-valid-roa"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"oldcomer-all-siblings"},{"count":1,"name":"rpki-all-newcomer-valid-roa"},{"count":1,"name":"some-newcomers-routeviews-peer"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0003731250762939453,"proc_time_tagger":0.04560256004333496,"total_tags_cnt":74},"event_type":"submoas","finished_ts":null,"id":"submoas-1789668600-286_3257=396982","insert_ts":1789669878,"last_modified_ts":1789669878,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":87,"explanation":"all newcomer origins are siblings with at least one customer of a potential victim","inference_id":"all-newcomers-siblings-with-oldcomers-customer","labels":["legitimate"],"suspicion_level":20},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"91.143.180.0/24","super_pfx":"91.143.176.0/20","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"oldcomer-some-siblings"},{"name":"some-newcomers-siblings-with-oldcomers-peers"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-ris-peer"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-peers"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RIPE-some-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"submoas-causing-moas-superpfx"},{"name":"outdated-info"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-RIPE-some-oldcomer-exact-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"hegemony-valley-paths"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"oldcomer-all-siblings"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-routeviews-peer"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"}]}],"summary":{"ases":["286","3257","396982"],"attackers":["396982"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["286","3257","396982"],"prefixes":["91.143.180.0/24","91.143.176.0/20"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"oldcomer-some-siblings"},{"name":"some-newcomers-siblings-with-oldcomers-peers"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-peers"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-RIPE-some-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"submoas-causing-moas-superpfx"},{"name":"outdated-info"},{"name":"irr-RIPE-some-oldcomer-exact-record"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"hegemony-valley-paths"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"all-origins-same-country"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-ris-peer"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"oldcomer-all-siblings"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-routeviews-peer"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["286","3257"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789668600},{"asinfo":{"12741":{"asrank":{"asn":"12741","asnDegree":{"customer":427,"peer":716,"provider":3},"asnName":"AS-NETIA","organization":{"country":{"iso":"PL"},"orgId":"ORG-NTS2-RIPE","orgName":"Netia SA"},"rank":100},"hegemony":0.0006691438080987418},"31608":{"asrank":{"asn":"31608","asnDegree":{"customer":3,"peer":1,"provider":3},"asnName":"GAWEX-AS","organization":{"country":{"iso":"PL"},"orgId":"ORG-GMSZ1-RIPE","orgName":"Gawex Media Sp. z o. o."},"rank":4894},"hegemony":1.1066439293123132e-05}},"debug":{},"duration":900,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-upstream"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-upstream"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-providers"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-providers"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0003371238708496094,"proc_time_tagger":0.029667377471923828,"total_tags_cnt":66},"event_type":"submoas","finished_ts":1789669500,"id":"submoas-1789668600-31608=12741","insert_ts":1789669878,"last_modified_ts":1789670786,"pfx_events":[{"finished_ts":1789669500,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":91,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s). Probably, they are providing services to their customers (e.g., blackholing)","inference_id":"all-newcomers-providers","labels":["legitimate"],"suspicion_level":20},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10},{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"89.239.81.96/32","super_pfx":"89.239.64.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"outdated-info"},{"name":"single-ip"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"all-origins-same-country"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"}]}],"summary":{"ases":["31608","12741"],"attackers":["12741"],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["31608","12741"],"prefixes":["89.239.81.96/32","89.239.64.0/19"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"outdated-info"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"some-newcomers-are-providers"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"single-peer-on-attacker-path"},{"name":"all-origins-same-country"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"single-ip"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"}],"tr_worthy":false,"victims":["31608"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789668600},{"asinfo":{"132420":{"asrank":{"asn":"132420","asnDegree":{"customer":9,"peer":0,"provider":2},"asnName":"E2E-NETWORKS-IN","organization":{"country":{"iso":"IN"},"orgId":"ORG-ENPL1-AP-APNIC","orgName":"E2E Networks Limited"},"rank":2624},"hegemony":1.3429911528373498e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"sub-path-equal"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-exact-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0007047653198242188,"proc_time_tagger":0.010776519775390625,"total_tags_cnt":25},"event_type":"defcon","finished_ts":null,"id":"defcon-1789668300-132420","insert_ts":1789669658,"last_modified_ts":1789669658,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"151.185.41.0/24","super_pfx":"151.185.40.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-exact-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["132420"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["132420"],"prefixes":["151.185.41.0/24","151.185.40.0/22"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-exact-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["132420"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[[]]},"view_ts":1789668300},{"asinfo":{"3597":{"asrank":{"asn":"3597","asnDegree":{"customer":1,"peer":2,"provider":1},"asnName":"","organization":{"country":{"iso":"AR"},"orgId":"@aut-3597-LACNIC","orgName":"Fundaci\u00f3n InnovaT"},"rank":7805},"hegemony":2.1049988752041035e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"superpaths-include-subpaths"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0008597373962402344,"proc_time_tagger":0.006620645523071289,"total_tags_cnt":25},"event_type":"defcon","finished_ts":null,"id":"defcon-1789668000-3597","insert_ts":1789669581,"last_modified_ts":1789669581,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"168.96.148.0/24","super_pfx":"168.96.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}]}],"summary":{"ases":["3597"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["3597"],"prefixes":["168.96.148.0/24","168.96.0.0/16"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}],"tr_worthy":false,"victims":["3597"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789668000},{"asinfo":{"55953":{"asrank":{"asn":"55953","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"XIM-HK","organization":{"country":{"iso":"HK"},"orgId":"ORG-XIL1-AP-APNIC","orgName":"XIMBO Internet Limited"},"rank":12794},"hegemony":2.456750114986056e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-invalid-roa"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"sub-path-shorter"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"single-ip"},{"count":1,"name":"rpki-some-oldcomer-invalid-roa"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0006885528564453125,"proc_time_tagger":0.006681919097900391,"total_tags_cnt":28},"event_type":"defcon","finished_ts":null,"id":"defcon-1789668000-55953","insert_ts":1789669581,"last_modified_ts":1789669581,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"103.230.15.10/32","super_pfx":"103.230.15.0/24","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["55953"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["55953"],"prefixes":["103.230.15.10/32","103.230.15.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["55953"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789668000},{"asinfo":{"262973":{"asrank":{"asn":"262973","asnDegree":{"customer":2,"peer":22,"provider":3},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-262973-LACNIC","orgName":"Max Telecomunica\u00e7\u00f5es Ltda"},"rank":5958},"hegemony":2.9135076254810386e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"no-common-hops-super-pfx"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0007536411285400391,"proc_time_tagger":0.018095731735229492,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789668000-262973","insert_ts":1789669581,"last_modified_ts":1789669581,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"179.108.132.0/24","super_pfx":"179.108.132.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["262973"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["262973"],"prefixes":["179.108.132.0/23","179.108.132.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-BBOI-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["262973"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer","hegemony-valley-paths"]]},"view_ts":1789668000},{"asinfo":{"25406":{"asrank":{"asn":"25406","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"SPLIUS-AS","organization":{"country":{"iso":"LT"},"orgId":"ORG-UA15-RIPE","orgName":"SPLIUS, UAB"},"rank":12794},"hegemony":7.534033685957239e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"},{"count":1,"name":"superpaths-include-subpaths"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0006375312805175781,"proc_time_tagger":0.005853176116943359,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789668000-25406","insert_ts":1789669581,"last_modified_ts":1789669581,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"46.249.171.142/32","super_pfx":"46.249.168.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"superpaths-include-subpaths"}]}],"summary":{"ases":["25406"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["25406"],"prefixes":["46.249.168.0/21","46.249.171.142/32"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"superpaths-include-subpaths"}],"tr_worthy":false,"victims":["25406"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789668000},{"asinfo":{"47583":{"asrank":{"asn":"47583","asnDegree":{"customer":0,"peer":85,"provider":24},"asnName":"AS-HOSTINGER","organization":{"country":{"iso":"CY"},"orgId":"ORG-ARTA1-RIPE","orgName":"Hostinger International Limited"},"rank":12794},"hegemony":0.0004083118691106824}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"no-common-hops-sub-pfx"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"sub-path-equal"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"no-common-hops-super-pfx"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005223751068115234,"proc_time_tagger":0.0018715858459472656,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789668000-47583","insert_ts":1789669581,"last_modified_ts":1789669581,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"46.202.142.0/24","super_pfx":"46.202.142.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["47583"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["47583"],"prefixes":["46.202.142.0/24","46.202.142.0/23"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["47583"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[[]]},"view_ts":1789668000},{"asinfo":{"29873":{"asrank":{"asn":"29873","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"BIZLAND-SD","organization":{"country":{"iso":"US"},"orgId":"EIG-12-ARIN","orgName":"Newfold Digital, Inc."},"rank":12794},"hegemony":2.620533455985126e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"no-common-hops-super-pfx"},{"count":1,"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005266666412353516,"proc_time_tagger":0.004666805267333984,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789668000-29873","insert_ts":1789669581,"last_modified_ts":1789669581,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"66.96.147.0/24","super_pfx":"66.96.128.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["29873"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["29873"],"prefixes":["66.96.147.0/24","66.96.128.0/18"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["29873"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer","hegemony-valley-paths"]]},"view_ts":1789668000},{"asinfo":{"4750":{"asrank":{"asn":"4750","asnDegree":{"customer":54,"peer":1,"provider":2},"asnName":"CSLOXINFO-AS-AP","organization":{"country":{"iso":"TH"},"orgId":"@family-29569","orgName":"CS Loxinfo Public Company Limited"},"rank":753},"hegemony":8.069798869101524e-05},"63951":{"asrank":{"asn":"63951","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"THAICOM-PUBLIC-AS-AP","organization":{"country":{"iso":"TH"},"orgId":"ORG-TPCL2-AP-APNIC","orgName":"THAICOM Public Company Limited"},"rank":12794},"hegemony":2.5385808376803563e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"rpki-some-newcomer-invalid-roa"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"irr-RADB-some-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-some-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-valid-roa"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-APNIC-some-newcomer-no-record"},{"count":1,"name":"irr-RADB-some-newcomer-more-specific-record"},{"count":1,"name":"irr-APNIC-some-newcomer-exact-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"rpki-newcomer-invalid-roa-due-to-as"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-REACH-some-newcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0006992816925048828,"proc_time_tagger":0.03527474403381348,"total_tags_cnt":35},"event_type":"moas","finished_ts":null,"id":"moas-1789668000-4750_63951","insert_ts":1789669581,"last_modified_ts":1789669581,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":65,"explanation":"some newcomers are more specific than their IRR records","inference_id":"some-newcomers-more-specific-record","labels":["legitimate"],"suspicion_level":40},{"confidence":72,"explanation":"some newcomers have invalid ROAs with at least one due to AS","inference_id":"rpki-some-newcomers-invalid","labels":["suspicious","incident"],"suspicion_level":80},{"confidence":70,"explanation":"some newcomers have exact IRR records","inference_id":"some-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":20}],"prefix":"202.183.220.0/24","tags":[{"name":"rpki-some-newcomer-invalid-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RADB-some-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-some-newcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-APNIC-some-newcomer-no-record"},{"name":"irr-RADB-some-newcomer-more-specific-record"},{"name":"irr-APNIC-some-newcomer-exact-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-newcomer-invalid-roa-due-to-as"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-REACH-some-newcomer-more-specific-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"}]}],"summary":{"ases":["63951","4750"],"attackers":["63951","4750"],"inference_result":{"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3}],"primary_inference":{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3}},"newcomers":["63951","4750"],"prefixes":["202.183.220.0/24"],"tags":[{"name":"rpki-some-newcomer-invalid-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RADB-some-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-some-newcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-APNIC-some-newcomer-no-record"},{"name":"irr-RADB-some-newcomer-more-specific-record"},{"name":"irr-APNIC-some-newcomer-exact-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-newcomer-invalid-roa-due-to-as"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-REACH-some-newcomer-more-specific-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"}],"tr_worthy":false,"victims":[]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789668000},{"asinfo":{"5852":{"asrank":{"asn":"5852","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"DNIC-ASBLK-05800-06055","organization":{"country":{"iso":"US"},"orgId":"USDDD-ARIN","orgName":"United States Department of Defense (DoD)"},"rank":12794},"hegemony":0.00015900277327797008},"749":{"asrank":{"asn":"749","asnDegree":{"customer":0,"peer":1,"provider":1},"asnName":"DNIC-AS-00749","organization":{"country":{"iso":"US"},"orgId":"USDDD-ARIN","orgName":"United States Department of Defense (DoD)"},"rank":12794},"hegemony":0.07108263361719659}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"some-victims-stub-ases"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"oldcomer-newcomer-all-siblings"},{"count":1,"name":"oldcomer-newcomer-some-siblings"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"all-victims-stub-ases"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005474090576171875,"proc_time_tagger":0.025317907333374023,"total_tags_cnt":65},"event_type":"submoas","finished_ts":null,"id":"submoas-1789668000-749=5852","insert_ts":1789669581,"last_modified_ts":1789669581,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"144.18.89.0/24","super_pfx":"144.18.0.0/15","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"all-victims-stub-ases"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"}]}],"summary":{"ases":["749","5852"],"attackers":["5852"],"inference_result":{"inferences":[{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1}],"primary_inference":{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1}},"newcomers":["749","5852"],"prefixes":["144.18.89.0/24","144.18.0.0/15"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"some-victims-stub-ases"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"all-victims-stub-ases"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["749"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789668000},{"asinfo":{"20804":{"asrank":{"asn":"20804","asnDegree":{"customer":292,"peer":198,"provider":3},"asnName":"ASN-TELENERGO","organization":{"country":{"iso":"PL"},"orgId":"ORG-TS16-RIPE","orgName":"Exatel S.A."},"rank":108},"hegemony":0.00021337751873116607},"49633":{"asrank":{"asn":"49633","asnDegree":{"customer":0,"peer":5,"provider":2},"asnName":"MGK-AS","organization":{"country":{"iso":"PL"},"orgId":"ORG-MRC11-RIPE","orgName":"MGK Fiber Sp. z o.o."},"rank":12794},"hegemony":1.9654000919888448e-06}},"debug":{},"duration":300,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-upstream"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-upstream"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"has-dps-asn"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"all-victims-stub-ases"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"some-victims-stub-ases"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-providers"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"due-to-dps-asn"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-providers"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-dps-asn"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005421638488769531,"proc_time_tagger":0.02738332748413086,"total_tags_cnt":70},"event_type":"submoas","finished_ts":1789668300,"id":"submoas-1789668000-49633=20804","insert_ts":1789669581,"last_modified_ts":1789669658,"pfx_events":[{"finished_ts":1789668300,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5},{"confidence":91,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s). Probably, they are providing services to their customers (e.g., blackholing)","inference_id":"all-newcomers-providers","labels":["legitimate"],"suspicion_level":20},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10},{"confidence":60,"explanation":"The event is caused by ASNs performing DoS Protection Services (DPS)","inference_id":"dps-asn","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"92.63.45.66/32","super_pfx":"92.63.32.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"has-dps-asn"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"all-victims-stub-ases"},{"name":"single-ip"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"some-victims-stub-ases"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"due-to-dps-asn"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"some-newcomers-dps-asn"}]}],"summary":{"ases":["49633","20804"],"attackers":["20804"],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["49633","20804"],"prefixes":["92.63.45.66/32","92.63.32.0/20"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"has-dps-asn"},{"name":"outdated-info"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"some-newcomers-are-providers"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"all-origins-same-country"},{"name":"due-to-dps-asn"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"some-newcomers-dps-asn"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"all-victims-stub-ases"},{"name":"single-ip"},{"name":"some-victims-stub-ases"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"}],"tr_worthy":false,"victims":["49633"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789668000},{"asinfo":{"19871":{"asrank":{"asn":"19871","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"NETWORK-SOLUTIONS-HOSTING","organization":{"country":{"iso":"US"},"orgId":"NETWO-59-ARIN","orgName":"Network Solutions, LLC"},"rank":12794},"hegemony":5.445665345346572e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":3,"name":"irr-TC-all-oldcomer-no-record"},{"count":3,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":3,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":3,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":3,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":3,"name":"irr-REACH-all-oldcomer-no-record"},{"count":3,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"count":3,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"hegemony-valley-paths"},{"count":2,"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"count":3,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":3,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":3,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":2,"name":"rpki-all-oldcomer-valid-roa"},{"count":3,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":3,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":3,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":2,"name":"rpki-some-oldcomer-valid-roa"},{"count":3,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":3,"name":"outdated-info"},{"count":3,"name":"sub-path-longer"},{"count":2,"name":"no-common-hops-super-pfx"},{"count":3,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"anycast-prefix"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-exact-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"}],"pfx_events_cnt":3,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.1034402847290039,"proc_time_tagger":0.025446176528930664,"total_tags_cnt":33},"event_type":"defcon","finished_ts":null,"id":"defcon-1789667700-19871","insert_ts":1789668982,"last_modified_ts":1789668982,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"50.6.176.0/24","super_pfx":"50.6.128.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"96.125.160.0/24","super_pfx":"96.125.160.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"anycast-prefix"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"216.21.231.0/24","super_pfx":"216.21.230.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["19871"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["19871"],"prefixes":["96.125.160.0/24","216.21.230.0/23","50.6.128.0/18","96.125.160.0/23","216.21.231.0/24","50.6.176.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"anycast-prefix"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["19871"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer"],["sub-path-longer","hegemony-valley-paths"]]},"view_ts":1789667700},{"asinfo":{"264065":{"asrank":{"asn":"264065","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-264065-LACNIC","orgName":"Wavetech Internet"},"rank":12794},"hegemony":3.275588177652073e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":6,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":6,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":6,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":6,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":6,"name":"irr-REACH-all-oldcomer-no-record"},{"count":6,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":6,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":6,"name":"irr-TC-all-oldcomer-more-specific-record"},{"count":6,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":6,"name":"irr-RADB-all-oldcomer-no-record"},{"count":6,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":6,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":6,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":6,"name":"rpki-all-oldcomer-valid-roa"},{"count":6,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":6,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":6,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":6,"name":"sub-path-equal"},{"count":6,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":6,"name":"rpki-some-oldcomer-valid-roa"},{"count":6,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":6,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":6,"name":"outdated-info"},{"count":6,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":6,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":6,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.003627777099609375,"proc_time_tagger":0.02778768539428711,"total_tags_cnt":25},"event_type":"defcon","finished_ts":null,"id":"defcon-1789667700-264065","insert_ts":1789668982,"last_modified_ts":1789668982,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"143.202.3.0/24","super_pfx":"143.202.2.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"143.202.0.0/24","super_pfx":"143.202.0.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"143.202.0.0/23","super_pfx":"143.202.0.0/22","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"143.202.2.0/23","super_pfx":"143.202.0.0/22","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"143.202.1.0/24","super_pfx":"143.202.0.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"143.202.2.0/24","super_pfx":"143.202.2.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["264065"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["264065"],"prefixes":["143.202.0.0/23","143.202.3.0/24","143.202.0.0/22","143.202.2.0/24","143.202.0.0/24","143.202.2.0/23","143.202.1.0/24"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["264065"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[[]]},"view_ts":1789667700},{"asinfo":{"47583":{"asrank":{"asn":"47583","asnDegree":{"customer":0,"peer":85,"provider":24},"asnName":"AS-HOSTINGER","organization":{"country":{"iso":"CY"},"orgId":"ORG-ARTA1-RIPE","orgName":"Hostinger International Limited"},"rank":12794},"hegemony":0.0004083118691106824}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"sub-path-shorter"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0006396770477294922,"proc_time_tagger":0.002525806427001953,"total_tags_cnt":25},"event_type":"defcon","finished_ts":null,"id":"defcon-1789667700-47583","insert_ts":1789668982,"last_modified_ts":1789668982,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"2.25.232.0/24","super_pfx":"2.25.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["47583"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["47583"],"prefixes":["2.25.232.0/24","2.25.128.0/17"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["47583"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789667700},{"asinfo":{"46606":{"asrank":{"asn":"46606","asnDegree":{"customer":0,"peer":1,"provider":4},"asnName":"UNIFIEDLAYER-AS-1","organization":{"country":{"iso":"US"},"orgId":"BLUEH-2-ARIN","orgName":"Unified Layer"},"rank":12794},"hegemony":0.00015478858375659118}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":4,"name":"irr-TC-all-oldcomer-no-record"},{"count":4,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":4,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":4,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":4,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":4,"name":"irr-REACH-all-oldcomer-no-record"},{"count":4,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-exact-record"},{"count":2,"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"count":4,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":4,"name":"hegemony-valley-paths"},{"count":4,"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"count":4,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":4,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":4,"name":"rpki-all-oldcomer-valid-roa"},{"count":4,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":4,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":4,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":4,"name":"rpki-some-oldcomer-valid-roa"},{"count":4,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":4,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":4,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":4,"name":"outdated-info"},{"count":4,"name":"sub-path-longer"},{"count":4,"name":"no-common-hops-super-pfx"},{"count":4,"name":"irr-BELL-all-oldcomer-no-record"},{"count":3,"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-exact-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"}],"pfx_events_cnt":4,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.1805410385131836,"proc_time_tagger":0.018067598342895508,"total_tags_cnt":31},"event_type":"defcon","finished_ts":null,"id":"defcon-1789667700-46606","insert_ts":1789668982,"last_modified_ts":1789668982,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"162.215.230.0/24","super_pfx":"162.215.230.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"162.144.18.0/23","super_pfx":"162.144.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"162.144.128.0/19","super_pfx":"162.144.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"162.210.70.0/24","super_pfx":"162.210.70.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["46606"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["46606"],"prefixes":["162.215.230.0/23","162.215.230.0/24","162.144.128.0/19","162.144.18.0/23","162.210.70.0/23","162.210.70.0/24","162.144.0.0/16"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["46606"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer","hegemony-valley-paths"]]},"view_ts":1789667700},{"asinfo":{"264119":{"asrank":{"asn":"264119","asnDegree":{"customer":2,"peer":12,"provider":3},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-264119-LACNIC","orgName":"UBA CONECT TELECOM LTDA - ME"},"rank":5958},"hegemony":1.3102352710608292e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":12,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":12,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":12,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":12,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":12,"name":"irr-REACH-all-oldcomer-no-record"},{"count":12,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":12,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":12,"name":"irr-TC-all-oldcomer-more-specific-record"},{"count":12,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":6,"name":"irr-RADB-all-oldcomer-no-record"},{"count":12,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":12,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":12,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":12,"name":"rpki-all-oldcomer-valid-roa"},{"count":12,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":11,"name":"no-common-hops-sub-pfx"},{"count":12,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":12,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":11,"name":"sub-path-equal"},{"count":12,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":12,"name":"rpki-some-oldcomer-valid-roa"},{"count":12,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":12,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":12,"name":"outdated-info"},{"count":12,"name":"no-common-hops-super-pfx"},{"count":12,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":12,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":6,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"sub-path-longer"}],"pfx_events_cnt":12,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.007610797882080078,"proc_time_tagger":0.043763160705566406,"total_tags_cnt":30},"event_type":"defcon","finished_ts":null,"id":"defcon-1789667700-264119","insert_ts":1789668982,"last_modified_ts":1789668983,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"187.121.232.0/23","super_pfx":"187.121.232.0/22","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"138.59.217.0/24","super_pfx":"138.59.216.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"187.121.234.0/23","super_pfx":"187.121.232.0/22","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"187.121.232.0/24","super_pfx":"187.121.232.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"138.59.216.0/24","super_pfx":"138.59.216.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"187.121.235.0/24","super_pfx":"187.121.234.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"138.59.216.0/23","super_pfx":"138.59.216.0/22","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"138.59.218.0/23","super_pfx":"138.59.216.0/22","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"187.121.233.0/24","super_pfx":"187.121.232.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"138.59.218.0/24","super_pfx":"138.59.218.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"187.121.234.0/24","super_pfx":"187.121.234.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"138.59.219.0/24","super_pfx":"138.59.218.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["264119"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["264119"],"prefixes":["187.121.232.0/22","187.121.234.0/24","187.121.234.0/23","138.59.217.0/24","138.59.216.0/23","187.121.232.0/24","187.121.232.0/23","187.121.235.0/24","187.121.233.0/24","138.59.216.0/24","138.59.218.0/23","138.59.216.0/22","138.59.218.0/24","138.59.219.0/24"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["264119"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer"],[],["hegemony-valley-paths"]]},"view_ts":1789667700},{"asinfo":{"268791":{"asrank":{"asn":"268791","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-268791-LACNIC","orgName":"AREA 51 PROVEDOR DE INTERNET LTDA"},"rank":12794},"hegemony":6.551333639962815e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0006914138793945312,"proc_time_tagger":0.0021953582763671875,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789667700-268791","insert_ts":1789668982,"last_modified_ts":1789668983,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"45.172.66.159/32","super_pfx":"45.172.64.0/22","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["268791"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["268791"],"prefixes":["45.172.64.0/22","45.172.66.159/32"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["268791"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789667700},{"asinfo":{"714":{"asrank":{"asn":"714","asnDegree":{"customer":2,"peer":282,"provider":18},"asnName":"APPLE-ENGINEERING","organization":{"country":{"iso":"US"},"orgId":"APPLEC-1-Z-ARIN","orgName":"Apple Inc."},"rank":5958},"hegemony":0.0054194269703182404}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":3,"name":"all-newcomers-ris-peer"},{"count":3,"name":"irr-TC-all-oldcomer-no-record"},{"count":3,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":3,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":3,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":3,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":3,"name":"irr-REACH-all-oldcomer-no-record"},{"count":3,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":3,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":3,"name":"hegemony-valley-paths"},{"count":3,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":3,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":3,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":3,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":3,"name":"no-common-hops-sub-pfx"},{"count":3,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":3,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":3,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":3,"name":"rpki-all-oldcomer-unknown-roa"},{"count":3,"name":"sub-path-equal"},{"count":3,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":3,"name":"outdated-info"},{"count":3,"name":"no-common-hops-super-pfx"},{"count":3,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":3,"name":"all-newcomers-routeviews-peer"},{"count":3,"name":"rpki-some-oldcomer-unknown-roa"},{"count":3,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":3,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0016889572143554688,"proc_time_tagger":0.011690855026245117,"total_tags_cnt":30},"event_type":"defcon","finished_ts":null,"id":"defcon-1789667700-714","insert_ts":1789668982,"last_modified_ts":1789668983,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"139.178.140.0/24","super_pfx":"139.178.128.0/18","tags":[{"name":"all-newcomers-ris-peer"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-routeviews-peer"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"139.178.141.0/24","super_pfx":"139.178.128.0/18","tags":[{"name":"all-newcomers-ris-peer"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-routeviews-peer"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"139.178.142.0/24","super_pfx":"139.178.128.0/18","tags":[{"name":"all-newcomers-ris-peer"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-routeviews-peer"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["714"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["714"],"prefixes":["139.178.142.0/24","139.178.141.0/24","139.178.128.0/18","139.178.140.0/24"],"tags":[{"name":"all-newcomers-ris-peer"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-routeviews-peer"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["714"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["hegemony-valley-paths"]]},"view_ts":1789667700},{"asinfo":{"267388":{"asrank":{"asn":"267388","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-267388-LACNIC","orgName":"Voafibra Comunicacao"},"rank":12794},"hegemony":1.9611698469480184e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-more-specific-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"sub-path-equal"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004911422729492188,"proc_time_tagger":0.005534172058105469,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1789667700-267388","insert_ts":1789668982,"last_modified_ts":1789668983,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"131.196.40.0/24","super_pfx":"131.196.40.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["267388"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["267388"],"prefixes":["131.196.40.0/23","131.196.40.0/24"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["267388"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["hegemony-valley-paths"]]},"view_ts":1789667700},{"asinfo":{"26337":{"asrank":{"asn":"26337","asnDegree":{"customer":3,"peer":0,"provider":3},"asnName":"OIS1","organization":{"country":{"iso":"US"},"orgId":"OGISL-ARIN","orgName":"Oso Grande IP Services, LLC"},"rank":4894},"hegemony":1.8159056969338803e-06},"46606":{"asrank":{"asn":"46606","asnDegree":{"customer":0,"peer":1,"provider":4},"asnName":"UNIFIEDLAYER-AS-1","organization":{"country":{"iso":"US"},"orgId":"BLUEH-2-ARIN","orgName":"Unified Layer"},"rank":12794},"hegemony":0.00015478858375659118}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":8,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":8,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":8,"name":"rpki-all-oldcomer-valid-roa"},{"count":8,"name":"irr-TC-all-oldcomer-no-record"},{"count":8,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":8,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":8,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":8,"name":"all-newcomer-pfxs"},{"count":5,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":8,"name":"irr-REACH-all-newcomer-no-record"},{"count":8,"name":"some-victims-stub-ases"},{"count":8,"name":"irr-BBOI-all-newcomer-no-record"},{"count":8,"name":"all-newcomers-are-rel-upstream"},{"count":8,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":8,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":8,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":8,"name":"irr-APNIC-all-newcomer-no-record"},{"count":8,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":8,"name":"some-newcomers-are-rel-neighbor"},{"count":8,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":8,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":8,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":8,"name":"some-newcomers-are-providers"},{"count":8,"name":"irr-RIPE-all-newcomer-no-record"},{"count":8,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":8,"name":"irr-BELL-all-oldcomer-no-record"},{"count":8,"name":"irr-PANIX-all-newcomer-no-record"},{"count":8,"name":"irr-RADB-all-newcomer-no-record"},{"count":8,"name":"all-newcomers-are-providers"},{"count":4,"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"count":8,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":8,"name":"all-newcomers-are-rel-neighbor"},{"count":8,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":8,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":8,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":8,"name":"irr-TC-all-newcomer-no-record"},{"count":8,"name":"irr-REACH-all-oldcomer-no-record"},{"count":8,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":8,"name":"single-Tier-1-upstream-on-subpaths-1-hop"},{"count":8,"name":"previously-announced-by-some-newcomers"},{"count":8,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":8,"name":"some-newcomer-announced-no-pfxs"},{"count":8,"name":"outdated-info"},{"count":8,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":8,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":8,"name":"newcomer-less-specific"},{"count":8,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":8,"name":"rpki-some-newcomer-valid-roa"},{"count":8,"name":"some-newcomers-are-rel-upstream"},{"count":8,"name":"irr-BELL-all-newcomer-no-record"},{"count":8,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":8,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":8,"name":"all-origins-same-country"},{"count":8,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":8,"name":"rpki-some-oldcomer-valid-roa"},{"count":8,"name":"all-newcomer-announced-no-pfxs"},{"count":8,"name":"rpki-all-newcomer-valid-roa"},{"count":4,"name":"irr-ARIN-all-newcomer-more-specific-record"},{"count":8,"name":"newcomer-more-specific"},{"count":8,"name":"all-newcomers"},{"count":3,"name":"previously-announced-by-all-newcomers"},{"count":8,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":8,"name":"all-victims-stub-ases"},{"count":8,"name":"no-origins-prev-view"},{"count":7,"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"count":8,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":4,"name":"irr-all-newcomer-no-record"},{"count":2,"name":"irr-RADB-all-oldcomer-no-record"},{"count":4,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":4,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-exact-record"}],"pfx_events_cnt":8,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.4696836471557617,"proc_time_tagger":0.10269999504089355,"total_tags_cnt":72},"event_type":"submoas","finished_ts":null,"id":"submoas-1789667700-46606=26337","insert_ts":1789668982,"last_modified_ts":1789668983,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":75,"explanation":"all newcomers are more specific than their IRR records","inference_id":"all-newcomers-more-specific-irr-record","labels":["legitimate"],"suspicion_level":20},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":92,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s) and have advertised the prefix in the past","inference_id":"all-newcomers-providers-announced-prefix","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"74.220.199.0/24","super_pfx":"74.220.192.0/19","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"single-Tier-1-upstream-on-subpaths-1-hop"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-ARIN-all-newcomer-more-specific-record"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"no-origins-prev-view"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":91,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s). Probably, they are providing services to their customers (e.g., blackholing)","inference_id":"all-newcomers-providers","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"199.79.63.0/24","super_pfx":"199.79.62.0/23","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"single-Tier-1-upstream-on-subpaths-1-hop"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"all-victims-stub-ases"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":92,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s) and have advertised the prefix in the past","inference_id":"all-newcomers-providers-announced-prefix","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"108.167.140.0/24","super_pfx":"108.167.140.0/23","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"single-Tier-1-upstream-on-subpaths-1-hop"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"no-origins-prev-view"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":91,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s). Probably, they are providing services to their customers (e.g., blackholing)","inference_id":"all-newcomers-providers","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"207.174.213.0/24","super_pfx":"207.174.212.0/22","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"single-Tier-1-upstream-on-subpaths-1-hop"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"all-victims-stub-ases"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":75,"explanation":"all newcomers are more specific than their IRR records","inference_id":"all-newcomers-more-specific-irr-record","labels":["legitimate"],"suspicion_level":20},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":92,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s) and have advertised the prefix in the past","inference_id":"all-newcomers-providers-announced-prefix","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"162.241.0.0/23","super_pfx":"162.240.0.0/15","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-ALTDB-all-oldcomer-exact-record"},{"name":"single-Tier-1-upstream-on-subpaths-1-hop"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-ARIN-all-newcomer-more-specific-record"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":91,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s). Probably, they are providing services to their customers (e.g., blackholing)","inference_id":"all-newcomers-providers","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"207.174.215.0/24","super_pfx":"207.174.212.0/22","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"single-Tier-1-upstream-on-subpaths-1-hop"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"all-victims-stub-ases"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":91,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s). Probably, they are providing services to their customers (e.g., blackholing)","inference_id":"all-newcomers-providers","labels":["legitimate"],"suspicion_level":20},{"confidence":75,"explanation":"all newcomers are more specific than their IRR records","inference_id":"all-newcomers-more-specific-irr-record","labels":["legitimate"],"suspicion_level":20},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"162.240.160.0/24","super_pfx":"162.240.0.0/15","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"single-Tier-1-upstream-on-subpaths-1-hop"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-ARIN-all-newcomer-more-specific-record"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"all-victims-stub-ases"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":91,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s). Probably, they are providing services to their customers (e.g., blackholing)","inference_id":"all-newcomers-providers","labels":["legitimate"],"suspicion_level":20},{"confidence":75,"explanation":"all newcomers are more specific than their IRR records","inference_id":"all-newcomers-more-specific-irr-record","labels":["legitimate"],"suspicion_level":20},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"162.240.102.0/24","super_pfx":"162.240.0.0/15","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"single-Tier-1-upstream-on-subpaths-1-hop"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-ARIN-all-newcomer-more-specific-record"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"all-victims-stub-ases"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]}],"summary":{"ases":["46606","26337"],"attackers":["26337"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["46606","26337"],"prefixes":["74.220.192.0/19","207.174.212.0/22","207.174.213.0/24","108.167.140.0/23","74.220.199.0/24","162.241.0.0/23","162.240.160.0/24","207.174.215.0/24","108.167.140.0/24","162.240.102.0/24","199.79.63.0/24","162.240.0.0/15","199.79.62.0/23"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"some-victims-stub-ases"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"outdated-info"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"all-origins-same-country"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"previously-announced-by-all-newcomers"},{"name":"all-victims-stub-ases"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-exact-record"},{"name":"single-Tier-1-upstream-on-subpaths-1-hop"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-ARIN-all-newcomer-more-specific-record"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["46606"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789667700},{"asinfo":{"19871":{"asrank":{"asn":"19871","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"NETWORK-SOLUTIONS-HOSTING","organization":{"country":{"iso":"US"},"orgId":"NETWO-59-ARIN","orgName":"Network Solutions, LLC"},"rank":12794},"hegemony":5.445665345346572e-05},"40444":{"asrank":{"asn":"40444","asnDegree":{"customer":0,"peer":0,"provider":5},"asnName":"ASN-CC","organization":{"country":{"iso":"US"},"orgId":"CONST-21-ARIN","orgName":"Constant Contact, Inc"},"rank":12794},"hegemony":7.370250344958167e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"some-victims-stub-ases"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"all-victims-stub-ases"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.00036334991455078125,"proc_time_tagger":0.0072994232177734375,"total_tags_cnt":62},"event_type":"submoas","finished_ts":null,"id":"submoas-1789667700-19871=40444","insert_ts":1789668982,"last_modified_ts":1789668983,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"216.21.230.0/24","super_pfx":"216.21.230.0/23","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"all-victims-stub-ases"},{"name":"no-origins-prev-view"},{"name":"all-newcomers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]}],"summary":{"ases":["19871","40444"],"attackers":["40444"],"inference_result":{"inferences":[{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}},"newcomers":["19871","40444"],"prefixes":["216.21.230.0/24","216.21.230.0/23"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"previously-announced-by-all-newcomers"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"all-victims-stub-ases"},{"name":"some-newcomers-stub-ases"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["19871"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789667700},{"asinfo":{"19871":{"asrank":{"asn":"19871","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"NETWORK-SOLUTIONS-HOSTING","organization":{"country":{"iso":"US"},"orgId":"NETWO-59-ARIN","orgName":"Network Solutions, LLC"},"rank":12794},"hegemony":5.445665345346572e-05},"31898":{"asrank":{"asn":"31898","asnDegree":{"customer":17,"peer":126,"provider":49},"asnName":"ORACLE-BMC-31898","organization":{"country":{"iso":"US"},"orgId":"ORACLE-4-ARIN","orgName":"Oracle Corporation"},"rank":1732},"hegemony":0.0017960106410049477}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-more-specific-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"rpki-some-newcomer-valid-roa"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"rpki-all-newcomer-valid-roa"},{"count":1,"name":"irr-ARIN-all-newcomer-more-specific-record"},{"count":1,"name":"some-newcomers-routeviews-peer"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.04472160339355469,"proc_time_tagger":0.008576154708862305,"total_tags_cnt":65},"event_type":"submoas","finished_ts":null,"id":"submoas-1789667700-31898=19871","insert_ts":1789668982,"last_modified_ts":1789668983,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":75,"explanation":"all newcomers are more specific than their IRR records","inference_id":"all-newcomers-more-specific-irr-record","labels":["legitimate"],"suspicion_level":20},{"confidence":87,"explanation":"all newcomer origins are siblings with at least one customer of a potential victim","inference_id":"all-newcomers-siblings-with-oldcomers-customer","labels":["legitimate"],"suspicion_level":20},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"162.241.83.0/24","super_pfx":"162.241.82.0/23","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"hegemony-valley-paths"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"all-origins-same-country"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-ARIN-all-newcomer-more-specific-record"},{"name":"some-newcomers-routeviews-peer"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"}]}],"summary":{"ases":["31898","19871"],"attackers":["19871"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["31898","19871"],"prefixes":["162.241.82.0/23","162.241.83.0/24"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"hegemony-valley-paths"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"all-origins-same-country"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-ARIN-all-newcomer-more-specific-record"},{"name":"some-newcomers-routeviews-peer"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["31898"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789667700},{"asinfo":{"28220":{"asrank":{"asn":"28220","asnDegree":{"customer":63,"peer":30,"provider":9},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-28220-LACNIC","orgName":"Alares Cabo Servicos de Telecomunicacoes S.A."},"rank":380},"hegemony":0.00015970950041706755}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"no-common-hops-sub-pfx"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"sub-path-equal"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"no-common-hops-super-pfx"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0008230209350585938,"proc_time_tagger":0.01852560043334961,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789667400-28220","insert_ts":1789668681,"last_modified_ts":1789668681,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.89.232.0/21","super_pfx":"177.89.0.0/16","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["28220"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["28220"],"prefixes":["177.89.232.0/21","177.89.0.0/16"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["28220"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[[]]},"view_ts":1789667400},{"asinfo":{"50266":{"asrank":{"asn":"50266","asnDegree":{"customer":3,"peer":110,"provider":6},"asnName":"Odido","organization":{"country":{"iso":"NL"},"orgId":"ORG-PJB2-RIPE","orgName":"Odido Netherlands B.V."},"rank":1622},"hegemony":0.0010567577401569858}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"no-common-hops-super-pfx"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-manrs-member"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0008122920989990234,"proc_time_tagger":0.004889726638793945,"total_tags_cnt":28},"event_type":"defcon","finished_ts":null,"id":"defcon-1789667400-50266","insert_ts":1789668681,"last_modified_ts":1789668681,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"188.90.228.0/24","super_pfx":"188.90.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["50266"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["50266"],"prefixes":["188.90.228.0/24","188.90.0.0/16"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["50266"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789667400},{"asinfo":{"44244":{"asrank":{"asn":"44244","asnDegree":{"customer":1,"peer":0,"provider":1},"asnName":"IranCell-AS","organization":{"country":{"iso":"IR"},"orgId":"ORG-ICSA1-RIPE","orgName":"Iran Cell Service and Communication Company"},"rank":7805},"hegemony":0.0003943083934552619}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-manrs-member"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004124641418457031,"proc_time_tagger":0.00553584098815918,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789667400-44244","insert_ts":1789668681,"last_modified_ts":1789668681,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"5.124.253.0/24","super_pfx":"5.124.240.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["44244"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["44244"],"prefixes":["5.124.253.0/24","5.124.240.0/20"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["44244"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789667400},{"asinfo":{"398478":{"asrank":{"asn":"398478","asnDegree":{"customer":1,"peer":0,"provider":5},"asnName":"PEG-HK","organization":{"country":{"iso":"US"},"orgId":"PT-82-ARIN","orgName":"PEG TECH INC"},"rank":7805},"hegemony":4.748187609730616e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-invalid-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"sub-path-shorter"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"single-ip"},{"count":1,"name":"rpki-some-oldcomer-invalid-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004420280456542969,"proc_time_tagger":0.004098176956176758,"total_tags_cnt":28},"event_type":"defcon","finished_ts":null,"id":"defcon-1789667400-398478","insert_ts":1789668681,"last_modified_ts":1789668681,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"107.149.77.167/32","super_pfx":"107.149.76.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["398478"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["398478"],"prefixes":["107.149.77.167/32","107.149.76.0/23"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["398478"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789667400},{"asinfo":{"268954":{"asrank":{"asn":"268954","asnDegree":{"customer":0,"peer":18,"provider":3},"asnName":"","organization":{"country":{"iso":"BR"},"orgId":"@aut-268954-LACNIC","orgName":"MARAU NET TECNOLOGIA LTDA"},"rank":12794},"hegemony":3.2756668199814076e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":3,"name":"irr-TC-all-oldcomer-no-record"},{"count":3,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":3,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":3,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":3,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":3,"name":"irr-REACH-all-oldcomer-no-record"},{"count":3,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":3,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":3,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":3,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":3,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":3,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":3,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":3,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":3,"name":"rpki-all-oldcomer-unknown-roa"},{"count":3,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":3,"name":"outdated-info"},{"count":3,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":3,"name":"rpki-some-oldcomer-unknown-roa"},{"count":3,"name":"irr-BELL-all-oldcomer-no-record"},{"count":3,"name":"superpaths-include-subpaths"}],"pfx_events_cnt":3,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0013844966888427734,"proc_time_tagger":0.013865947723388672,"total_tags_cnt":25},"event_type":"defcon","finished_ts":null,"id":"defcon-1789667400-268954","insert_ts":1789668681,"last_modified_ts":1789668681,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"45.176.217.0/24","super_pfx":"45.176.216.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"45.176.216.0/24","super_pfx":"45.176.216.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"45.176.218.0/24","super_pfx":"45.176.218.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}]}],"summary":{"ases":["268954"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["268954"],"prefixes":["45.176.218.0/23","45.176.216.0/24","45.176.218.0/24","45.176.216.0/23","45.176.217.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}],"tr_worthy":false,"victims":["268954"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789667400},{"asinfo":{"14593":{"asrank":{"asn":"14593","asnDegree":{"customer":10,"peer":765,"provider":50},"asnName":"SPACEX-STARLINK","organization":{"country":{"iso":"US"},"orgId":"SETC-3-ARIN","orgName":"Space Exploration Technologies Corporation"},"rank":1517},"hegemony":0.00032003052606153066}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":2,"name":"irr-TC-all-oldcomer-no-record"},{"count":2,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":2,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":2,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":2,"name":"irr-REACH-all-oldcomer-no-record"},{"count":2,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":2,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":2,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":2,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":2,"name":"rpki-all-oldcomer-valid-roa"},{"count":2,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":2,"name":"irr-ARIN-all-oldcomer-exact-record"},{"count":2,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":2,"name":"rpki-some-oldcomer-valid-roa"},{"count":2,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":2,"name":"outdated-info"},{"count":2,"name":"sub-path-longer"},{"count":2,"name":"no-common-hops-super-pfx"},{"count":2,"name":"all-newcomers-routeviews-peer"},{"count":2,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":2,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0009024143218994141,"proc_time_tagger":0.00509953498840332,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789667400-14593","insert_ts":1789668681,"last_modified_ts":1789668681,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"98.97.161.0/24","super_pfx":"98.97.160.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"all-newcomers-routeviews-peer"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"153.67.93.0/24","super_pfx":"153.67.92.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"all-newcomers-routeviews-peer"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["14593"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["14593"],"prefixes":["98.97.160.0/23","153.67.92.0/23","153.67.93.0/24","98.97.161.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"all-newcomers-routeviews-peer"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["14593"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer"]]},"view_ts":1789667400},{"asinfo":{"28526":{"asrank":{"asn":"28526","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"","organization":{"country":{"iso":"MX"},"orgId":"@aut-28526-LACNIC","orgName":"Universidad Autonoma del Estado de Mexico"},"rank":12794},"hegemony":2.0963764336973266e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":3,"name":"irr-TC-all-oldcomer-no-record"},{"count":3,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":3,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":3,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":3,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":3,"name":"irr-REACH-all-oldcomer-no-record"},{"count":3,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":3,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":3,"name":"hegemony-valley-paths"},{"count":3,"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"count":3,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":3,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":3,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":3,"name":"rpki-all-oldcomer-valid-roa"},{"count":3,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":3,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":3,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":3,"name":"rpki-some-oldcomer-valid-roa"},{"count":3,"name":"sub-path-shorter"},{"count":3,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":3,"name":"outdated-info"},{"count":3,"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"count":3,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":3,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":3,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.1420290470123291,"proc_time_tagger":0.026286602020263672,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789667100-28526","insert_ts":1789668387,"last_modified_ts":1789668387,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"148.215.140.0/24","super_pfx":"148.215.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"148.215.199.0/24","super_pfx":"148.215.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"148.215.124.0/24","super_pfx":"148.215.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["28526"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["28526"],"prefixes":["148.215.124.0/24","148.215.0.0/16","148.215.140.0/24","148.215.199.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["28526"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789667100},{"asinfo":{"50266":{"asrank":{"asn":"50266","asnDegree":{"customer":3,"peer":110,"provider":6},"asnName":"Odido","organization":{"country":{"iso":"NL"},"orgId":"ORG-PJB2-RIPE","orgName":"Odido Netherlands B.V."},"rank":1622},"hegemony":0.0010567577401569858}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"no-common-hops-super-pfx"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-manrs-member"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0006175041198730469,"proc_time_tagger":0.0036079883575439453,"total_tags_cnt":28},"event_type":"defcon","finished_ts":null,"id":"defcon-1789667100-50266","insert_ts":1789668387,"last_modified_ts":1789668387,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"92.254.58.0/24","super_pfx":"92.254.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["50266"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["50266"],"prefixes":["92.254.58.0/24","92.254.0.0/17"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["50266"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789667100},{"asinfo":{"56041":{"asrank":{"asn":"56041","asnDegree":{"customer":7,"peer":0,"provider":1},"asnName":"CMNET-Zhejiang-AP","organization":{"country":{"iso":"CN"},"orgId":"ORG-CMCC1-AP-APNIC","orgName":"China Mobile Communications Corporation"},"rank":3055},"hegemony":0.0009875422300250198}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-invalid-roa"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"sub-path-equal"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"rpki-some-oldcomer-invalid-roa"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0009360313415527344,"proc_time_tagger":0.0032393932342529297,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1789667100-56041","insert_ts":1789668387,"last_modified_ts":1789668387,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"39.190.76.0/22","super_pfx":"39.190.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["56041"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["56041"],"prefixes":["39.190.76.0/22","39.190.0.0/16"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["56041"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["rpki-some-oldcomer-invalid-roa","rpki-all-oldcomer-invalid-roa"]]},"view_ts":1789667100},{"asinfo":{"10515":{"asrank":{"asn":"10515","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"CLT-NIC","organization":{"country":{"iso":"US"},"orgId":"VIO-2-ARIN","orgName":"VeriSign Infrastructure & Operations"},"rank":12794},"hegemony":8.136457945435495e-09},"27544":{"asrank":{"asn":"27544","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VGRS-AC21","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"36629":{"asrank":{"asn":"36629","asnDegree":{"customer":0,"peer":0,"provider":0},"asnName":"USSEA-4","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":null},"hegemony":6.091623378252464e-08},"36630":{"asrank":{"asn":"36630","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"YGTLD","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396540":{"asrank":{"asn":"396540","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396543":{"asrank":{"asn":"396543","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396547":{"asrank":{"asn":"396547","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":2.3961637451211397e-08},"396549":{"asrank":{"asn":"396549","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":3.594637539793677e-07},"396555":{"asrank":{"asn":"396555","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":1.16864708035489e-07},"396563":{"asrank":{"asn":"396563","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":1.1979347081352175e-08},"396595":{"asrank":{"asn":"396595","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"397199":{"asrank":{"asn":"397199","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC28","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":1.992949157134668e-09},"397204":{"asrank":{"asn":"397204","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC28","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"397210":{"asrank":{"asn":"397210","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC28","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":1.3977994099722606e-08},"40717":{"asrank":{"asn":"40717","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VGRS-AC26","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":4,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":4,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":4,"name":"newcomer-some-siblings"},{"count":4,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":4,"name":"newcomer-all-siblings"},{"count":4,"name":"hegemony-valley-paths"},{"count":4,"name":"all-newcomers"},{"count":4,"name":"rpki-all-newcomer-valid-roa"},{"count":4,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":4,"name":"some-newcomer-announced-no-pfxs"},{"count":4,"name":"outdated-info"},{"count":4,"name":"rpki-some-newcomer-valid-roa"},{"count":4,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":4,"name":"previously-announced-by-some-newcomers"},{"count":4,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":4,"name":"irr-PANIX-all-newcomer-no-record"},{"count":4,"name":"all-newcomer-announced-no-pfxs"},{"count":4,"name":"irr-APNIC-all-newcomer-no-record"},{"count":4,"name":"some-newcomers-stub-ases"},{"count":4,"name":"all-newcomers-manrs-member"},{"count":4,"name":"irr-BELL-all-newcomer-no-record"},{"count":4,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":4,"name":"irr-RIPE-all-newcomer-no-record"},{"count":4,"name":"all-origins-same-country"},{"count":4,"name":"irr-BBOI-all-newcomer-no-record"},{"count":4,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":4,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":4,"name":"all-newcomers-stub-ases"},{"count":4,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":4,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":4,"name":"irr-REACH-all-newcomer-no-record"},{"count":4,"name":"irr-TC-all-newcomer-no-record"},{"count":4,"name":"irr-ARIN-all-newcomer-exact-record"},{"count":4,"name":"no-origins-prev-view"},{"count":4,"name":"anycast-prefix"},{"count":4,"name":"irr-RADB-all-newcomer-exact-record"},{"count":4,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"}],"pfx_events_cnt":4,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.002699613571166992,"proc_time_tagger":0.360581636428833,"total_tags_cnt":38},"event_type":"moas","finished_ts":null,"id":"moas-1789667100-10515_27544_36629_36630_396540_396543_396547_396549_396555_396563_396595_397199_397204_397210_40717","insert_ts":1789668388,"last_modified_ts":1789668388,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1}],"prefix":"192.26.92.0/24","tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-some-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"newcomer-all-siblings"},{"name":"hegemony-valley-paths"},{"name":"all-newcomers"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-exact-record"},{"name":"no-origins-prev-view"},{"name":"anycast-prefix"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-ALTDB-all-newcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1}],"prefix":"192.12.94.0/24","tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-some-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"newcomer-all-siblings"},{"name":"hegemony-valley-paths"},{"name":"all-newcomers"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"all-newcomers-stub-ases"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-exact-record"},{"name":"no-origins-prev-view"},{"name":"anycast-prefix"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-ALTDB-all-newcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1}],"prefix":"192.31.80.0/24","tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-some-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"newcomer-all-siblings"},{"name":"hegemony-valley-paths"},{"name":"all-newcomers"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-exact-record"},{"name":"no-origins-prev-view"},{"name":"anycast-prefix"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-ALTDB-all-newcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1}],"prefix":"192.5.6.0/24","tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-some-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"newcomer-all-siblings"},{"name":"hegemony-valley-paths"},{"name":"all-newcomers"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-exact-record"},{"name":"no-origins-prev-view"},{"name":"anycast-prefix"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-ALTDB-all-newcomer-no-record"}]}],"summary":{"ases":["396547","396540","27544","396555","396543","36630","396563","397204","396595","397210","40717","36629","396549","397199","10515"],"attackers":["396547","396540","27544","396555","396543","36630","396563","397204","396595","397210","40717","36629","396549","397199","10515"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["396547","396540","27544","396555","396543","36630","396563","397204","396595","397210","40717","36629","396549","397199","10515"],"prefixes":["192.26.92.0/24","192.31.80.0/24","192.12.94.0/24","192.5.6.0/24"],"tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-some-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"newcomer-all-siblings"},{"name":"hegemony-valley-paths"},{"name":"all-newcomers"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"all-newcomers-stub-ases"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-exact-record"},{"name":"no-origins-prev-view"},{"name":"anycast-prefix"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-ALTDB-all-newcomer-no-record"}],"tr_worthy":false,"victims":[]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789667100},{"asinfo":{"36617":{"asrank":{"asn":"36617","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"AGTLD","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396563":{"asrank":{"asn":"396563","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":1.1979347081352175e-08},"396610":{"asrank":{"asn":"396610","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396620":{"asrank":{"asn":"396620","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396624":{"asrank":{"asn":"396624","asnDegree":{"customer":0,"peer":0,"provider":0},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":null},"hegemony":0},"396653":{"asrank":{"asn":"396653","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396658":{"asrank":{"asn":"396658","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":3.99393103806683e-09},"396659":{"asrank":{"asn":"396659","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396661":{"asrank":{"asn":"396661","asnDegree":{"customer":0,"peer":0,"provider":0},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":null},"hegemony":0},"396662":{"asrank":{"asn":"396662","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396666":{"asrank":{"asn":"396666","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396675":{"asrank":{"asn":"396675","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396686":{"asrank":{"asn":"396686","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396688":{"asrank":{"asn":"396688","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":2.7958869575911257e-08},"396689":{"asrank":{"asn":"396689","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396690":{"asrank":{"asn":"396690","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396692":{"asrank":{"asn":"396692","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396704":{"asrank":{"asn":"396704","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396707":{"asrank":{"asn":"396707","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396714":{"asrank":{"asn":"396714","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396721":{"asrank":{"asn":"396721","asnDegree":{"customer":0,"peer":0,"provider":0},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":null},"hegemony":0},"396726":{"asrank":{"asn":"396726","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396729":{"asrank":{"asn":"396729","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396735":{"asrank":{"asn":"396735","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396737":{"asrank":{"asn":"396737","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396741":{"asrank":{"asn":"396741","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396747":{"asrank":{"asn":"396747","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396748":{"asrank":{"asn":"396748","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396749":{"asrank":{"asn":"396749","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396761":{"asrank":{"asn":"396761","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396765":{"asrank":{"asn":"396765","asnDegree":{"customer":0,"peer":0,"provider":0},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":null},"hegemony":0},"397199":{"asrank":{"asn":"397199","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC28","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":1.992949157134668e-09},"40647":{"asrank":{"asn":"40647","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VGRS-AC25","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"40717":{"asrank":{"asn":"40717","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VGRS-AC26","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"newcomer-some-siblings"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"newcomer-all-siblings"},{"count":1,"name":"some-newcomers-manrs-member"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"rpki-all-newcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"outdated-info"},{"count":1,"name":"rpki-some-newcomer-valid-roa"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-exact-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"anycast-prefix"},{"count":1,"name":"irr-RADB-all-newcomer-exact-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.00074005126953125,"proc_time_tagger":0.1931750774383545,"total_tags_cnt":37},"event_type":"moas","finished_ts":null,"id":"moas-1789667100-36617_396563_396610_396620_396624_396653_396658_396659_396661_396662_396666_396675_396686_396688_396689_396690_396692_396704_396707_396714_396721_396726_396729_396735_396737_396741_396747_396748_396749_396761_396765_397199_40647_40717","insert_ts":1789668388,"last_modified_ts":1789668388,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1}],"prefix":"192.33.14.0/24","tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-some-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"newcomer-all-siblings"},{"name":"some-newcomers-manrs-member"},{"name":"all-newcomers"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"all-newcomers-stub-ases"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-exact-record"},{"name":"no-origins-prev-view"},{"name":"anycast-prefix"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-ALTDB-all-newcomer-no-record"}]}],"summary":{"ases":["396714","396690","396704","396666","396741","396686","40647","396726","396735","396563","396692","396747","396688","396748","396749","396620","396721","396610","40717","36617","396659","396653","396737","396707","396624","396761","396662","396658","396675","396689","396729","396765","397199","396661"],"attackers":["396714","396690","396704","396666","396741","396686","40647","396726","396735","396563","396692","396747","396688","396748","396749","396620","396721","396610","40717","36617","396659","396653","396737","396707","396624","396761","396662","396658","396675","396689","396729","396765","397199","396661"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["396714","396690","396704","396666","396741","396686","40647","396726","396735","396563","396692","396747","396688","396748","396749","396620","396721","396610","40717","36617","396659","396653","396737","396707","396624","396761","396662","396658","396675","396689","396729","396765","397199","396661"],"prefixes":["192.33.14.0/24"],"tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-some-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"newcomer-all-siblings"},{"name":"some-newcomers-manrs-member"},{"name":"all-newcomers"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"all-newcomers-stub-ases"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-exact-record"},{"name":"no-origins-prev-view"},{"name":"anycast-prefix"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-ALTDB-all-newcomer-no-record"}],"tr_worthy":false,"victims":[]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789667100},{"asinfo":{"19836":{"asrank":{"asn":"19836","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"USNYC-2","organization":{"country":{"iso":"US"},"orgId":"VIO-2-ARIN","orgName":"VeriSign Infrastructure & Operations"},"rank":12794},"hegemony":1.6292689517092673e-07},"21313":{"asrank":{"asn":"21313","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VERISIGN-AS","organization":{"country":{"iso":"US"},"orgId":"ORG-EA15-RIPE","orgName":"VeriSign Inc."},"rank":12794},"hegemony":0},"22547":{"asrank":{"asn":"22547","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VGRS-AC20","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":3.7948490214610826e-08},"36617":{"asrank":{"asn":"36617","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"AGTLD","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"36618":{"asrank":{"asn":"36618","asnDegree":{"customer":0,"peer":0,"provider":0},"asnName":"FGTLD","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":null},"hegemony":0},"36623":{"asrank":{"asn":"36623","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"HGTLD","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396542":{"asrank":{"asn":"396542","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396545":{"asrank":{"asn":"396545","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396550":{"asrank":{"asn":"396550","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396566":{"asrank":{"asn":"396566","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":2.1079875682658708e-07},"396576":{"asrank":{"asn":"396576","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396599":{"asrank":{"asn":"396599","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396604":{"asrank":{"asn":"396604","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"396615":{"asrank":{"asn":"396615","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC50-340","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"397193":{"asrank":{"asn":"397193","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VRSN-AC28","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0},"397195":{"asrank":{"asn":"397195","asnDegree":{"customer":0,"peer":0,"provider":0},"asnName":"VRSN-AC28","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":null},"hegemony":0},"40647":{"asrank":{"asn":"40647","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"VGRS-AC25","organization":{"country":{"iso":"US"},"orgId":"VGRS-ARIN","orgName":"VeriSign Global Registry Services"},"rank":12794},"hegemony":0}},"debug":{},"duration":300,"event_metrics":{"per_tag_cnt":[{"count":4,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":4,"name":"all-newcomer-announced-no-pfxs"},{"count":4,"name":"no-origins-prev-view"},{"count":4,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":4,"name":"outdated-info"},{"count":4,"name":"irr-RADB-all-newcomer-exact-record"},{"count":4,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":4,"name":"some-newcomers-stub-ases"},{"count":4,"name":"previously-announced-by-some-newcomers"},{"count":4,"name":"anycast-prefix"},{"count":4,"name":"irr-BELL-all-newcomer-no-record"},{"count":4,"name":"irr-BBOI-all-newcomer-no-record"},{"count":4,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":4,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":4,"name":"all-newcomers-stub-ases"},{"count":4,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":4,"name":"some-newcomers-manrs-member"},{"count":4,"name":"irr-REACH-all-newcomer-no-record"},{"count":4,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":4,"name":"rpki-all-newcomer-valid-roa"},{"count":4,"name":"irr-APNIC-all-newcomer-no-record"},{"count":4,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":4,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":4,"name":"irr-PANIX-all-newcomer-no-record"},{"count":4,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":4,"name":"irr-TC-all-newcomer-no-record"},{"count":4,"name":"rpki-some-newcomer-valid-roa"},{"count":4,"name":"newcomer-some-siblings"},{"count":4,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":4,"name":"irr-RIPE-all-newcomer-no-record"},{"count":4,"name":"some-newcomer-announced-no-pfxs"},{"count":4,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":4,"name":"all-newcomers"},{"count":4,"name":"irr-ARIN-all-newcomer-exact-record"},{"count":4,"name":"all-origins-same-country"}],"pfx_events_cnt":4,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.002684354782104492,"proc_time_tagger":0.4142897129058838,"total_tags_cnt":35},"event_type":"moas","finished_ts":1789667400,"id":"moas-1789667100-19836_21313_22547_36617_36618_36623_396542_396545_396550_396566_396576_396599_396604_396615_397193_397195_40647","insert_ts":1789668388,"last_modified_ts":1789668681,"pfx_events":[{"finished_ts":1789667400,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1}],"prefix":"192.41.162.0/24","tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"no-origins-prev-view"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"previously-announced-by-some-newcomers"},{"name":"anycast-prefix"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"newcomer-some-siblings"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-ARIN-all-newcomer-exact-record"},{"name":"all-origins-same-country"}]},{"finished_ts":1789667400,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1}],"prefix":"192.48.79.0/24","tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"no-origins-prev-view"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"previously-announced-by-some-newcomers"},{"name":"anycast-prefix"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"newcomer-some-siblings"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-ARIN-all-newcomer-exact-record"},{"name":"all-origins-same-country"}]},{"finished_ts":1789667400,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1}],"prefix":"192.55.83.0/24","tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"no-origins-prev-view"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"previously-announced-by-some-newcomers"},{"name":"anycast-prefix"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"newcomer-some-siblings"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-ARIN-all-newcomer-exact-record"},{"name":"all-origins-same-country"}]},{"finished_ts":1789667400,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1}],"prefix":"192.52.178.0/24","tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"no-origins-prev-view"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"previously-announced-by-some-newcomers"},{"name":"anycast-prefix"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"newcomer-some-siblings"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-ARIN-all-newcomer-exact-record"},{"name":"all-origins-same-country"}]}],"summary":{"ases":["22547","396566","396615","40647","396545","397195","36618","396542","397193","396550","36623","21313","19836","36617","396599","396604","396576"],"attackers":["22547","396566","396615","40647","396545","397195","36618","396542","397193","396550","36623","21313","19836","36617","396599","396604","396576"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["22547","396566","396615","40647","396545","397195","36618","396542","397193","396550","36623","21313","19836","36617","396599","396604","396576"],"prefixes":["192.41.162.0/24","192.48.79.0/24","192.55.83.0/24","192.52.178.0/24"],"tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"no-origins-prev-view"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"previously-announced-by-some-newcomers"},{"name":"anycast-prefix"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"newcomer-some-siblings"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-ARIN-all-newcomer-exact-record"},{"name":"all-origins-same-country"}],"tr_worthy":false,"victims":[]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789667100},{"asinfo":{"174":{"asrank":{"asn":"174","asnDegree":{"customer":6472,"peer":85,"provider":0},"asnName":"COGENT-174","organization":{"country":{"iso":"US"},"orgId":"COGC-ARIN","orgName":"Cogent Communications, LLC"},"rank":4},"hegemony":0.08410160802110535},"394684":{"asrank":{"asn":"394684","asnDegree":{"customer":45,"peer":33,"provider":6},"asnName":"AS-GOLD","organization":{"country":{"iso":"US"},"orgId":"GDU-3-ARIN","orgName":"GOLD DATA USA INC"},"rank":576},"hegemony":7.776191061944314e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"some-newcomers-manrs-member"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-exact-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"some-newcomers-routeviews-peer"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.00147247314453125,"proc_time_tagger":0.020322561264038086,"total_tags_cnt":66},"event_type":"submoas","finished_ts":null,"id":"submoas-1789667100-174=394684","insert_ts":1789668387,"last_modified_ts":1789668387,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":92,"explanation":"all newcomer(s) are customer(s) of the oldcomer(s) and have advertised the prefix in the past","inference_id":"all-newcomers-customers-announced-prefix","labels":["legitimate"],"suspicion_level":20},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"38.97.240.0/24","super_pfx":"38.0.0.0/8","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"some-newcomers-manrs-member"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"some-newcomers-routeviews-peer"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"previously-announced-by-all-newcomers"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]}],"summary":{"ases":["394684","174"],"attackers":["394684"],"inference_result":{"inferences":[{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}},"newcomers":["394684","174"],"prefixes":["38.97.240.0/24","38.0.0.0/8"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"outdated-info"},{"name":"hegemony-valley-paths"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"previously-announced-by-all-newcomers"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"some-newcomers-routeviews-peer"},{"name":"newcomer-more-specific"},{"name":"all-newcomers"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["174"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789667100},{"asinfo":{"198880":{"asrank":{"asn":"198880","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"FlashNet-Tarnobrzeg","organization":{"country":{"iso":"PL"},"orgId":"ORG-FN26-RIPE","orgName":"FLASH NET Renata Chmielowiec"},"rank":12794},"hegemony":3.2756668199814076e-07},"208732":{"asrank":{"asn":"208732","asnDegree":{"customer":2,"peer":2,"provider":4},"asnName":"AIZON-AS","organization":{"country":{"iso":"PL"},"orgId":"ORG-ASZO92-RIPE","orgName":"ABDUL PATRYK trading as \"ANETCONNECT ABDUL PATRYK SPOLKA KOMANDYTOWA\""},"rank":5958},"hegemony":7.755526700771819e-07}},"debug":{},"duration":300,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-upstream"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-upstream"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"all-victims-stub-ases"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"some-victims-stub-ases"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-providers"},{"count":1,"name":"rpki-all-newcomer-invalid-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-invalid-roa"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-newcomer-invalid-roa-due-to-as"},{"count":1,"name":"all-newcomers-are-providers"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005426406860351562,"proc_time_tagger":0.006041765213012695,"total_tags_cnt":69},"event_type":"submoas","finished_ts":1789667400,"id":"submoas-1789667100-198880=208732","insert_ts":1789668387,"last_modified_ts":1789668681,"pfx_events":[{"finished_ts":1789667400,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10},{"confidence":91,"explanation":"all newcomers have invalid ROAs (at least one due to AS) and are providers","inference_id":"rpki-all-newcomers-invalid-and-providers","labels":["misconfig","incident"],"suspicion_level":30},{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"91.240.30.205/32","super_pfx":"91.240.28.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"outdated-info"},{"name":"all-victims-stub-ases"},{"name":"single-ip"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"rpki-all-newcomer-invalid-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"all-origins-same-country"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"rpki-some-newcomer-invalid-roa"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-newcomer-invalid-roa-due-to-as"},{"name":"all-newcomers-are-providers"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"}]}],"summary":{"ases":["208732","198880"],"attackers":["208732"],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["208732","198880"],"prefixes":["91.240.30.205/32","91.240.28.0/22"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"rpki-all-newcomer-invalid-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"single-peer-on-attacker-path"},{"name":"all-origins-same-country"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"rpki-newcomer-invalid-roa-due-to-as"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"all-victims-stub-ases"},{"name":"single-ip"},{"name":"some-victims-stub-ases"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-invalid-roa"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"}],"tr_worthy":false,"victims":["198880"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789667100},{"asinfo":{"202087":{"asrank":{"asn":"202087","asnDegree":{"customer":0,"peer":15,"provider":2},"asnName":"AJSEGIB-AS","organization":{"country":{"iso":"GI"},"orgId":"ORG-AJSE1-RIPE","orgName":"GIBFIBRE LTD"},"rank":12794},"hegemony":4.913168176050896e-06},"6461":{"asrank":{"asn":"6461","asnDegree":{"customer":2429,"peer":409,"provider":0},"asnName":"ZAYO-6461","organization":{"country":{"iso":"US"},"orgId":"ZAYOB-ARIN","orgName":"Zayo Bandwidth"},"rank":8},"hegemony":0.017685173071232296}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-upstream"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-upstream"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"all-victims-stub-ases"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-valid-roa"},{"count":1,"name":"some-victims-stub-ases"},{"count":1,"name":"some-newcomers-ris-peer"},{"count":1,"name":"irr-RIPE-all-oldcomer-exact-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-providers"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-manrs-member"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"some-newcomers-routeviews-peer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-providers"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-valid-roa"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.001020669937133789,"proc_time_tagger":0.009782791137695312,"total_tags_cnt":69},"event_type":"submoas","finished_ts":1789667700,"id":"submoas-1789667100-202087=6461","insert_ts":1789668387,"last_modified_ts":1789668982,"pfx_events":[{"finished_ts":1789667700,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":92,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s) and have advertised the prefix in the past","inference_id":"all-newcomers-providers-announced-prefix","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"94.190.198.0/24","super_pfx":"94.190.196.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"outdated-info"},{"name":"all-victims-stub-ases"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-victims-stub-ases"},{"name":"some-newcomers-ris-peer"},{"name":"irr-RIPE-all-oldcomer-exact-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"hegemony-valley-paths"},{"name":"some-newcomers-routeviews-peer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"}]}],"summary":{"ases":["202087","6461"],"attackers":["6461"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["202087","6461"],"prefixes":["94.190.196.0/22","94.190.198.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"previously-announced-by-all-newcomers"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"some-newcomers-ris-peer"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"all-victims-stub-ases"},{"name":"some-victims-stub-ases"},{"name":"irr-RIPE-all-oldcomer-exact-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"hegemony-valley-paths"},{"name":"some-newcomers-routeviews-peer"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"}],"tr_worthy":false,"victims":["202087"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789667100},{"asinfo":{"36914":{"asrank":{"asn":"36914","asnDegree":{"customer":2,"peer":5,"provider":3},"asnName":"KENET-AS","organization":{"country":{"iso":"KE"},"orgId":"ORG-KEN1-AFRINIC","orgName":"Kenya Education Network"},"rank":5958},"hegemony":0.00010753895676721034}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-exact-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"no-common-hops-sub-pfx"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"sub-path-equal"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-more-specific-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"no-common-hops-super-pfx"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-manrs-member"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0009706020355224609,"proc_time_tagger":0.010265111923217773,"total_tags_cnt":29},"event_type":"defcon","finished_ts":null,"id":"defcon-1789666800-36914","insert_ts":1789668078,"last_modified_ts":1789668078,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"197.136.229.0/24","super_pfx":"197.136.0.0/14","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-exact-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-more-specific-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["36914"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["36914"],"prefixes":["197.136.0.0/14","197.136.229.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-exact-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-more-specific-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["36914"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789666800},{"asinfo":{"8151":{"asrank":{"asn":"8151","asnDegree":{"customer":83,"peer":18,"provider":10},"asnName":"","organization":{"country":{"iso":"MX"},"orgId":"@aut-28513-LACNIC","orgName":"Uninet S.A. de C.V."},"rank":499},"hegemony":0.004464319477778995}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"no-common-hops-sub-pfx"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"sub-path-shorter"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.000762939453125,"proc_time_tagger":0.003135204315185547,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1789666800-8151","insert_ts":1789668078,"last_modified_ts":1789668078,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"187.171.21.0/24","super_pfx":"187.171.0.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["8151"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["8151"],"prefixes":["187.171.21.0/24","187.171.0.0/19"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["8151"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789666800},{"asinfo":{"9812":{"asrank":{"asn":"9812","asnDegree":{"customer":1,"peer":0,"provider":2},"asnName":"CNNIC-CN-COLNET","organization":{"country":{"iso":"CN"},"orgId":"@aut-9812-APNIC","orgName":"Oriental Cable Network Co., Ltd."},"rank":7805},"hegemony":0.00012531141441430853}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-invalid-roa"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"rpki-some-oldcomer-invalid-roa"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0007328987121582031,"proc_time_tagger":0.01569509506225586,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1789666800-9812","insert_ts":1789668078,"last_modified_ts":1789668078,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"211.144.72.0/24","super_pfx":"211.144.64.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["9812"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["9812"],"prefixes":["211.144.72.0/24","211.144.64.0/20"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["9812"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer","rpki-some-oldcomer-invalid-roa","rpki-all-oldcomer-invalid-roa"]]},"view_ts":1789666800},{"asinfo":{"44244":{"asrank":{"asn":"44244","asnDegree":{"customer":1,"peer":0,"provider":1},"asnName":"IranCell-AS","organization":{"country":{"iso":"IR"},"orgId":"ORG-ICSA1-RIPE","orgName":"Iran Cell Service and Communication Company"},"rank":7805},"hegemony":0.0003943083934552619}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-manrs-member"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004086494445800781,"proc_time_tagger":0.004893064498901367,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789666800-44244","insert_ts":1789668078,"last_modified_ts":1789668078,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"5.125.137.0/24","super_pfx":"5.125.128.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["44244"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["44244"],"prefixes":["5.125.128.0/20","5.125.137.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["44244"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789666800},{"asinfo":{"272968":{"asrank":{"asn":"272968","asnDegree":{"customer":0,"peer":0,"provider":0},"asnName":"","organization":{"country":{"iso":"VE"},"orgId":"@aut-272968-LACNIC","orgName":"LATIN AMERICAN CABLE,C.A"},"rank":null},"hegemony":0},"394684":{"asrank":{"asn":"394684","asnDegree":{"customer":45,"peer":33,"provider":6},"asnName":"AS-GOLD","organization":{"country":{"iso":"US"},"orgId":"GDU-3-ARIN","orgName":"GOLD DATA USA INC"},"rank":576},"hegemony":7.776191061944314e-05}},"debug":{},"duration":300,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-some-newcomer-exact-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-some-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"all-newcomers"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0011298656463623047,"proc_time_tagger":0.011673927307128906,"total_tags_cnt":32},"event_type":"moas","finished_ts":1789667100,"id":"moas-1789666800-272968_394684","insert_ts":1789668078,"last_modified_ts":1789668388,"pfx_events":[{"finished_ts":1789667100,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":70,"explanation":"some newcomers have exact IRR records","inference_id":"some-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":20}],"prefix":"38.97.240.0/24","tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"no-origins-prev-view"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RADB-some-newcomer-exact-record"},{"name":"outdated-info"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"some-newcomers-stub-ases"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RADB-some-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"all-newcomers"}]}],"summary":{"ases":["272968","394684"],"attackers":["272968","394684"],"inference_result":{"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3}],"primary_inference":{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3}},"newcomers":["272968","394684"],"prefixes":["38.97.240.0/24"],"tags":[{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"no-origins-prev-view"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RADB-some-newcomer-exact-record"},{"name":"outdated-info"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"some-newcomers-stub-ases"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RADB-some-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"all-newcomers"}],"tr_worthy":false,"victims":[]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789666800},{"asinfo":{"18731":{"asrank":{"asn":"18731","asnDegree":{"customer":0,"peer":1,"provider":3},"asnName":"CITYSIDE-01","organization":{"country":{"iso":"US"},"orgId":"CNL-178-ARIN","orgName":"Cityside Fiber"},"rank":12794},"hegemony":2.456750114986056e-07},"2914":{"asrank":{"asn":"2914","asnDegree":{"customer":1446,"peer":57,"provider":0},"asnName":"NTT-DATA-2914","organization":{"country":{"iso":"US"},"orgId":"NTTAM-1-ARIN","orgName":"NTT America, Inc."},"rank":5},"hegemony":0.04094409700189974}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-ris-peer"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-manrs-member"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"single-Tier-1-upstream-on-subpaths-1-hop"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-valid-roa"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"rpki-all-newcomer-valid-roa"},{"count":1,"name":"some-newcomers-routeviews-peer"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0366368293762207,"proc_time_tagger":0.014945745468139648,"total_tags_cnt":63},"event_type":"submoas","finished_ts":null,"id":"submoas-1789666800-2914=18731","insert_ts":1789668078,"last_modified_ts":1789668079,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"157.238.80.0/20","super_pfx":"157.238.0.0/16","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-ris-peer"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"single-Tier-1-upstream-on-subpaths-1-hop"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-routeviews-peer"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]}],"summary":{"ases":["18731","2914"],"attackers":["18731"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["18731","2914"],"prefixes":["157.238.0.0/16","157.238.80.0/20"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-origins-same-country"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"some-newcomers-stub-ases"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-ris-peer"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"single-Tier-1-upstream-on-subpaths-1-hop"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-routeviews-peer"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["2914"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789666800},{"asinfo":{"174":{"asrank":{"asn":"174","asnDegree":{"customer":6472,"peer":85,"provider":0},"asnName":"COGENT-174","organization":{"country":{"iso":"US"},"orgId":"COGC-ARIN","orgName":"Cogent Communications, LLC"},"rank":4},"hegemony":0.08410160802110535},"272968":{"asrank":{"asn":"272968","asnDegree":{"customer":0,"peer":0,"provider":0},"asnName":"","organization":{"country":{"iso":"VE"},"orgId":"@aut-272968-LACNIC","orgName":"LATIN AMERICAN CABLE,C.A"},"rank":null},"hegemony":0},"394684":{"asrank":{"asn":"394684","asnDegree":{"customer":45,"peer":33,"provider":6},"asnName":"AS-GOLD","organization":{"country":{"iso":"US"},"orgId":"GDU-3-ARIN","orgName":"GOLD DATA USA INC"},"rank":576},"hegemony":7.776191061944314e-05}},"debug":{},"duration":300,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-RADB-some-newcomer-exact-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-some-newcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-manrs-member"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"some-newcomers-routeviews-peer"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"submoas-causing-moas-subpfx"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.000675201416015625,"proc_time_tagger":0.021126508712768555,"total_tags_cnt":64},"event_type":"submoas","finished_ts":1789667100,"id":"submoas-1789666800-174=272968_394684","insert_ts":1789668078,"last_modified_ts":1789668387,"pfx_events":[{"finished_ts":1789667100,"inferences":[{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":70,"explanation":"some newcomers have exact IRR records","inference_id":"some-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":20},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"38.97.240.0/24","super_pfx":"38.0.0.0/8","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"outdated-info"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-RADB-some-newcomer-exact-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"all-newcomer-pfxs"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"previously-announced-by-some-newcomers"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RADB-some-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"hegemony-valley-paths"},{"name":"some-newcomers-routeviews-peer"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"submoas-causing-moas-subpfx"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"}]}],"summary":{"ases":["394684","174","272968"],"attackers":["394684","272968"],"inference_result":{"inferences":[{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}},"newcomers":["394684","174","272968"],"prefixes":["38.97.240.0/24","38.0.0.0/8"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"outdated-info"},{"name":"some-newcomers-are-customers"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-RADB-some-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"submoas-causing-moas-subpfx"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RADB-some-newcomer-exact-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"hegemony-valley-paths"},{"name":"some-newcomers-routeviews-peer"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"}],"tr_worthy":false,"victims":["174"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789666800},{"asinfo":{"26496":{"asrank":{"asn":"26496","asnDegree":{"customer":6,"peer":58,"provider":5},"asnName":"AS-26496-GO-DADDY-COM-LLC","organization":{"country":{"iso":"US"},"orgId":"GODAD-ARIN","orgName":"GoDaddy.com, LLC"},"rank":2826},"hegemony":0.0003091260965199902},"398101":{"asrank":{"asn":"398101","asnDegree":{"customer":1,"peer":0,"provider":1},"asnName":"GO-DADDY-COM-LLC","organization":{"country":{"iso":"US"},"orgId":"GODAD-ARIN","orgName":"GoDaddy.com, LLC"},"rank":7805},"hegemony":0.0001380694097039015}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"oldcomer-newcomer-all-siblings"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-upstream"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-upstream"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"count":1,"name":"oldcomer-newcomer-some-siblings"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-providers"},{"count":1,"name":"rpki-all-newcomer-invalid-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"rpki-some-newcomer-invalid-roa"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-newcomer-invalid-roa-due-to-as"},{"count":1,"name":"all-newcomers-are-providers"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-more-specific-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"single-rel-upstream-chain"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.07799673080444336,"proc_time_tagger":0.02573370933532715,"total_tags_cnt":72},"event_type":"submoas","finished_ts":1789667400,"id":"submoas-1789666800-398101=26496","insert_ts":1789668078,"last_modified_ts":1789668681,"pfx_events":[{"finished_ts":1789667400,"inferences":[{"confidence":87,"explanation":"all newcomer origins are siblings with at least one customer of a potential victim","inference_id":"all-newcomers-siblings-with-oldcomers-customer","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have invalid ROAs (at least one due to AS) and are siblings; potentially forgot to issue correct ROAs for all origins","inference_id":"rpki-all-newcomers-invalid-and-siblings","labels":["misconfig","incident"],"suspicion_level":30},{"confidence":91,"explanation":"all newcomers have invalid ROAs (at least one due to AS) and are providers","inference_id":"rpki-all-newcomers-invalid-and-providers","labels":["misconfig","incident"],"suspicion_level":30},{"confidence":75,"explanation":"all newcomers have invalid ROAs (at least one due to AS) and all newcomers announce more specific prefixes than their IRR records","inference_id":"rpki-all-newcomers-invalid-more-specific-irr-record","labels":["misconfig","incident"],"suspicion_level":30},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"198.12.235.0/24","super_pfx":"198.12.232.0/21","tags":[{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"outdated-info"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"rpki-all-newcomer-invalid-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"rpki-some-newcomer-invalid-roa"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-newcomer-invalid-roa-due-to-as"},{"name":"all-newcomers-are-providers"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"single-rel-upstream-chain"}]}],"summary":{"ases":["398101","26496"],"attackers":["26496"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have invalid ROAs (at least one due to AS) and are siblings; potentially forgot to issue correct ROAs for all origins","inference_id":"rpki-all-newcomers-invalid-and-siblings","labels":["misconfig","incident"],"suspicion_level":30}],"primary_inference":{"confidence":99,"explanation":"all newcomers have invalid ROAs (at least one due to AS) and are siblings; potentially forgot to issue correct ROAs for all origins","inference_id":"rpki-all-newcomers-invalid-and-siblings","labels":["misconfig","incident"],"suspicion_level":30}},"newcomers":["398101","26496"],"prefixes":["198.12.232.0/21","198.12.235.0/24"],"tags":[{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"single-Tier-1-upstream-on-subpaths-2-hops"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"previously-announced-by-all-newcomers"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"rpki-all-newcomer-invalid-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"all-origins-same-country"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"rpki-newcomer-invalid-roa-due-to-as"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-invalid-roa"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"single-rel-upstream-chain"}],"tr_worthy":false,"victims":["398101"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789666800},{"asinfo":{"1299":{"asrank":{"asn":"1299","asnDegree":{"customer":2569,"peer":65,"provider":0},"asnName":"TWELVE99","organization":{"country":{"iso":"SE"},"orgId":"ORG-TCA32-RIPE","orgName":"Arelion Sweden AB"},"rank":3},"hegemony":0.11147959314673621},"46375":{"asrank":{"asn":"46375","asnDegree":{"customer":13,"peer":12,"provider":3},"asnName":"AS-SONICTELECOM","organization":{"country":{"iso":"US"},"orgId":"SONIC-24-ARIN","orgName":"Sonic Telecom LLC"},"rank":2088},"hegemony":0.00024430768534416497}},"debug":{},"duration":900,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-upstream"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-upstream"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"has-dps-asn"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"outdated-info"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-valid-roa"},{"count":1,"name":"some-newcomers-dps-asn"},{"count":1,"name":"some-newcomers-ris-peer"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-pfxs"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-providers"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"no-origins-prev-view"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-manrs-member"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"due-to-dps-asn"},{"count":1,"name":"some-newcomers-routeviews-peer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"some-newcomer-announced-no-pfxs"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-providers"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-valid-roa"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0003237724304199219,"proc_time_tagger":0.025803804397583008,"total_tags_cnt":69},"event_type":"submoas","finished_ts":1789667700,"id":"submoas-1789666800-46375=1299","insert_ts":1789668078,"last_modified_ts":1789668982,"pfx_events":[{"finished_ts":1789667700,"inferences":[{"confidence":91,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s). Probably, they are providing services to their customers (e.g., blackholing)","inference_id":"all-newcomers-providers","labels":["legitimate"],"suspicion_level":20},{"confidence":90,"explanation":"all origins are newcomers: 1) MOAS: the prefix was not announced before or the oldcomer disappeared and (at least) 2 new origins appeared at the same time; 2) subMOAS: similarly, all origins responsible for the subMOAS are newcomers","inference_id":"all-newcomers","labels":["legitimate"],"suspicion_level":3},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10},{"confidence":60,"explanation":"The event is caused by ASNs performing DoS Protection Services (DPS)","inference_id":"dps-asn","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"184.23.37.0/24","super_pfx":"184.23.0.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"has-dps-asn"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"outdated-info"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-dps-asn"},{"name":"some-newcomers-ris-peer"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"hegemony-valley-paths"},{"name":"due-to-dps-asn"},{"name":"some-newcomers-routeviews-peer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"}]}],"summary":{"ases":["1299","46375"],"attackers":["1299"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["1299","46375"],"prefixes":["184.23.37.0/24","184.23.0.0/18"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"has-dps-asn"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"all-newcomer-pfxs"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"newcomer-less-specific"},{"name":"due-to-dps-asn"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"all-newcomers"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomer-announced-no-pfxs"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"some-newcomers-dps-asn"},{"name":"some-newcomers-ris-peer"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"all-newcomer-announced-no-pfxs"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"no-origins-prev-view"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"some-newcomers-manrs-member"},{"name":"hegemony-valley-paths"},{"name":"some-newcomers-routeviews-peer"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"all-newcomers-are-providers"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"}],"tr_worthy":false,"victims":["46375"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789666800},{"asinfo":{"278":{"asrank":{"asn":"278","asnDegree":{"customer":1,"peer":1,"provider":6},"asnName":"","organization":{"country":{"iso":"MX"},"orgId":"@aut-278-LACNIC","orgName":"Universidad Nacional Autonoma de Mexico"},"rank":7805},"hegemony":4.209231863676109e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":4,"name":"irr-TC-all-oldcomer-no-record"},{"count":4,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":4,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":4,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":4,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":4,"name":"irr-REACH-all-oldcomer-no-record"},{"count":4,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":4,"name":"hegemony-valley-paths"},{"count":4,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":4,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":4,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":4,"name":"rpki-all-oldcomer-valid-roa"},{"count":4,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":4,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":4,"name":"irr-WCGDB-all-oldcomer-more-specific-record"},{"count":4,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":4,"name":"rpki-some-oldcomer-valid-roa"},{"count":4,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":4,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":4,"name":"outdated-info"},{"count":4,"name":"sub-path-longer"},{"count":4,"name":"no-common-hops-super-pfx"},{"count":4,"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"count":4,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":4,"name":"all-newcomers-manrs-member"},{"count":4,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":4,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0020799636840820312,"proc_time_tagger":0.03208446502685547,"total_tags_cnt":28},"event_type":"defcon","finished_ts":null,"id":"defcon-1789666500-278","insert_ts":1789667782,"last_modified_ts":1789667782,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"132.248.14.0/24","super_pfx":"132.248.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-more-specific-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"132.248.29.0/24","super_pfx":"132.248.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-more-specific-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"132.248.8.0/24","super_pfx":"132.248.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-more-specific-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"132.248.202.0/24","super_pfx":"132.248.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-more-specific-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["278"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["278"],"prefixes":["132.248.202.0/24","132.248.0.0/17","132.248.29.0/24","132.248.14.0/24","132.248.128.0/17","132.248.8.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-more-specific-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["278"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789666500},{"asinfo":{"198995":{"asrank":{"asn":"198995","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"SULIKANET-AS","organization":{"country":{"iso":"PL"},"orgId":"ORG-SSTL3-RIPE","orgName":"SulikaNET s.c. Tomasz Lewko i Pawel Mojzuk"},"rank":12794},"hegemony":4.0944852220650916e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":2,"name":"irr-TC-all-oldcomer-no-record"},{"count":2,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":2,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":2,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":2,"name":"irr-REACH-all-oldcomer-no-record"},{"count":2,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":2,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-RADB-all-oldcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":2,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":2,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":2,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":2,"name":"rpki-all-oldcomer-unknown-roa"},{"count":2,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":2,"name":"outdated-info"},{"count":2,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":2,"name":"sub-path-longer"},{"count":2,"name":"single-ip"},{"count":2,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":2,"name":"rpki-some-oldcomer-unknown-roa"},{"count":2,"name":"irr-BELL-all-oldcomer-no-record"},{"count":2,"name":"long-prefix"}],"pfx_events_cnt":2,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0011758804321289062,"proc_time_tagger":0.005867958068847656,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1789666500-198995","insert_ts":1789667782,"last_modified_ts":1789667782,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"91.240.197.116/32","super_pfx":"91.240.196.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]},{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"91.240.196.4/32","super_pfx":"91.240.196.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["198995"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["198995"],"prefixes":["91.240.196.4/32","91.240.197.116/32","91.240.196.0/22"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"outdated-info"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["198995"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1789666500}],"draw":null,"recordsFiltered":0,"recordsTotal":10000}