{"copyright":"This data is Copyright (c) 2021-2026 Georgia Tech Research Corporation. All Rights Reserved. This data is provided for academic and educational use only; commercial use and bulk scraping are prohibited. Your use of this API is subject to our Acceptable Use Policy which can be found at https://grip.inetintel.cc.gatech.edu/aup/","data":[{"asinfo":{"3216":{"asrank":{"asn":"3216","asnDegree":{"customer":899,"peer":1100,"provider":8},"asnName":"SOVAM-AS","organization":{"country":{"iso":"RU"},"orgId":"ORG-ES15-RIPE","orgName":"PJSC \"Vimpelcom\""},"rank":29},"hegemony":0.001547217656994271}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"all-oldcomers-routeviews-peer"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"},{"count":1,"name":"superpaths-include-subpaths"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.000789642333984375,"proc_time_tagger":0.016416549682617188,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1784847300-3216","insert_ts":1784849859,"last_modified_ts":1784849859,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"195.46.168.240/32","super_pfx":"195.46.168.0/24","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"superpaths-include-subpaths"}]}],"summary":{"ases":["3216"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":[],"prefixes":["195.46.168.0/24","195.46.168.240/32"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"superpaths-include-subpaths"}],"tr_worthy":false,"victims":["3216"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784847300},{"asinfo":{"33923":{"asrank":{"asn":"33923","asnDegree":{"customer":1,"peer":3,"provider":4},"asnName":"ART-COM","organization":{"country":{"iso":"PL"},"orgId":"ORG-ASZO12-RIPE","orgName":"ART-COM Sp. z o.o."},"rank":7784},"hegemony":6.320025677224185e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"no-common-monitors"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0007581710815429688,"proc_time_tagger":0.004353761672973633,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1784847300-33923","insert_ts":1784849859,"last_modified_ts":1784849859,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"94.246.136.64/32","super_pfx":"94.246.128.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"no-common-monitors"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["33923"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":[],"prefixes":["94.246.136.64/32","94.246.128.0/19"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"no-common-monitors"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["33923"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784847300},{"asinfo":{"271347":{"asrank":{"asn":"271347","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"AS271347","organization":{"country":{"iso":"BR"},"orgId":"@del-271347","orgName":""},"rank":12717},"hegemony":3.283130221934642e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"superpaths-include-subpaths"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0008504390716552734,"proc_time_tagger":0.004357337951660156,"total_tags_cnt":24},"event_type":"defcon","finished_ts":null,"id":"defcon-1784847300-271347","insert_ts":1784849859,"last_modified_ts":1784849859,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"200.53.92.0/24","super_pfx":"200.53.92.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}]}],"summary":{"ases":["271347"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":[],"prefixes":["200.53.92.0/24","200.53.92.0/23"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}],"tr_worthy":false,"victims":["271347"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784847300},{"asinfo":{"24651":{"asrank":{"asn":"24651","asnDegree":{"customer":10,"peer":5,"provider":3},"asnName":"LVBALTICOM-AS","organization":{"country":{"iso":"LV"},"orgId":"ORG-JB1-RIPE","orgName":"JSC BALTICOM"},"rank":2446},"hegemony":2.981682473073824e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"},{"count":1,"name":"superpaths-include-subpaths"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004761219024658203,"proc_time_tagger":0.004113674163818359,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1784847300-24651","insert_ts":1784849859,"last_modified_ts":1784849859,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"212.142.102.216/32","super_pfx":"212.142.64.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"superpaths-include-subpaths"}]}],"summary":{"ases":["24651"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":[],"prefixes":["212.142.102.216/32","212.142.64.0/18"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"superpaths-include-subpaths"}],"tr_worthy":false,"victims":["24651"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784847300},{"asinfo":{"52821":{"asrank":{"asn":"52821","asnDegree":{"customer":0,"peer":18,"provider":3},"asnName":"AS52821","organization":{"country":{"iso":"BR"},"orgId":"@del-52821","orgName":""},"rank":12717},"hegemony":6.566260443869284e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"sub-path-equal"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005319118499755859,"proc_time_tagger":0.004477024078369141,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1784847300-52821","insert_ts":1784849859,"last_modified_ts":1784849859,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"177.72.158.225/32","super_pfx":"177.72.158.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["52821"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":[],"prefixes":["177.72.158.225/32","177.72.158.0/23"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["52821"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784847300},{"asinfo":{"201893":{"asrank":{"asn":"201893","asnDegree":{"customer":0,"peer":3,"provider":2},"asnName":"BLUE-DOT-AS","organization":{"country":{"iso":"PL"},"orgId":"ORG-PWTA1-RIPE","orgName":"Pawel Walczuk trading as \"BLUE-DOT\" S.C."},"rank":12717},"hegemony":1.149095577677125e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-invalid-roa"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"sub-path-shorter"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"rpki-some-oldcomer-invalid-roa"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004968643188476562,"proc_time_tagger":0.004297018051147461,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1784847300-201893","insert_ts":1784849859,"last_modified_ts":1784849859,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"185.229.125.221/32","super_pfx":"185.229.124.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["201893"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":[],"prefixes":["185.229.125.221/32","185.229.124.0/22"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["201893"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784847300},{"asinfo":{"60810":{"asrank":{"asn":"60810","asnDegree":{"customer":0,"peer":2,"provider":2},"asnName":"ATMEL","organization":{"country":{"iso":"PL"},"orgId":"ORG-BDTA1-RIPE","orgName":"ATMEL sp. z o. o."},"rank":12717},"hegemony":3.283130221934642e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"sub-path-shorter"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004980564117431641,"proc_time_tagger":0.0039446353912353516,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1784847300-60810","insert_ts":1784849859,"last_modified_ts":1784849859,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"185.25.109.243/32","super_pfx":"185.25.109.0/24","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-shorter"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["60810"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":[],"prefixes":["185.25.109.0/24","185.25.109.243/32"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-shorter"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["60810"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784847300},{"asinfo":{"16509":{"asrank":{"asn":"16509","asnDegree":{"customer":85,"peer":333,"provider":18},"asnName":"AMAZON-02","organization":{"country":{"iso":"US"},"orgId":"AMAZON-4-ARIN","orgName":"Amazon.com, Inc."},"rank":451},"hegemony":0.05644747774280997}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"all-oldcomers-ris-peer"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"all-oldcomers-manrs-member"},{"count":1,"name":"all-oldcomers-routeviews-peer"},{"count":1,"name":"has-dps-asn"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"no-common-hops-sub-pfx"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"sub-path-shorter"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005867481231689453,"proc_time_tagger":0.008063316345214844,"total_tags_cnt":30},"event_type":"defcon","finished_ts":null,"id":"defcon-1784847300-16509","insert_ts":1784849859,"last_modified_ts":1784849859,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"35.71.198.0/24","super_pfx":"35.71.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"all-oldcomers-manrs-member"},{"name":"all-oldcomers-routeviews-peer"},{"name":"has-dps-asn"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["16509"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":[],"prefixes":["35.71.198.0/24","35.71.128.0/17"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"all-oldcomers-manrs-member"},{"name":"all-oldcomers-routeviews-peer"},{"name":"has-dps-asn"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["16509"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784847300},{"asinfo":{"52468":{"asrank":{"asn":"52468","asnDegree":{"customer":838,"peer":50,"provider":13},"asnName":"AS52468","organization":{"country":{"iso":"PA"},"orgId":"@del-52468","orgName":""},"rank":42},"hegemony":0.0006502915149150041},"9123":{"asrank":{"asn":"9123","asnDegree":{"customer":11,"peer":36,"provider":16},"asnName":"TimeWeb-AS","organization":{"country":{"iso":"RU"},"orgId":"ORG-TL188-RIPE","orgName":"JSC \"TIMEWEB\""},"rank":2302},"hegemony":0.00010282743853606423}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"rpki-all-newcomer-invalid-roa"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"all-newcomers-routeviews-peer"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"not-previously-announced-by-any-newcomer"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"long-prefix"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-manrs-member"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-invalid-roa"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-newcomer-invalid-roa-due-to-as"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0009658336639404297,"proc_time_tagger":0.054662227630615234,"total_tags_cnt":56},"event_type":"submoas","finished_ts":null,"id":"submoas-1784847300-9123=52468","insert_ts":1784849859,"last_modified_ts":1784849859,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5},{"confidence":85,"explanation":"all newcomers have invalid ROAs (at least one due to AS) while oldcomers have all valid ROAs or are siblings of each other and at least one has a valid ROA","inference_id":"rpki-all-newcomers-invalid-all-oldcomers-valid","labels":["suspicious","incident"],"suspicion_level":80}],"sub_pfx":"92.53.96.136/32","super_pfx":"92.53.96.0/24","tags":[{"name":"rpki-all-newcomer-invalid-roa"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"all-newcomers-routeviews-peer"},{"name":"single-ip"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"long-prefix"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"rpki-some-newcomer-invalid-roa"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-newcomer-invalid-roa-due-to-as"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]}],"summary":{"ases":["9123","52468"],"attackers":["52468"],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["52468"],"prefixes":["92.53.96.136/32","92.53.96.0/24"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-routeviews-peer"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"rpki-some-newcomer-invalid-roa"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"rpki-newcomer-invalid-roa-due-to-as"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-invalid-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"single-ip"},{"name":"single-peer-on-attacker-path"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["9123"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784847300},{"asinfo":{"20473":{"asrank":{"asn":"20473","asnDegree":{"customer":656,"peer":929,"provider":21},"asnName":"AS-VULTR","organization":{"country":{"iso":"US"},"orgId":"CHOOP-1-ARIN","orgName":"The Constant Company, LLC"},"rank":95},"hegemony":0.000594744784788786}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":2,"name":"irr-TC-all-oldcomer-no-record"},{"count":2,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":2,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":2,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":2,"name":"irr-REACH-all-oldcomer-no-record"},{"count":2,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":2,"name":"all-oldcomers-ris-peer"},{"count":2,"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"count":2,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"all-oldcomers-manrs-member"},{"count":2,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":2,"name":"rpki-all-oldcomer-invalid-roa"},{"count":2,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":2,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":2,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":2,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":2,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":2,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":2,"name":"single-ip"},{"count":2,"name":"rpki-some-oldcomer-invalid-roa"},{"count":2,"name":"irr-BELL-all-oldcomer-no-record"},{"count":2,"name":"long-prefix"},{"count":2,"name":"superpaths-include-subpaths"}],"pfx_events_cnt":2,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0017552375793457031,"proc_time_tagger":0.02357625961303711,"total_tags_cnt":29},"event_type":"defcon","finished_ts":null,"id":"defcon-1784847000-20473","insert_ts":1784849780,"last_modified_ts":1784849780,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"45.76.84.155/32","super_pfx":"45.76.80.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"superpaths-include-subpaths"}]},{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"104.238.138.141/32","super_pfx":"104.238.138.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"superpaths-include-subpaths"}]}],"summary":{"ases":["20473"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":[],"prefixes":["45.76.84.155/32","45.76.80.0/20","104.238.138.0/23","104.238.138.141/32"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"superpaths-include-subpaths"}],"tr_worthy":false,"victims":["20473"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784847000},{"asinfo":{"30838":{"asrank":{"asn":"30838","asnDegree":{"customer":0,"peer":7,"provider":3},"asnName":"TELPOL","organization":{"country":{"iso":"PL"},"orgId":"ORG-JKP1-RIPE","orgName":"Jerzy Krempa \"Telpol\" PPMUE"},"rank":12717},"hegemony":1.0998486243481052e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"sub-path-shorter"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0007555484771728516,"proc_time_tagger":0.0043680667877197266,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1784847000-30838","insert_ts":1784849780,"last_modified_ts":1784849780,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"83.242.91.212/32","super_pfx":"83.242.88.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-shorter"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["30838"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":[],"prefixes":["83.242.88.0/21","83.242.91.212/32"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-shorter"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["30838"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784847000},{"asinfo":{"47252":{"asrank":{"asn":"47252","asnDegree":{"customer":0,"peer":2,"provider":2},"asnName":"LUKSUS-AS","organization":{"country":{"iso":"PL"},"orgId":"ORG-GWTA1-RIPE","orgName":"Grzegorz Wloch trading as LUKSUS"},"rank":12717},"hegemony":1.477408599870589e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"sub-path-shorter"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0007801055908203125,"proc_time_tagger":0.0045185089111328125,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1784847000-47252","insert_ts":1784849780,"last_modified_ts":1784849780,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"185.241.253.27/32","super_pfx":"185.241.252.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-shorter"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["47252"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":[],"prefixes":["185.241.253.27/32","185.241.252.0/22"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-shorter"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["47252"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784847000},{"asinfo":{"14956":{"asrank":{"asn":"14956","asnDegree":{"customer":0,"peer":0,"provider":8},"asnName":"ROUTERHOSTING","organization":{"country":{"iso":"US"},"orgId":"RL-896-ARIN","orgName":"RouterHosting LLC"},"rank":12717},"hegemony":1.7072268248818332e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-invalid-roa"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"rpki-some-oldcomer-invalid-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"},{"count":1,"name":"superpaths-include-subpaths"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0007548332214355469,"proc_time_tagger":0.004342317581176758,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1784847000-14956","insert_ts":1784849780,"last_modified_ts":1784849780,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"172.86.116.40/32","super_pfx":"172.86.112.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"superpaths-include-subpaths"}]}],"summary":{"ases":["14956"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":[],"prefixes":["172.86.112.0/21","172.86.116.40/32"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"superpaths-include-subpaths"}],"tr_worthy":false,"victims":["14956"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784847000},{"asinfo":{"37030":{"asrank":{"asn":"37030","asnDegree":{"customer":2,"peer":0,"provider":3},"asnName":"Airtel-Ghana","organization":{"country":{"iso":"GH"},"orgId":"ORG-ZCL2-AFRINIC","orgName":"Airtel Ghana Limited"},"rank":4861},"hegemony":5.1329229915084464e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"superpaths-include-subpaths"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0013287067413330078,"proc_time_tagger":0.0043795108795166016,"total_tags_cnt":24},"event_type":"defcon","finished_ts":null,"id":"defcon-1784847000-37030","insert_ts":1784849780,"last_modified_ts":1784849780,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"197.191.2.0/24","super_pfx":"197.191.2.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}]}],"summary":{"ases":["37030"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":[],"prefixes":["197.191.2.0/23","197.191.2.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}],"tr_worthy":false,"victims":["37030"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784847000},{"asinfo":{"29873":{"asrank":{"asn":"29873","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"BIZLAND-SD","organization":{"country":{"iso":"US"},"orgId":"EIG-12-ARIN","orgName":"Newfold Digital, Inc."},"rank":12717},"hegemony":2.6346829134426906e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"no-common-hops-super-pfx"},{"count":1,"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0006747245788574219,"proc_time_tagger":0.009860515594482422,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1784847000-29873","insert_ts":1784849780,"last_modified_ts":1784849780,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"65.254.244.0/24","super_pfx":"65.254.224.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["29873"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":[],"prefixes":["65.254.244.0/24","65.254.224.0/19"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-more-specific-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ALTDB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["29873"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["hegemony-valley-paths","sub-path-longer"]]},"view_ts":1784847000},{"asinfo":{"269292":{"asrank":{"asn":"269292","asnDegree":{"customer":0,"peer":25,"provider":1},"asnName":"AS269292","organization":{"country":{"iso":"BR"},"orgId":"@del-269292","orgName":""},"rank":12717},"hegemony":3.283130221934642e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-more-specific-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"all-oldcomers-manrs-member"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005524158477783203,"proc_time_tagger":0.009143829345703125,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1784847000-269292","insert_ts":1784849780,"last_modified_ts":1784849780,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"45.183.214.0/24","super_pfx":"45.183.214.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"hegemony-valley-paths"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["269292"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":[],"prefixes":["45.183.214.0/24","45.183.214.0/23"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-more-specific-record"},{"name":"hegemony-valley-paths"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["269292"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["hegemony-valley-paths","sub-path-longer"]]},"view_ts":1784847000},{"asinfo":{"20640":{"asrank":{"asn":"20640","asnDegree":{"customer":2,"peer":78,"provider":1},"asnName":"TITAN-NETWORKS","organization":{"country":{"iso":"DE"},"orgId":"ORG-TNGI1-RIPE","orgName":"Titan Networks Internet & Telecommunications Service Providing GmbH"},"rank":5919},"hegemony":1.580403436103289e-06},"216106":{"asrank":{"asn":"216106","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"JUSTFIBERNET","organization":{"country":{"iso":"CH"},"orgId":"ORG-JG113-RIPE","orgName":"JustFiberNet GmbH"},"rank":12717},"hegemony":3.283067258312122e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-exact-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"rpki-all-newcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-valid-roa"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"not-previously-announced-by-any-newcomer"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"single-rel-upstream-chain"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004622936248779297,"proc_time_tagger":0.009979963302612305,"total_tags_cnt":58},"event_type":"moas","finished_ts":null,"id":"moas-1784847000-20640_216106","insert_ts":1784849780,"last_modified_ts":1784849780,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":90,"explanation":"all newcomers are customers of victims","inference_id":"all-newcomers-customers","labels":["legitimate"],"suspicion_level":20},{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"prefix":"91.202.2.0/24","tags":[{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-exact-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"}]}],"summary":{"ases":["216106","20640"],"attackers":["216106"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["216106"],"prefixes":["91.202.2.0/24"],"tags":[{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-exact-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"}],"tr_worthy":false,"victims":["20640"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784847000},{"asinfo":{"402288":{"asrank":{"asn":"402288","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"EEF","organization":{"country":{"iso":"US"},"orgId":"EEL-121-ARIN","orgName":"Envision EdgeFlow LLC"},"rank":12717},"hegemony":8.700438895178584e-06},"8551":{"asrank":{"asn":"8551","asnDegree":{"customer":121,"peer":126,"provider":7},"asnName":"BEZEQ-INTERNATIONAL-AS","organization":{"country":{"iso":"IL"},"orgId":"ORG-IL9-RIPE","orgName":"Bezeq International Ltd."},"rank":321},"hegemony":0.0003942623608001082}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"not-previously-announced-by-any-newcomer"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"all-oldcomers-ris-peer"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"single-peer-on-victim-path"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"rpki-some-newcomer-valid-roa"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-exact-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-valid-roa"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"prefix-small-edit-distance"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004971027374267578,"proc_time_tagger":0.0611414909362793,"total_tags_cnt":54},"event_type":"submoas","finished_ts":null,"id":"submoas-1784847000-8551=402288","insert_ts":1784849780,"last_modified_ts":1784849780,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"sub_pfx":"79.182.241.0/24","super_pfx":"79.176.0.0/13","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"single-peer-on-victim-path"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-exact-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"prefix-small-edit-distance"}]}],"summary":{"ases":["402288","8551"],"attackers":["402288"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["402288"],"prefixes":["79.182.241.0/24","79.176.0.0/13"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"some-newcomers-stub-ases"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"single-peer-on-victim-path"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-RIPE-all-newcomer-exact-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["8551"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784847000},{"asinfo":{"34525":{"asrank":{"asn":"34525","asnDegree":{"customer":7,"peer":24,"provider":4},"asnName":"KOBA-AS","organization":{"country":{"iso":"PL"},"orgId":"ORG-KKB1-RIPE","orgName":"KOBA Sp. z o.o."},"rank":3033},"hegemony":9.151898431669809e-06},"51436":{"asrank":{"asn":"51436","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"IDEALAN-AS","organization":{"country":{"iso":"PL"},"orgId":"ORG-ISJP1-RIPE","orgName":"IDEALAN Sp. z o.o."},"rank":12717},"hegemony":9.849390665803926e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"some-victims-stub-ases"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-upstream"},{"count":1,"name":"long-prefix"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-providers"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-providers"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"single-rel-upstream-chain"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"newcomers-always-on-oldcomer-originated-paths"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-upstream"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"all-victims-stub-ases"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0002963542938232422,"proc_time_tagger":0.012002944946289062,"total_tags_cnt":63},"event_type":"submoas","finished_ts":null,"id":"submoas-1784847000-51436=34525","insert_ts":1784849780,"last_modified_ts":1784849780,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":92,"explanation":"all newcomers are providers and all the traffic towards the oldcomers goes through the newcomers","inference_id":"all-newcomers-providers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"178.212.150.86/32","super_pfx":"178.212.144.0/21","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"single-ip"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"long-prefix"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"newcomers-always-on-oldcomer-originated-paths"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"all-victims-stub-ases"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]}],"summary":{"ases":["34525","51436"],"attackers":["34525"],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["34525"],"prefixes":["178.212.144.0/21","178.212.150.86/32"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"some-newcomers-are-providers"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"previously-announced-by-all-newcomers"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"all-victims-stub-ases"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"single-ip"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"long-prefix"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"newcomers-always-on-oldcomer-originated-paths"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["51436"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784847000},{"asinfo":{"47583":{"asrank":{"asn":"47583","asnDegree":{"customer":0,"peer":72,"provider":23},"asnName":"AS-HOSTINGER","organization":{"country":{"iso":"CY"},"orgId":"ORG-ARTA1-RIPE","orgName":"Hostinger International Limited"},"rank":12717},"hegemony":0.00037705324985970896}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-invalid-roa"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"single-ip"},{"count":1,"name":"rpki-some-oldcomer-invalid-roa"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0008141994476318359,"proc_time_tagger":0.017566680908203125,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846700-47583","insert_ts":1784849483,"last_modified_ts":1784849483,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"187.77.141.41/32","super_pfx":"187.77.128.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["47583"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":[],"prefixes":["187.77.128.0/19","187.77.141.41/32"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["47583"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846700},{"asinfo":{"133300":{"asrank":{"asn":"133300","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"SOIBAM-AS","organization":{"country":{"iso":"IN"},"orgId":"@aut-133300-APNIC","orgName":"Soibam Technology Private Limited"},"rank":12717},"hegemony":3.283130221934642e-07}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":2,"name":"irr-TC-all-oldcomer-no-record"},{"count":2,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":2,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":2,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":2,"name":"irr-REACH-all-oldcomer-no-record"},{"count":2,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":2,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-RADB-all-oldcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":2,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":2,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":2,"name":"rpki-all-oldcomer-valid-roa"},{"count":2,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":2,"name":"rpki-some-oldcomer-valid-roa"},{"count":2,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":2,"name":"irr-APNIC-all-oldcomer-exact-record"},{"count":1,"name":"sub-path-longer"},{"count":2,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":2,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"sub-path-shorter"}],"pfx_events_cnt":2,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.002025127410888672,"proc_time_tagger":0.008558511734008789,"total_tags_cnt":25},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846700-133300","insert_ts":1784849483,"last_modified_ts":1784849483,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"103.72.217.0/24","super_pfx":"103.72.216.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-exact-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"103.72.219.0/24","super_pfx":"103.72.216.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-APNIC-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["133300"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":[],"prefixes":["103.72.219.0/24","103.72.217.0/24","103.72.216.0/22"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-APNIC-all-oldcomer-exact-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["133300"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer"]]},"view_ts":1784846700},{"asinfo":{"135682":{"asrank":{"asn":"135682","asnDegree":{"customer":0,"peer":0,"provider":5},"asnName":"AWDHPL-AS-IN","organization":{"country":{"iso":"IN"},"orgId":"@aut-135682-APNIC","orgName":"Advika Web Developments Hosting Pvt Ltd"},"rank":12717},"hegemony":1.1490955776771248e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-invalid-roa"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"sub-path-equal"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"rpki-some-oldcomer-invalid-roa"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0007402896881103516,"proc_time_tagger":0.0038263797760009766,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846700-135682","insert_ts":1784849483,"last_modified_ts":1784849483,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"103.69.196.97/32","super_pfx":"103.69.196.0/24","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["135682"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":[],"prefixes":["103.69.196.0/24","103.69.196.97/32"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["135682"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846700},{"asinfo":{"39153":{"asrank":{"asn":"39153","asnDegree":{"customer":22,"peer":22,"provider":5},"asnName":"SETEL-AS1","organization":{"country":{"iso":"RU"},"orgId":"ORG-JCT9-RIPE","orgName":"JOINT-STOCK COMPANY \"TELEPORT TELECOM\""},"rank":1041},"hegemony":5.49076908859329e-05},"42132":{"asrank":{"asn":"42132","asnDegree":{"customer":10,"peer":0,"provider":2},"asnName":"Radionet-AS","organization":{"country":{"iso":"RU"},"orgId":"ORG-TJ2-RIPE","orgName":"Digit One LLC"},"rank":2446},"hegemony":1.5224564377301724e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"not-previously-announced-by-any-newcomer"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"long-prefix"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.00035262107849121094,"proc_time_tagger":0.035944223403930664,"total_tags_cnt":65},"event_type":"submoas","finished_ts":null,"id":"submoas-1784846700-39153=42132","insert_ts":1784849483,"last_modified_ts":1784849483,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"Prefix more specific than a /24 (unlikely to be propagated). It could be blackholing (e.g., for DoS mitigation)","inference_id":"blackholed-prefix","labels":["legitimate"],"suspicion_level":9},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"109.71.196.192/27","super_pfx":"109.71.192.0/21","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"long-prefix"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"some-newcomers-are-customers"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-downstream"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]}],"summary":{"ases":["42132","39153"],"attackers":["42132"],"inference_result":{"inferences":[{"confidence":99,"explanation":"Prefix more specific than a /24 (unlikely to be propagated). It could be blackholing (e.g., for DoS mitigation)","inference_id":"blackholed-prefix","labels":["legitimate"],"suspicion_level":9}],"primary_inference":{"confidence":99,"explanation":"Prefix more specific than a /24 (unlikely to be propagated). It could be blackholing (e.g., for DoS mitigation)","inference_id":"blackholed-prefix","labels":["legitimate"],"suspicion_level":9}},"newcomers":["42132"],"prefixes":["109.71.192.0/21","109.71.196.192/27"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"some-newcomers-are-rel-downstream"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"long-prefix"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["39153"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846700},{"asinfo":{"16276":{"asrank":{"asn":"16276","asnDegree":{"customer":214,"peer":966,"provider":21},"asnName":"OVH","organization":{"country":{"iso":"FR"},"orgId":"ORG-OS3-RIPE","orgName":"OVH SAS"},"rank":261},"hegemony":0.0015561667457842493},"52468":{"asrank":{"asn":"52468","asnDegree":{"customer":838,"peer":50,"provider":13},"asnName":"AS52468","organization":{"country":{"iso":"PA"},"orgId":"@del-52468","orgName":""},"rank":42},"hegemony":0.0006502915149150041}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"rpki-all-newcomer-invalid-roa"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"all-newcomers-routeviews-peer"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"not-previously-announced-by-any-newcomer"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"has-dps-asn"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"long-prefix"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-manrs-member"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-invalid-roa"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"all-oldcomers-routeviews-peer"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-newcomer-invalid-roa-due-to-as"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0006239414215087891,"proc_time_tagger":0.26619482040405273,"total_tags_cnt":58},"event_type":"submoas","finished_ts":null,"id":"submoas-1784846700-16276=52468","insert_ts":1784849483,"last_modified_ts":1784849483,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5},{"confidence":85,"explanation":"all newcomers have invalid ROAs (at least one due to AS) while oldcomers have all valid ROAs or are siblings of each other and at least one has a valid ROA","inference_id":"rpki-all-newcomers-invalid-all-oldcomers-valid","labels":["suspicious","incident"],"suspicion_level":80}],"sub_pfx":"54.37.128.55/32","super_pfx":"54.37.0.0/16","tags":[{"name":"rpki-all-newcomer-invalid-roa"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"all-newcomers-routeviews-peer"},{"name":"single-ip"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"has-dps-asn"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"long-prefix"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"rpki-some-newcomer-invalid-roa"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-newcomer-invalid-roa-due-to-as"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]}],"summary":{"ases":["52468","16276"],"attackers":["52468"],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["52468"],"prefixes":["54.37.0.0/16","54.37.128.55/32"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-routeviews-peer"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"rpki-some-newcomer-invalid-roa"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"rpki-newcomer-invalid-roa-due-to-as"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-invalid-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"single-ip"},{"name":"single-peer-on-attacker-path"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"has-dps-asn"},{"name":"long-prefix"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["16276"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846700},{"asinfo":{"3810":{"asrank":{"asn":"3810","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"VWMX-AS","organization":{"country":{"iso":"US"},"orgId":"VOLKSW-1-ARIN","orgName":"Volkswagen Group of America, Inc."},"rank":12717},"hegemony":1.9697789024553486e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"no-common-hops-super-pfx"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005810260772705078,"proc_time_tagger":0.009934663772583008,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846400-3810","insert_ts":1784848963,"last_modified_ts":1784848963,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"148.203.170.0/24","super_pfx":"148.203.160.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["3810"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":[],"prefixes":["148.203.160.0/19","148.203.170.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["3810"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["hegemony-valley-paths","sub-path-longer"]]},"view_ts":1784846400},{"asinfo":{"16342":{"asrank":{"asn":"16342","asnDegree":{"customer":18,"peer":34,"provider":3},"asnName":"TOYA","organization":{"country":{"iso":"PL"},"orgId":"ORG-TS17-RIPE","orgName":"Toya sp.z.o.o"},"rank":1610},"hegemony":5.6452213010645216e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-invalid-roa"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"rpki-some-oldcomer-invalid-roa"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"},{"count":1,"name":"superpaths-include-subpaths"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.00044035911560058594,"proc_time_tagger":0.004384756088256836,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846400-16342","insert_ts":1784848963,"last_modified_ts":1784848963,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"31.182.205.118/32","super_pfx":"31.182.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"superpaths-include-subpaths"}]}],"summary":{"ases":["16342"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":[],"prefixes":["31.182.128.0/17","31.182.205.118/32"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"superpaths-include-subpaths"}],"tr_worthy":false,"victims":["16342"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846400},{"asinfo":{"18403":{"asrank":{"asn":"18403","asnDegree":{"customer":249,"peer":325,"provider":13},"asnName":"FPT-VN","organization":{"country":{"iso":"VN"},"orgId":"@aut-18403-APNIC","orgName":"FPT Telecom Company"},"rank":174},"hegemony":0.0006037120340636989}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"all-oldcomers-ris-peer"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"no-common-hops-sub-pfx"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"sub-path-equal"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-exact-record"},{"count":1,"name":"no-common-hops-super-pfx"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005059242248535156,"proc_time_tagger":0.0048406124114990234,"total_tags_cnt":28},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846400-18403","insert_ts":1784848963,"last_modified_ts":1784848963,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"42.115.117.0/24","super_pfx":"42.115.112.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-exact-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["18403"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":[],"prefixes":["42.115.117.0/24","42.115.112.0/20"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-exact-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["18403"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["hegemony-valley-paths"]]},"view_ts":1784846400},{"asinfo":{"5371":{"asrank":{"asn":"5371","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"DNIC-ASBLK-05120-05376","organization":{"country":{"iso":"US"},"orgId":"USDDD-ARIN","orgName":"United States Department of Defense (DoD)"},"rank":12717},"hegemony":4.1039712929542846e-05},"647":{"asrank":{"asn":"647","asnDegree":{"customer":0,"peer":1,"provider":1},"asnName":"DNIC-ASBLK-00616-00665","organization":{"country":{"iso":"US"},"orgId":"USDDD-ARIN","orgName":"United States Department of Defense (DoD)"},"rank":12717},"hegemony":0.0001397877119841041}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"all-victims-stub-ases"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"oldcomer-newcomer-all-siblings"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-providers"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"prefix-small-edit-distance"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-rel-upstream"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomer-newcomer-some-siblings"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-providers"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"some-victims-stub-ases"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-rel-upstream"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004353523254394531,"proc_time_tagger":0.11614489555358887,"total_tags_cnt":63},"event_type":"moas","finished_ts":null,"id":"moas-1784846400-5371_647","insert_ts":1784848963,"last_modified_ts":1784848963,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":93,"explanation":"The ASNs of (at least one) newcomer AS and (at least one) oldcomer AS are siblings/friends and previously announced similar prefixes. This event is likely benign and probably not a misconfiguration","inference_id":"sibling-close-prefix","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":87,"explanation":"all newcomer origins are siblings with at least one provider of a potential victim","inference_id":"all-newcomers-siblings-with-oldcomers-provider","labels":["legitimate"],"suspicion_level":20}],"prefix":"205.90.224.0/20","tags":[{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"hegemony-valley-paths"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-providers"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"all-newcomers-siblings-with-oldcomers-rel-upstream"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-providers"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-origins-same-country"},{"name":"some-newcomers-siblings-with-oldcomers-rel-upstream"},{"name":"irr-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-all-newcomers"},{"name":"all-newcomers-stub-ases"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"}]}],"summary":{"ases":["5371","647"],"attackers":["647"],"inference_result":{"inferences":[{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1}],"primary_inference":{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1}},"newcomers":["647"],"prefixes":["205.90.224.0/20"],"tags":[{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-origins-same-country"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"hegemony-valley-paths"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"some-newcomers-siblings-with-oldcomers-providers"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"all-newcomers-siblings-with-oldcomers-rel-upstream"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-providers"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-rel-upstream"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"}],"tr_worthy":false,"victims":["5371"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846400},{"asinfo":{"367":{"asrank":{"asn":"367","asnDegree":{"customer":0,"peer":9,"provider":2},"asnName":"DNIC-ASBLK-00306-00371","organization":{"country":{"iso":"US"},"orgId":"USDDD-ARIN","orgName":"United States Department of Defense (DoD)"},"rank":12717},"hegemony":0.002764815272966566},"721":{"asrank":{"asn":"721","asnDegree":{"customer":3,"peer":0,"provider":1},"asnName":"DNIC-ASBLK-00721-00726","organization":{"country":{"iso":"US"},"orgId":"USDDD-ARIN","orgName":"United States Department of Defense (DoD)"},"rank":433},"hegemony":0.02168209583192192}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"not-previously-announced-by-any-newcomer"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"oldcomer-newcomer-all-siblings"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"oldcomer-newcomer-some-siblings"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005996227264404297,"proc_time_tagger":0.22818899154663086,"total_tags_cnt":64},"event_type":"submoas","finished_ts":null,"id":"submoas-1784846400-721=367","insert_ts":1784848963,"last_modified_ts":1784848963,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":87,"explanation":"all newcomer origins are siblings with at least one customer of a potential victim","inference_id":"all-newcomers-siblings-with-oldcomers-customer","labels":["legitimate"],"suspicion_level":20},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"143.74.166.0/23","super_pfx":"143.74.0.0/16","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"hegemony-valley-paths"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-downstream"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]}],"summary":{"ases":["367","721"],"attackers":["367"],"inference_result":{"inferences":[{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1}],"primary_inference":{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1}},"newcomers":["367"],"prefixes":["143.74.166.0/23","143.74.0.0/16"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-all-newcomer-no-record"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"hegemony-valley-paths"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"some-newcomers-are-rel-downstream"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"some-newcomers-stub-ases"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["721"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846400},{"asinfo":{"202984":{"asrank":{"asn":"202984","asnDegree":{"customer":42,"peer":452,"provider":10},"asnName":"team-host","organization":{"country":{"iso":"RU"},"orgId":"ORG-CAA36-RIPE","orgName":"Chernyshov Aleksandr Aleksandrovich"},"rank":77},"hegemony":0.00018608763028997877},"41745":{"asrank":{"asn":"41745","asnDegree":{"customer":0,"peer":0,"provider":11},"asnName":"FORTIS-AS","organization":{"country":{"iso":"RU"},"orgId":"ORG-HIP1-RIPE","orgName":"Baykov Ilya Sergeevich"},"rank":12717},"hegemony":1.6579005339609104e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"rpki-all-newcomer-invalid-roa"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"not-previously-announced-by-any-newcomer"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"some-victims-stub-ases"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-upstream"},{"count":1,"name":"long-prefix"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-invalid-roa"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"newcomers-always-on-oldcomer-originated-paths"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-upstream"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"all-victims-stub-ases"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-newcomer-invalid-roa-due-to-as"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0009591579437255859,"proc_time_tagger":0.017872095108032227,"total_tags_cnt":59},"event_type":"submoas","finished_ts":null,"id":"submoas-1784846400-41745=202984","insert_ts":1784848963,"last_modified_ts":1784848963,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":68,"explanation":"all newcomers have invalid ROAs (at least one due to AS) and all newcomer(s) are upstream provider(s) of the oldcomer(s)","inference_id":"rpki-all-newcomers-invalid-providers-rel-upstream","labels":["misconfig","incident"],"suspicion_level":30},{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"185.68.247.223/32","super_pfx":"185.68.247.0/24","tags":[{"name":"rpki-all-newcomer-invalid-roa"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"single-ip"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-victims-stub-ases"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"long-prefix"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"rpki-some-newcomer-invalid-roa"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"newcomers-always-on-oldcomer-originated-paths"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-newcomer-invalid-roa-due-to-as"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]}],"summary":{"ases":["41745","202984"],"attackers":["202984"],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":["202984"],"prefixes":["185.68.247.223/32","185.68.247.0/24"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"rpki-some-newcomer-invalid-roa"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-origins-same-country"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-victims-stub-ases"},{"name":"rpki-newcomer-invalid-roa-due-to-as"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-invalid-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"single-ip"},{"name":"single-peer-on-attacker-path"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-upstream"},{"name":"long-prefix"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"newcomers-always-on-oldcomer-originated-paths"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["41745"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846400},{"asinfo":{"9924":{"asrank":{"asn":"9924","asnDegree":{"customer":49,"peer":52,"provider":8},"asnName":"TFN-TW","organization":{"country":{"iso":"TW"},"orgId":"@aut-9924-APNIC","orgName":"Taiwan Fixed Network, Telco and Network Service Provider."},"rank":733},"hegemony":0.001030006260159839}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":54,"name":"irr-TC-all-oldcomer-no-record"},{"count":10,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":54,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":54,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":54,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":54,"name":"irr-REACH-all-oldcomer-no-record"},{"count":54,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":54,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":54,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":54,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":54,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":54,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":54,"name":"rpki-all-oldcomer-valid-roa"},{"count":54,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":50,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":54,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":54,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":54,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":54,"name":"rpki-some-oldcomer-valid-roa"},{"count":54,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":54,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":35,"name":"sub-path-shorter"},{"count":54,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":54,"name":"irr-BELL-all-oldcomer-no-record"},{"count":41,"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"count":18,"name":"sub-path-equal"},{"count":1,"name":"superpaths-include-subpaths"},{"count":3,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":3,"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"count":1,"name":"irr-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"}],"pfx_events_cnt":54,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.024617671966552734,"proc_time_tagger":0.2030014991760254,"total_tags_cnt":31},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-9924","insert_ts":1784848885,"last_modified_ts":1784848885,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.67.220.0/24","super_pfx":"210.67.192.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.67.149.0/24","super_pfx":"210.67.144.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.34.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"49.219.230.0/23","super_pfx":"49.219.228.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.67.145.0/24","super_pfx":"210.67.144.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"60.199.253.0/24","super_pfx":"60.199.192.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.121.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"124.8.182.0/24","super_pfx":"124.8.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.67.144.0/24","super_pfx":"210.67.144.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.35.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"60.199.67.0/24","super_pfx":"60.199.64.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"175.99.125.0/24","super_pfx":"175.99.64.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.67.146.0/24","super_pfx":"210.67.144.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.37.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.124.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.81.160.0/24","super_pfx":"219.81.160.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.67.178.0/24","super_pfx":"210.67.160.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"49.219.246.0/23","super_pfx":"49.219.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"124.8.176.0/24","super_pfx":"124.8.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"124.8.175.0/24","super_pfx":"124.8.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"124.8.170.0/24","super_pfx":"124.8.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.36.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.123.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"124.8.179.0/24","super_pfx":"124.8.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.39.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"124.8.173.0/24","super_pfx":"124.8.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.63.146.0/23","super_pfx":"210.63.128.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.32.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"124.8.181.0/24","super_pfx":"124.8.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.17.37.0/24","super_pfx":"210.17.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.116.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.125.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"49.219.228.0/22","super_pfx":"49.219.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"124.8.174.0/24","super_pfx":"124.8.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.38.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"124.8.169.0/24","super_pfx":"124.8.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"203.65.161.0/24","super_pfx":"203.65.160.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"124.8.180.0/24","super_pfx":"124.8.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.122.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.33.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"124.8.168.0/24","super_pfx":"124.8.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.94.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.67.148.0/24","super_pfx":"210.67.144.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.120.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"124.8.178.0/24","super_pfx":"124.8.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"124.8.32.0/24","super_pfx":"124.8.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.63.130.0/23","super_pfx":"210.63.128.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"202.145.198.0/24","super_pfx":"202.145.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"124.8.177.0/24","super_pfx":"124.8.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"124.8.172.0/24","super_pfx":"124.8.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.91.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.67.147.0/24","super_pfx":"210.67.144.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"124.8.183.0/24","super_pfx":"124.8.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"219.86.127.0/24","super_pfx":"219.86.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["9924"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["9924"],"prefixes":["124.8.128.0/17","210.67.146.0/24","219.86.94.0/24","175.99.125.0/24","124.8.172.0/24","219.86.0.0/17","219.81.160.0/19","124.8.183.0/24","49.219.230.0/23","219.86.127.0/24","210.67.145.0/24","219.86.32.0/24","210.67.149.0/24","219.86.123.0/24","124.8.180.0/24","124.8.168.0/24","60.199.192.0/18","124.8.179.0/24","210.67.144.0/24","49.219.0.0/16","124.8.174.0/24","202.145.198.0/24","219.86.122.0/24","202.145.128.0/17","210.67.144.0/20","219.86.35.0/24","175.99.64.0/18","210.67.192.0/19","219.86.37.0/24","124.8.182.0/24","210.67.160.0/19","219.86.36.0/24","124.8.181.0/24","124.8.170.0/24","124.8.169.0/24","124.8.175.0/24","60.199.253.0/24","219.81.160.0/24","219.86.34.0/24","210.63.146.0/23","210.17.0.0/17","219.86.33.0/24","124.8.0.0/17","210.63.130.0/23","210.63.128.0/19","219.86.120.0/24","124.8.177.0/24","203.65.161.0/24","210.17.37.0/24","60.199.67.0/24","210.67.220.0/24","124.8.32.0/24","60.199.64.0/19","219.86.121.0/24","124.8.176.0/24","219.86.125.0/24","210.67.148.0/24","49.219.246.0/23","219.86.39.0/24","219.86.38.0/24","219.86.124.0/24","203.65.160.0/19","124.8.173.0/24","210.67.147.0/24","210.67.178.0/24","219.86.116.0/24","49.219.228.0/22","219.86.91.0/24","124.8.178.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}],"tr_worthy":true,"victims":["9924"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[[]]},"view_ts":1784846100},{"asinfo":{"401701":{"asrank":{"asn":"401701","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"COGNETCLOUD-2","organization":{"country":{"iso":"US"},"orgId":"COGNE-7-ARIN","orgName":"cognetcloud INC"},"rank":12717},"hegemony":1.756236536311147e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":3,"name":"spamhaus-asn-drop"},{"count":3,"name":"irr-TC-all-oldcomer-no-record"},{"count":3,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":3,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":3,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":3,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":3,"name":"irr-REACH-all-oldcomer-no-record"},{"count":3,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":3,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":3,"name":"no-common-monitors"},{"count":3,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":3,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":3,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":3,"name":"rpki-all-oldcomer-valid-roa"},{"count":3,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":3,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":3,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":3,"name":"rpki-some-oldcomer-valid-roa"},{"count":3,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":3,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":3,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":3,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.001241922378540039,"proc_time_tagger":0.008012056350708008,"total_tags_cnt":25},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-401701","insert_ts":1784848885,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":80,"explanation":"the AS was on spamhaus asn-drop list","inference_id":"suspicious-spamhaus-asn","labels":["suspicious","incident"],"suspicion_level":80}],"sub_pfx":"45.207.209.0/24","super_pfx":"45.207.208.0/22","tags":[{"name":"spamhaus-asn-drop"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"no-common-monitors"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":80,"explanation":"the AS was on spamhaus asn-drop list","inference_id":"suspicious-spamhaus-asn","labels":["suspicious","incident"],"suspicion_level":80}],"sub_pfx":"45.207.215.0/24","super_pfx":"45.207.212.0/22","tags":[{"name":"spamhaus-asn-drop"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"no-common-monitors"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":80,"explanation":"the AS was on spamhaus asn-drop list","inference_id":"suspicious-spamhaus-asn","labels":["suspicious","incident"],"suspicion_level":80}],"sub_pfx":"45.207.211.0/24","super_pfx":"45.207.208.0/22","tags":[{"name":"spamhaus-asn-drop"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"no-common-monitors"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["401701"],"attackers":[],"inference_result":{"inferences":[{"confidence":80,"explanation":"the AS was on spamhaus asn-drop list","inference_id":"suspicious-spamhaus-asn","labels":["suspicious","incident"],"suspicion_level":80}],"primary_inference":{"confidence":80,"explanation":"the AS was on spamhaus asn-drop list","inference_id":"suspicious-spamhaus-asn","labels":["suspicious","incident"],"suspicion_level":80}},"newcomers":["401701"],"prefixes":["45.207.211.0/24","45.207.215.0/24","45.207.208.0/22","45.207.212.0/22","45.207.209.0/24"],"tags":[{"name":"spamhaus-asn-drop"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"no-common-monitors"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["401701"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"131883":{"asrank":{"asn":"131883","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"GBST-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-131883-APNIC","orgName":"INSTITUTES OF GREENBIO SCIENCE AND TECHNOLOGY"},"rank":12717},"hegemony":0}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"no-common-monitors"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.00037217140197753906,"proc_time_tagger":0.002707242965698242,"total_tags_cnt":25},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-131883","insert_ts":1784848885,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"Prefix more specific than a /24 (unlikely to be propagated). It could be blackholing (e.g., for DoS mitigation)","inference_id":"blackholed-prefix","labels":["legitimate"],"suspicion_level":9}],"sub_pfx":"115.92.244.0/25","super_pfx":"115.92.244.0/24","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"no-common-monitors"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]}],"summary":{"ases":["131883"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"Prefix more specific than a /24 (unlikely to be propagated). It could be blackholing (e.g., for DoS mitigation)","inference_id":"blackholed-prefix","labels":["legitimate"],"suspicion_level":9}],"primary_inference":{"confidence":99,"explanation":"Prefix more specific than a /24 (unlikely to be propagated). It could be blackholing (e.g., for DoS mitigation)","inference_id":"blackholed-prefix","labels":["legitimate"],"suspicion_level":9}},"newcomers":["131883"],"prefixes":["115.92.244.0/24","115.92.244.0/25"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"no-common-monitors"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":false,"victims":["131883"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"17716":{"asrank":{"asn":"17716","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"NTU-TW","organization":{"country":{"iso":"TW"},"orgId":"@aut-17716-APNIC","orgName":"National Taiwan University"},"rank":12717},"hegemony":2.1034640515579332e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":3,"name":"irr-TC-all-oldcomer-no-record"},{"count":3,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":3,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":3,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":3,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":3,"name":"irr-REACH-all-oldcomer-no-record"},{"count":3,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":3,"name":"irr-all-oldcomer-no-record"},{"count":3,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":3,"name":"hegemony-valley-paths"},{"count":3,"name":"no-common-monitors"},{"count":3,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-RADB-all-oldcomer-no-record"},{"count":3,"name":"rpki-all-oldcomer-invalid-roa"},{"count":3,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":3,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":3,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":3,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":3,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":3,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":3,"name":"rpki-some-oldcomer-invalid-roa"},{"count":3,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":3,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":3,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0017242431640625,"proc_time_tagger":0.008529901504516602,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-17716","insert_ts":1784848885,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"120.96.0.0/19","super_pfx":"120.96.0.0/15","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"no-common-monitors"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"120.96.248.0/22","super_pfx":"120.96.0.0/15","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"no-common-monitors"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"120.96.240.0/21","super_pfx":"120.96.0.0/15","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"no-common-monitors"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["17716"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["17716"],"prefixes":["120.96.248.0/22","120.96.0.0/15","120.96.0.0/19","120.96.240.0/21"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"no-common-monitors"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["17716"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"38841":{"asrank":{"asn":"38841","asnDegree":{"customer":0,"peer":6,"provider":4},"asnName":"kbro-AS-TW","organization":{"country":{"iso":"TW"},"orgId":"@aut-38841-APNIC","orgName":"kbro CO. Ltd."},"rank":12717},"hegemony":0.00019116025717214453}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":19,"name":"irr-TC-all-oldcomer-no-record"},{"count":19,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":19,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":19,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":19,"name":"irr-REACH-all-oldcomer-no-record"},{"count":11,"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"count":19,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":19,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":19,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":19,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":19,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":19,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":19,"name":"rpki-all-oldcomer-valid-roa"},{"count":19,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":11,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":19,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":19,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":19,"name":"sub-path-equal"},{"count":19,"name":"rpki-some-oldcomer-valid-roa"},{"count":19,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":19,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":19,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":19,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":19,"name":"irr-BELL-all-oldcomer-no-record"},{"count":8,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":8,"name":"irr-NTTCOM-all-oldcomer-exact-record"}],"pfx_events_cnt":19,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.009640932083129883,"proc_time_tagger":0.06718659400939941,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-38841","insert_ts":1784848885,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"123.195.245.0/24","super_pfx":"123.194.0.0/15","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"45.64.30.0/24","super_pfx":"45.64.30.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"118.233.164.0/22","super_pfx":"118.233.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"118.232.240.0/22","super_pfx":"118.232.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"106.1.248.0/22","super_pfx":"106.1.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"118.233.211.0/24","super_pfx":"118.233.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"45.64.31.0/24","super_pfx":"45.64.30.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"118.233.212.0/22","super_pfx":"118.233.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"123.194.20.0/22","super_pfx":"123.194.0.0/15","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"106.1.204.0/24","super_pfx":"106.1.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"118.232.12.0/22","super_pfx":"118.232.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"118.233.220.0/22","super_pfx":"118.233.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"118.232.40.0/22","super_pfx":"118.232.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"123.194.8.0/22","super_pfx":"123.194.0.0/15","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"118.233.236.0/22","super_pfx":"118.233.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"180.177.240.0/22","super_pfx":"180.177.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"118.233.188.0/22","super_pfx":"118.233.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"180.177.48.0/22","super_pfx":"180.177.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"118.233.160.0/22","super_pfx":"118.233.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["38841"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":[],"prefixes":["118.232.40.0/22","123.195.245.0/24","118.233.188.0/22","123.194.0.0/15","118.233.160.0/22","118.232.0.0/16","45.64.30.0/24","118.233.164.0/22","106.1.204.0/24","118.233.0.0/16","106.1.248.0/22","118.232.12.0/22","118.233.211.0/24","118.233.236.0/22","180.177.48.0/22","123.194.20.0/22","118.233.220.0/22","118.232.240.0/22","45.64.30.0/23","45.64.31.0/24","180.177.240.0/22","123.194.8.0/22","118.233.212.0/22","106.1.128.0/17","180.177.0.0/16"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["38841"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[[]]},"view_ts":1784846100},{"asinfo":{"4670":{"asrank":{"asn":"4670","asnDegree":{"customer":5,"peer":0,"provider":1},"asnName":"HYUNDAI-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-4670-APNIC","orgName":"Shinbiro"},"rank":3331},"hegemony":0.00013793969178298008}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":56,"name":"irr-TC-all-oldcomer-no-record"},{"count":56,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":56,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":51,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":56,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":56,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":56,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":52,"name":"irr-REACH-all-oldcomer-more-specific-record"},{"count":56,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":56,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":56,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":56,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":56,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":29,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":56,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":56,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":56,"name":"rpki-all-oldcomer-unknown-roa"},{"count":53,"name":"sub-path-equal"},{"count":56,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":56,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":56,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":56,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":56,"name":"rpki-some-oldcomer-unknown-roa"},{"count":56,"name":"irr-BELL-all-oldcomer-no-record"},{"count":5,"name":"irr-LEVEL3-all-oldcomer-more-specific-record"},{"count":26,"name":"hegemony-valley-paths"},{"count":27,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":4,"name":"irr-REACH-all-oldcomer-no-record"},{"count":3,"name":"superpaths-include-subpaths"}],"pfx_events_cnt":56,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.026467084884643555,"proc_time_tagger":0.22440576553344727,"total_tags_cnt":29},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-4670","insert_ts":1784848885,"last_modified_ts":1784848885,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"61.110.16.0/23","super_pfx":"61.110.0.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.127.244.0/24","super_pfx":"210.127.244.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"61.110.9.0/24","super_pfx":"61.110.8.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"61.110.18.0/23","super_pfx":"61.110.0.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.17.0/24","super_pfx":"58.180.16.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"211.191.178.0/24","super_pfx":"211.191.176.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"113.130.72.0/23","super_pfx":"113.130.64.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"61.110.17.0/24","super_pfx":"61.110.16.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"61.110.55.0/24","super_pfx":"61.110.54.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"61.110.19.0/24","super_pfx":"61.110.18.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.34.0/24","super_pfx":"58.180.34.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"61.110.22.0/23","super_pfx":"61.110.0.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.73.0/24","super_pfx":"58.180.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"211.191.186.0/23","super_pfx":"211.191.176.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"203.251.225.0/24","super_pfx":"203.251.224.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.40.0/21","super_pfx":"58.180.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"211.191.176.0/20","super_pfx":"211.191.160.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"203.251.224.0/24","super_pfx":"203.251.224.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.42.0/23","super_pfx":"58.180.40.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.43.0/24","super_pfx":"58.180.42.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.40.0/24","super_pfx":"58.180.40.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.70.0/23","super_pfx":"58.180.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.74.0/23","super_pfx":"58.180.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"61.110.8.0/23","super_pfx":"61.110.0.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"211.191.185.0/24","super_pfx":"211.191.176.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"211.191.188.0/23","super_pfx":"211.191.176.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.51.0/24","super_pfx":"58.180.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"61.110.10.0/23","super_pfx":"61.110.0.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.127.244.0/23","super_pfx":"210.127.224.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.70.0/24","super_pfx":"58.180.70.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"61.111.114.0/23","super_pfx":"61.111.112.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"203.240.248.0/23","super_pfx":"203.240.224.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.52.0/24","super_pfx":"58.180.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"203.240.249.0/24","super_pfx":"203.240.248.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"61.111.118.0/23","super_pfx":"61.111.112.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"203.240.248.0/24","super_pfx":"203.240.248.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"61.111.116.0/23","super_pfx":"61.111.112.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"113.130.72.0/24","super_pfx":"113.130.72.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.16.0/24","super_pfx":"58.180.16.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.0.0/24","super_pfx":"58.180.0.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.28.0/24","super_pfx":"58.180.28.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.71.0/24","super_pfx":"58.180.70.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.28.0/23","super_pfx":"58.180.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"61.110.8.0/24","super_pfx":"61.110.8.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"203.251.224.0/23","super_pfx":"203.251.224.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"113.130.84.0/23","super_pfx":"113.130.80.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.0.0/23","super_pfx":"58.180.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.40.0/23","super_pfx":"58.180.40.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.16.0/23","super_pfx":"58.180.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"61.110.2.0/23","super_pfx":"61.110.0.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.44.0/22","super_pfx":"58.180.40.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.34.0/23","super_pfx":"58.180.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.180.116.0/24","super_pfx":"58.180.0.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"61.110.54.0/23","super_pfx":"61.110.48.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"113.130.85.0/24","super_pfx":"113.130.84.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"211.191.179.0/24","super_pfx":"211.191.176.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["4670"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["4670"],"prefixes":["58.180.34.0/24","61.110.55.0/24","61.110.2.0/23","113.130.80.0/20","210.127.244.0/23","61.110.9.0/24","58.180.40.0/21","58.180.70.0/23","203.240.249.0/24","58.180.0.0/23","58.180.44.0/22","211.191.186.0/23","203.240.224.0/19","61.110.16.0/23","211.191.185.0/24","58.180.74.0/23","61.110.17.0/24","58.180.73.0/24","113.130.72.0/23","203.251.224.0/19","58.180.40.0/23","58.180.16.0/24","58.180.40.0/24","113.130.72.0/24","203.251.225.0/24","58.180.16.0/23","61.111.116.0/23","58.180.51.0/24","61.110.22.0/23","61.110.18.0/23","58.180.42.0/23","61.110.8.0/24","113.130.84.0/23","61.110.10.0/23","58.180.43.0/24","211.191.178.0/24","61.111.114.0/23","211.191.179.0/24","211.191.188.0/23","211.191.160.0/19","58.180.52.0/24","58.180.28.0/24","61.110.19.0/24","58.180.71.0/24","58.180.0.0/17","58.180.116.0/24","203.240.248.0/23","61.110.0.0/19","211.191.176.0/20","61.110.48.0/20","61.111.118.0/23","203.240.248.0/24","58.180.70.0/24","58.180.17.0/24","58.180.0.0/24","113.130.85.0/24","61.110.8.0/23","203.251.224.0/23","210.127.224.0/19","61.110.54.0/23","58.180.28.0/23","113.130.64.0/20","210.127.244.0/24","203.251.224.0/24","58.180.34.0/23","61.111.112.0/20"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}],"tr_worthy":true,"victims":["4670"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[[],["hegemony-valley-paths"]]},"view_ts":1784846100},{"asinfo":{"17853":{"asrank":{"asn":"17853","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"LGTELECOM-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-17853-APNIC","orgName":"LGTELECOM"},"rank":12717},"hegemony":0.0001302581915552569}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":6,"name":"irr-TC-all-oldcomer-no-record"},{"count":6,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":6,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":6,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":6,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":6,"name":"irr-REACH-all-oldcomer-no-record"},{"count":6,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":6,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":6,"name":"hegemony-valley-paths"},{"count":6,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":6,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":6,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":6,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":6,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":6,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":6,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":6,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":6,"name":"rpki-all-oldcomer-unknown-roa"},{"count":6,"name":"sub-path-equal"},{"count":6,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":6,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":6,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":6,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":6,"name":"rpki-some-oldcomer-unknown-roa"},{"count":6,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":6,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.003467559814453125,"proc_time_tagger":0.024348020553588867,"total_tags_cnt":25},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-17853","insert_ts":1784848885,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"106.102.251.0/24","super_pfx":"106.102.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"106.102.128.0/24","super_pfx":"106.102.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"106.102.142.0/24","super_pfx":"106.102.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"106.102.129.0/24","super_pfx":"106.102.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"106.102.130.0/24","super_pfx":"106.102.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"106.102.253.0/24","super_pfx":"106.102.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["17853"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["17853"],"prefixes":["106.102.253.0/24","106.102.128.0/17","106.102.128.0/24","106.102.129.0/24","106.102.130.0/24","106.102.142.0/24","106.102.251.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["17853"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["hegemony-valley-paths"]]},"view_ts":1784846100},{"asinfo":{"131607":{"asrank":{"asn":"131607","asnDegree":{"customer":0,"peer":5,"provider":2},"asnName":"DCTV-AS-TW","organization":{"country":{"iso":"TW"},"orgId":"@aut-131607-APNIC","orgName":"Digidom CableTV Co., LTD."},"rank":12717},"hegemony":1.0916407987932685e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":8,"name":"irr-TC-all-oldcomer-no-record"},{"count":8,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":8,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":8,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":8,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":8,"name":"irr-REACH-all-oldcomer-no-record"},{"count":8,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":8,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":8,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":8,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":8,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":8,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":8,"name":"rpki-all-oldcomer-valid-roa"},{"count":8,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":5,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":8,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":8,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":8,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":8,"name":"rpki-some-oldcomer-valid-roa"},{"count":8,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":8,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":6,"name":"sub-path-shorter"},{"count":8,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":8,"name":"irr-BELL-all-oldcomer-no-record"},{"count":4,"name":"hegemony-valley-paths"},{"count":3,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":2,"name":"sub-path-longer"}],"pfx_events_cnt":8,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0044634342193603516,"proc_time_tagger":0.025009632110595703,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-131607","insert_ts":1784848885,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"150.117.168.0/22","super_pfx":"150.117.168.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"150.117.80.0/22","super_pfx":"150.117.80.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"150.117.88.0/22","super_pfx":"150.117.88.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"150.117.80.0/21","super_pfx":"150.117.80.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"150.117.92.0/22","super_pfx":"150.117.88.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"150.117.88.0/21","super_pfx":"150.117.80.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"150.117.84.0/22","super_pfx":"150.117.80.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"150.117.224.0/22","super_pfx":"150.117.224.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["131607"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["131607"],"prefixes":["150.117.168.0/22","150.117.224.0/21","150.117.80.0/22","150.117.88.0/22","150.117.80.0/20","150.117.224.0/22","150.117.80.0/21","150.117.92.0/22","150.117.84.0/22","150.117.168.0/21","150.117.88.0/21"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["131607"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer"]]},"view_ts":1784846100},{"asinfo":{"54994":{"asrank":{"asn":"54994","asnDegree":{"customer":5,"peer":977,"provider":102},"asnName":"ML-1432-54994","organization":{"country":{"iso":"CA"},"orgId":"ML-1432-ARIN","orgName":"Meteverse Limited."},"rank":3716},"hegemony":9.367108251778704e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":5,"name":"irr-TC-all-oldcomer-no-record"},{"count":5,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":5,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":5,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":5,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":5,"name":"irr-REACH-all-oldcomer-no-record"},{"count":5,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":5,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"no-common-monitors"},{"count":5,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":5,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":5,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":5,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":5,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":5,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":5,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":5,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":5,"name":"rpki-all-oldcomer-unknown-roa"},{"count":5,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":5,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":5,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"single-ip"},{"count":5,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":5,"name":"rpki-some-oldcomer-unknown-roa"},{"count":5,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"},{"count":4,"name":"hegemony-valley-paths"},{"count":4,"name":"sub-path-longer"}],"pfx_events_cnt":5,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0029494762420654297,"proc_time_tagger":0.016377925872802734,"total_tags_cnt":28},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-54994","insert_ts":1784848885,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"101.79.216.16/32","super_pfx":"101.79.216.0/24","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"no-common-monitors"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"101.79.218.0/24","super_pfx":"101.79.218.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"101.79.217.0/24","super_pfx":"101.79.216.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"101.79.216.0/24","super_pfx":"101.79.216.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"101.79.219.0/24","super_pfx":"101.79.218.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["54994"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5},{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":99,"explanation":"Event has prefix events with different inferences that map to different classes.","inference_id":"mixed-legitimate-unclassified","labels":["mixed-class"],"suspicion_level":80}},"newcomers":["54994"],"prefixes":["101.79.218.0/24","101.79.218.0/23","101.79.216.16/32","101.79.219.0/24","101.79.217.0/24","101.79.216.0/23","101.79.216.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"no-common-monitors"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":true,"victims":["54994"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["hegemony-valley-paths","sub-path-longer"]]},"view_ts":1784846100},{"asinfo":{"17858":{"asrank":{"asn":"17858","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"POWERVIS-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-17858-APNIC","orgName":"LG POWERCOMM"},"rank":12717},"hegemony":0.0033046347248883137}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":3,"name":"irr-TC-all-oldcomer-no-record"},{"count":3,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":3,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":3,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":3,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":3,"name":"irr-REACH-all-oldcomer-no-record"},{"count":3,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":3,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":3,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":3,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":3,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":3,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":3,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":3,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":3,"name":"rpki-all-oldcomer-unknown-roa"},{"count":3,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":3,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":3,"name":"rpki-some-oldcomer-unknown-roa"},{"count":3,"name":"irr-BELL-all-oldcomer-no-record"},{"count":3,"name":"superpaths-include-subpaths"}],"pfx_events_cnt":3,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0016641616821289062,"proc_time_tagger":0.007310152053833008,"total_tags_cnt":24},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-17858","insert_ts":1784848885,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.78.0.0/16","super_pfx":"58.78.0.0/15","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.77.128.0/17","super_pfx":"58.77.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.79.0.0/16","super_pfx":"58.78.0.0/15","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}]}],"summary":{"ases":["17858"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["17858"],"prefixes":["58.77.128.0/17","58.79.0.0/16","58.78.0.0/15","58.78.0.0/16","58.77.0.0/16"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}],"tr_worthy":false,"victims":["17858"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":24,"name":"irr-TC-all-oldcomer-no-record"},{"count":24,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":24,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":24,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":24,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":24,"name":"irr-REACH-all-oldcomer-no-record"},{"count":24,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":24,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":24,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":24,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":24,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":24,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":23,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":24,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":24,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":24,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":24,"name":"rpki-all-oldcomer-unknown-roa"},{"count":24,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":24,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":24,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":24,"name":"sub-path-longer"},{"count":24,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":24,"name":"rpki-some-oldcomer-unknown-roa"},{"count":24,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-more-specific-record"}],"pfx_events_cnt":24,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.011154651641845703,"proc_time_tagger":0.0792551040649414,"total_tags_cnt":25},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-3786","insert_ts":1784848885,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"125.7.216.0/24","super_pfx":"125.7.192.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"117.52.57.0/24","super_pfx":"117.52.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.96.149.0/24","super_pfx":"210.96.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"182.162.164.0/24","super_pfx":"182.162.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.221.222.0/24","super_pfx":"210.221.192.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.96.152.0/24","super_pfx":"210.96.128.0/17","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"203.252.5.0/24","super_pfx":"203.252.0.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"61.97.126.0/24","super_pfx":"61.97.112.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.221.197.0/24","super_pfx":"210.221.192.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"182.162.166.0/24","super_pfx":"182.162.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"117.52.59.0/24","super_pfx":"117.52.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"117.52.60.0/24","super_pfx":"117.52.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"125.7.213.0/24","super_pfx":"125.7.192.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"117.52.56.0/24","super_pfx":"117.52.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"211.40.106.0/24","super_pfx":"211.40.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.120.247.0/24","super_pfx":"210.120.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.120.129.0/24","super_pfx":"210.120.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"112.217.158.0/24","super_pfx":"112.216.0.0/13","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"112.217.159.0/24","super_pfx":"112.216.0.0/13","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"211.170.210.0/24","super_pfx":"211.170.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"61.97.127.0/24","super_pfx":"61.97.112.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"182.162.165.0/24","super_pfx":"182.162.0.0/16","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"211.238.252.0/24","super_pfx":"211.238.240.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"125.7.200.0/24","super_pfx":"125.7.192.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["3786"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":[],"prefixes":["61.97.112.0/20","210.221.197.0/24","210.120.247.0/24","211.170.0.0/16","210.96.152.0/24","117.52.56.0/24","211.238.240.0/20","125.7.192.0/18","125.7.216.0/24","61.97.127.0/24","182.162.0.0/16","61.97.126.0/24","117.52.57.0/24","211.170.210.0/24","112.217.159.0/24","210.221.222.0/24","203.252.5.0/24","117.52.59.0/24","112.216.0.0/13","211.40.106.0/24","210.120.129.0/24","112.217.158.0/24","117.52.60.0/24","182.162.165.0/24","210.221.192.0/19","210.120.0.0/16","211.40.0.0/16","182.162.164.0/24","125.7.200.0/24","182.162.166.0/24","203.252.0.0/20","211.238.252.0/24","210.96.128.0/17","125.7.213.0/24","210.96.149.0/24","117.52.0.0/16"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer"]]},"view_ts":1784846100},{"asinfo":{"9286":{"asrank":{"asn":"9286","asnDegree":{"customer":19,"peer":6,"provider":1},"asnName":"KINXIDC-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-9286-APNIC","orgName":"KINX"},"rank":1610},"hegemony":0.00013300490887690987}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":13,"name":"irr-TC-all-oldcomer-no-record"},{"count":13,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":13,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":13,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":13,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":13,"name":"irr-REACH-all-oldcomer-no-record"},{"count":13,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":13,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"no-common-monitors"},{"count":13,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":13,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":13,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":13,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":13,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":13,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":13,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":13,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":13,"name":"rpki-all-oldcomer-unknown-roa"},{"count":13,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":13,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":13,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":13,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":13,"name":"rpki-some-oldcomer-unknown-roa"},{"count":13,"name":"irr-BELL-all-oldcomer-no-record"},{"count":6,"name":"sub-path-shorter"},{"count":5,"name":"sub-path-equal"},{"count":1,"name":"long-prefix"}],"pfx_events_cnt":13,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0059206485748291016,"proc_time_tagger":0.0448148250579834,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-9286","insert_ts":1784848886,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"121.78.136.0/24","super_pfx":"121.78.136.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"no-common-monitors"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"1.201.169.0/24","super_pfx":"1.201.128.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-shorter"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"121.78.250.0/24","super_pfx":"121.78.224.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"121.78.74.0/24","super_pfx":"121.78.72.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-shorter"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"Prefix more specific than a /24 (unlikely to be propagated). It could be blackholing (e.g., for DoS mitigation)","inference_id":"blackholed-prefix","labels":["legitimate"],"suspicion_level":9}],"sub_pfx":"121.78.227.128/25","super_pfx":"121.78.227.0/24","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"no-common-monitors"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"1.201.172.0/22","super_pfx":"1.201.128.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-shorter"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"121.78.227.0/24","super_pfx":"121.78.224.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-shorter"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"1.201.168.0/24","super_pfx":"1.201.128.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-shorter"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"1.201.176.0/22","super_pfx":"1.201.128.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"121.78.154.0/24","super_pfx":"121.78.128.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"1.201.171.0/24","super_pfx":"1.201.128.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"1.201.160.0/22","super_pfx":"1.201.128.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-shorter"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"1.201.170.0/24","super_pfx":"1.201.128.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["9286"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"Prefix more specific than a /24 (unlikely to be propagated). It could be blackholing (e.g., for DoS mitigation)","inference_id":"blackholed-prefix","labels":["legitimate"],"suspicion_level":9},{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":99,"explanation":"Event has prefix events with different inferences that map to different classes.","inference_id":"mixed-legitimate-unclassified","labels":["mixed-class"],"suspicion_level":80}},"newcomers":["9286"],"prefixes":["121.78.128.0/18","121.78.72.0/21","1.201.128.0/18","121.78.227.0/24","1.201.171.0/24","1.201.170.0/24","1.201.168.0/24","121.78.136.0/21","121.78.74.0/24","1.201.176.0/22","1.201.172.0/22","121.78.154.0/24","121.78.250.0/24","1.201.169.0/24","121.78.227.128/25","1.201.160.0/22","121.78.136.0/24","121.78.224.0/19"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"no-common-monitors"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"}],"tr_worthy":true,"victims":["9286"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[[]]},"view_ts":1784846100},{"asinfo":{"18042":{"asrank":{"asn":"18042","asnDegree":{"customer":1,"peer":0,"provider":1},"asnName":"KBT","organization":{"country":{"iso":"TW"},"orgId":"@aut-18042-APNIC","orgName":"Koos Broadband Telecom"},"rank":7784},"hegemony":3.947964091876407e-05},"9416":{"asrank":{"asn":"9416","asnDegree":{"customer":4,"peer":16,"provider":5},"asnName":"KBT","organization":{"country":{"iso":"TW"},"orgId":"ORG-HMCI1-AP-APNIC","orgName":"Hoshin Multimedia Center Inc."},"rank":3716},"hegemony":0.0004403192092271904}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RADB-some-oldcomer-exact-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-some-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-some-oldcomer-more-specific-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-some-oldcomer-no-record"},{"count":1,"name":"superpaths-include-subpaths"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005104541778564453,"proc_time_tagger":0.0033681392669677734,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-18042_9416","insert_ts":1784848886,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"58.114.64.0/18","super_pfx":"58.114.0.0/17","tags":[{"name":"irr-RADB-some-oldcomer-exact-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-RADB-some-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-some-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NTTCOM-some-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}]}],"summary":{"ases":["18042","9416"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["18042"],"prefixes":["58.114.0.0/17","58.114.64.0/18"],"tags":[{"name":"irr-RADB-some-oldcomer-exact-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-RADB-some-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-some-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NTTCOM-some-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}],"tr_worthy":false,"victims":["18042","9416"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"8151":{"asrank":{"asn":"8151","asnDegree":{"customer":79,"peer":7,"provider":9},"asnName":"AS8151","organization":{"country":{"iso":"MX"},"orgId":"@del-8151","orgName":""},"rank":522},"hegemony":0.004412342099852261}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":2,"name":"irr-TC-all-oldcomer-no-record"},{"count":2,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":2,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":2,"name":"irr-REACH-all-oldcomer-no-record"},{"count":2,"name":"irr-LEVEL3-all-oldcomer-more-specific-record"},{"count":2,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":2,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":2,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":2,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":2,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":2,"name":"no-common-hops-sub-pfx"},{"count":2,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":2,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":2,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":2,"name":"sub-path-shorter"},{"count":2,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":2,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":2,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-LACNIC-all-oldcomer-more-specific-record"}],"pfx_events_cnt":2,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.001155853271484375,"proc_time_tagger":0.00986170768737793,"total_tags_cnt":29},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-8151","insert_ts":1784848886,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"189.232.200.0/24","super_pfx":"189.232.192.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"187.222.194.0/23","super_pfx":"187.222.192.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["8151"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":[],"prefixes":["187.222.192.0/19","189.232.192.0/19","189.232.200.0/24","187.222.194.0/23"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-LACNIC-all-oldcomer-more-specific-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["8151"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"32934":{"asrank":{"asn":"32934","asnDegree":{"customer":2,"peer":382,"provider":14},"asnName":"FACEBOOK","organization":{"country":{"iso":"US"},"orgId":"THEFA-3-ARIN","orgName":"Facebook, Inc."},"rank":5919},"hegemony":0.00014433361933528685}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"all-oldcomers-ris-peer"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"all-oldcomers-manrs-member"},{"count":1,"name":"all-oldcomers-routeviews-peer"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004999637603759766,"proc_time_tagger":0.0036826133728027344,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-32934","insert_ts":1784848886,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"157.240.215.0/24","super_pfx":"157.240.192.0/18","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["32934"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":[],"prefixes":["157.240.192.0/18","157.240.215.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["32934"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer"]]},"view_ts":1784846100},{"asinfo":{"18678":{"asrank":{"asn":"18678","asnDegree":{"customer":110,"peer":195,"provider":5},"asnName":"AS18678","organization":{"country":{"iso":"CO"},"orgId":"@del-18678","orgName":""},"rank":80},"hegemony":0.0002186609316212094},"262589":{"asrank":{"asn":"262589","asnDegree":{"customer":154,"peer":37,"provider":6},"asnName":"AS262589","organization":{"country":{"iso":"BR"},"orgId":"@del-262589","orgName":""},"rank":145},"hegemony":0.00017422590423691263}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":4,"name":"irr-RADB-some-oldcomer-no-record"},{"count":4,"name":"irr-TC-all-oldcomer-no-record"},{"count":4,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":4,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":4,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":4,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":4,"name":"irr-REACH-all-oldcomer-no-record"},{"count":4,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":4,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":4,"name":"hegemony-valley-paths"},{"count":4,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":4,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":4,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":4,"name":"irr-RADB-some-oldcomer-more-specific-record"},{"count":4,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":4,"name":"no-common-hops-sub-pfx"},{"count":4,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":4,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":4,"name":"rpki-all-oldcomer-unknown-roa"},{"count":4,"name":"sub-path-equal"},{"count":4,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":4,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":4,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":4,"name":"no-common-hops-super-pfx"},{"count":4,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":4,"name":"rpki-some-oldcomer-unknown-roa"},{"count":4,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":4,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.002341747283935547,"proc_time_tagger":0.023260116577148438,"total_tags_cnt":28},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-18678_262589","insert_ts":1784848886,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"38.51.251.0/24","super_pfx":"38.51.248.0/22","tags":[{"name":"irr-RADB-some-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-RADB-some-oldcomer-more-specific-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"38.51.250.0/24","super_pfx":"38.51.248.0/22","tags":[{"name":"irr-RADB-some-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-RADB-some-oldcomer-more-specific-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"38.51.249.0/24","super_pfx":"38.51.248.0/22","tags":[{"name":"irr-RADB-some-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-RADB-some-oldcomer-more-specific-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"38.51.248.0/24","super_pfx":"38.51.248.0/22","tags":[{"name":"irr-RADB-some-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-RADB-some-oldcomer-more-specific-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["262589","18678"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["262589"],"prefixes":["38.51.251.0/24","38.51.249.0/24","38.51.248.0/22","38.51.248.0/24","38.51.250.0/24"],"tags":[{"name":"irr-RADB-some-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-RADB-some-oldcomer-more-specific-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"no-common-hops-sub-pfx"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"no-common-hops-super-pfx"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["262589","18678"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["hegemony-valley-paths"]]},"view_ts":1784846100},{"asinfo":{"4780":{"asrank":{"asn":"4780","asnDegree":{"customer":59,"peer":22,"provider":5},"asnName":"SEEDNET","organization":{"country":{"iso":"TW"},"orgId":"@aut-4780-APNIC","orgName":"Digital United Inc."},"rank":522},"hegemony":0.002028298145736943}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":7,"name":"irr-TC-all-oldcomer-no-record"},{"count":7,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":7,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":7,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":7,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":7,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":7,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":7,"name":"irr-REACH-all-oldcomer-more-specific-record"},{"count":7,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":7,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":7,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":7,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":7,"name":"rpki-all-oldcomer-valid-roa"},{"count":7,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":7,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":7,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":7,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":2,"name":"sub-path-equal"},{"count":7,"name":"rpki-some-oldcomer-valid-roa"},{"count":7,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":7,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":7,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":7,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":7,"name":"irr-BELL-all-oldcomer-no-record"},{"count":5,"name":"sub-path-longer"}],"pfx_events_cnt":7,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0039865970611572266,"proc_time_tagger":0.023352384567260742,"total_tags_cnt":25},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-4780","insert_ts":1784848886,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.68.30.0/24","super_pfx":"210.68.0.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"139.175.200.0/24","super_pfx":"139.175.192.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.64.23.0/24","super_pfx":"210.64.0.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.68.21.0/24","super_pfx":"210.68.0.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"139.175.201.0/24","super_pfx":"139.175.192.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"139.175.233.0/24","super_pfx":"139.175.224.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"139.175.55.0/24","super_pfx":"139.175.32.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["4780"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":[],"prefixes":["139.175.224.0/19","210.64.0.0/19","210.68.0.0/19","139.175.32.0/19","210.68.30.0/24","139.175.201.0/24","139.175.192.0/19","210.64.23.0/24","139.175.55.0/24","139.175.200.0/24","139.175.233.0/24","210.68.21.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-more-specific-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["4780"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer"],[]]},"view_ts":1784846100},{"asinfo":{"38690":{"asrank":{"asn":"38690","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"HYOSUNGITX-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-152210-APNIC","orgName":"HyosungITX"},"rank":12717},"hegemony":2.8152841653089553e-05}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":5,"name":"irr-TC-all-oldcomer-no-record"},{"count":5,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":5,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":5,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":5,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":5,"name":"irr-REACH-all-oldcomer-no-record"},{"count":5,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":5,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":5,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":5,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":5,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":5,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":5,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":5,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":5,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":5,"name":"rpki-all-oldcomer-unknown-roa"},{"count":5,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":5,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":5,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":5,"name":"sub-path-longer"},{"count":5,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":5,"name":"rpki-some-oldcomer-unknown-roa"},{"count":5,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"}],"pfx_events_cnt":5,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0028357505798339844,"proc_time_tagger":0.024031639099121094,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-38690","insert_ts":1784848886,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"49.236.128.0/23","super_pfx":"49.236.128.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"114.31.32.0/20","super_pfx":"114.31.32.0/19","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"110.93.128.0/21","super_pfx":"110.93.128.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"49.236.130.0/23","super_pfx":"49.236.128.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"110.93.136.0/21","super_pfx":"110.93.128.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["38690"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":[],"prefixes":["110.93.136.0/21","49.236.130.0/23","110.93.128.0/20","49.236.128.0/23","114.31.32.0/19","114.31.32.0/20","110.93.128.0/21","49.236.128.0/22"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["38690"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer"]]},"view_ts":1784846100},{"asinfo":{"3216":{"asrank":{"asn":"3216","asnDegree":{"customer":899,"peer":1100,"provider":8},"asnName":"SOVAM-AS","organization":{"country":{"iso":"RU"},"orgId":"ORG-ES15-RIPE","orgName":"PJSC \"Vimpelcom\""},"rank":29},"hegemony":0.001547217656994271}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"all-oldcomers-routeviews-peer"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"single-ip"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"long-prefix"},{"count":1,"name":"superpaths-include-subpaths"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004630088806152344,"proc_time_tagger":0.003466367721557617,"total_tags_cnt":27},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-3216","insert_ts":1784848886,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"sub_pfx":"213.221.49.13/32","super_pfx":"213.221.48.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"superpaths-include-subpaths"}]}],"summary":{"ases":["3216"],"attackers":[],"inference_result":{"inferences":[{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}],"primary_inference":{"confidence":99,"explanation":"/32 prefix is probably blackholed (e.g., for DoS mitigation)","inference_id":"blackholed-address","labels":["legitimate"],"suspicion_level":5}},"newcomers":[],"prefixes":["213.221.49.13/32","213.221.48.0/20"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"single-ip"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"long-prefix"},{"name":"superpaths-include-subpaths"}],"tr_worthy":false,"victims":["3216"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"263579":{"asrank":{"asn":"263579","asnDegree":{"customer":2,"peer":0,"provider":1},"asnName":"AS263579","organization":{"country":{"iso":"BR"},"orgId":"@del-263579","orgName":""},"rank":5919},"hegemony":6.976562461264317e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-exact-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005247592926025391,"proc_time_tagger":0.005672931671142578,"total_tags_cnt":25},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-263579","insert_ts":1784848886,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"177.8.255.0/24","super_pfx":"177.8.254.0/23","tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["263579"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":[],"prefixes":["177.8.254.0/23","177.8.255.0/24"],"tags":[{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-exact-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["263579"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["hegemony-valley-paths","sub-path-longer"]]},"view_ts":1784846100},{"asinfo":{"38661":{"asrank":{"asn":"38661","asnDegree":{"customer":5,"peer":0,"provider":2},"asnName":"HCLC-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-38661-APNIC","orgName":"abcle"},"rank":3716},"hegemony":0.00011655112287867978}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":9,"name":"irr-TC-all-oldcomer-no-record"},{"count":7,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":9,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":9,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":9,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":9,"name":"irr-REACH-all-oldcomer-no-record"},{"count":9,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":9,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":9,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":9,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":9,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":9,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":9,"name":"rpki-all-oldcomer-valid-roa"},{"count":5,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":9,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":9,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":4,"name":"sub-path-equal"},{"count":9,"name":"rpki-some-oldcomer-valid-roa"},{"count":9,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":9,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":9,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":9,"name":"irr-APNIC-all-oldcomer-exact-record"},{"count":9,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":9,"name":"irr-BELL-all-oldcomer-no-record"},{"count":3,"name":"irr-RADB-all-oldcomer-no-record"},{"count":4,"name":"sub-path-shorter"},{"count":2,"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":1,"name":"superpaths-include-subpaths"}],"pfx_events_cnt":9,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.004041910171508789,"proc_time_tagger":0.030466556549072266,"total_tags_cnt":30},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-38661","insert_ts":1784848886,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"101.79.240.0/24","super_pfx":"101.79.240.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"211.236.160.0/24","super_pfx":"211.236.160.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-APNIC-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"211.172.231.0/24","super_pfx":"211.172.228.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-APNIC-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"182.252.142.0/24","super_pfx":"182.252.140.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-APNIC-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"101.79.244.0/23","super_pfx":"101.79.240.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"101.79.246.0/23","super_pfx":"101.79.240.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"210.4.221.0/24","super_pfx":"210.4.220.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-APNIC-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"101.79.240.0/23","super_pfx":"101.79.240.0/21","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]},{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"101.79.246.0/24","super_pfx":"101.79.246.0/23","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}]}],"summary":{"ases":["38661"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":["38661"],"prefixes":["211.236.160.0/24","101.79.246.0/24","211.172.228.0/22","210.4.220.0/22","101.79.244.0/23","210.4.221.0/24","101.79.240.0/24","101.79.240.0/23","211.172.231.0/24","211.236.160.0/22","182.252.142.0/24","182.252.140.0/22","101.79.240.0/21","101.79.246.0/23"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"sub-path-equal"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-shorter"},{"name":"irr-APNIC-all-oldcomer-exact-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"superpaths-include-subpaths"}],"tr_worthy":true,"victims":["38661"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[[],["hegemony-valley-paths"]]},"view_ts":1784846100},{"asinfo":{"44244":{"asrank":{"asn":"44244","asnDegree":{"customer":1,"peer":0,"provider":1},"asnName":"IranCell-AS","organization":{"country":{"iso":"IR"},"orgId":"ORG-ICSA1-RIPE","orgName":"Iran Cell Service and Communication Company"},"rank":7784},"hegemony":0.00040045980882047797}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"all-oldcomers-manrs-member"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004904270172119141,"proc_time_tagger":0.007232666015625,"total_tags_cnt":26},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-44244","insert_ts":1784848886,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"5.127.73.0/24","super_pfx":"5.127.64.0/20","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["44244"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":[],"prefixes":["5.127.64.0/20","5.127.73.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"hegemony-valley-paths"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-more-specific-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["44244"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["hegemony-valley-paths","sub-path-longer"]]},"view_ts":1784846100},{"asinfo":{"262772":{"asrank":{"asn":"262772","asnDegree":{"customer":2,"peer":1,"provider":3},"asnName":"AS262772","organization":{"country":{"iso":"BR"},"orgId":"@del-262772","orgName":""},"rank":5919},"hegemony":1.3953303443222232e-06}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"sub-path-longer"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005004405975341797,"proc_time_tagger":0.003470182418823242,"total_tags_cnt":24},"event_type":"defcon","finished_ts":null,"id":"defcon-1784846100-262772","insert_ts":1784848886,"last_modified_ts":1784848886,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"sub_pfx":"186.233.238.0/24","super_pfx":"186.233.236.0/22","tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}]}],"summary":{"ases":["262772"],"attackers":[],"inference_result":{"inferences":[{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}],"primary_inference":{"confidence":50,"explanation":"signs of incident, but no explanation","inference_id":"unclassified","labels":["incident"],"suspicion_level":80}},"newcomers":[],"prefixes":["186.233.236.0/22","186.233.238.0/24"],"tags":[{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"sub-path-longer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"}],"tr_worthy":true,"victims":["262772"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[["sub-path-longer"]]},"view_ts":1784846100},{"asinfo":{"199524":{"asrank":{"asn":"199524","asnDegree":{"customer":89,"peer":5035,"provider":47},"asnName":"GCORE","organization":{"country":{"iso":"LU"},"orgId":"ORG-WIG6-RIPE","orgName":"G-Core Labs S.A."},"rank":213},"hegemony":8.12176358005121e-05},"65540":{"asrank":null,"hegemony":1.2777600700265438e-06}},"debug":{},"duration":300,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"all-oldcomers-ris-peer"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"has-reserved-asn"},{"count":1,"name":"all-oldcomers-routeviews-peer"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-reserved-asn"},{"count":1,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-reserved-asn"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"due-to-reserved-asn"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"has-dps-asn"},{"count":1,"name":"rpki-all-newcomer-invalid-roa"},{"count":1,"name":"rpki-some-newcomer-invalid-roa"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-exact-record"},{"count":1,"name":"rpki-newcomer-invalid-roa-due-to-as"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0002124309539794922,"proc_time_tagger":0.02007150650024414,"total_tags_cnt":55},"event_type":"moas","finished_ts":1784846400,"id":"moas-1784846100-199524_65540","insert_ts":1784848884,"last_modified_ts":1784848966,"pfx_events":[{"finished_ts":1784846400,"inferences":[{"confidence":99,"explanation":"The event is caused by reserved ASNs","inference_id":"due-to-reserved-asn","labels":["legitimate"],"suspicion_level":1}],"prefix":"213.156.151.0/24","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"has-reserved-asn"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"some-newcomers-reserved-asn"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-reserved-asn"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"due-to-reserved-asn"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"has-dps-asn"},{"name":"rpki-all-newcomer-invalid-roa"},{"name":"rpki-some-newcomer-invalid-roa"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-exact-record"},{"name":"rpki-newcomer-invalid-roa-due-to-as"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"}]}],"summary":{"ases":["199524","65540"],"attackers":["65540"],"inference_result":{"inferences":[{"confidence":99,"explanation":"The event is caused by reserved ASNs","inference_id":"due-to-reserved-asn","labels":["legitimate"],"suspicion_level":1}],"primary_inference":{"confidence":99,"explanation":"The event is caused by reserved ASNs","inference_id":"due-to-reserved-asn","labels":["legitimate"],"suspicion_level":1}},"newcomers":["65540"],"prefixes":["213.156.151.0/24"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"has-reserved-asn"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"some-newcomers-reserved-asn"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-reserved-asn"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"due-to-reserved-asn"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"has-dps-asn"},{"name":"rpki-all-newcomer-invalid-roa"},{"name":"rpki-some-newcomer-invalid-roa"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-exact-record"},{"name":"rpki-newcomer-invalid-roa-due-to-as"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["199524"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"367":{"asrank":{"asn":"367","asnDegree":{"customer":0,"peer":9,"provider":2},"asnName":"DNIC-ASBLK-00306-00371","organization":{"country":{"iso":"US"},"orgId":"USDDD-ARIN","orgName":"United States Department of Defense (DoD)"},"rank":12717},"hegemony":0.002764815272966566},"721":{"asrank":{"asn":"721","asnDegree":{"customer":3,"peer":0,"provider":1},"asnName":"DNIC-ASBLK-00721-00726","organization":{"country":{"iso":"US"},"orgId":"USDDD-ARIN","orgName":"United States Department of Defense (DoD)"},"rank":433},"hegemony":0.02168209583192192}},"debug":{},"duration":null,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"not-previously-announced-by-any-newcomer"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"oldcomer-newcomer-all-siblings"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"oldcomer-newcomer-some-siblings"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"hegemony-valley-paths"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005190372467041016,"proc_time_tagger":0.22605180740356445,"total_tags_cnt":64},"event_type":"submoas","finished_ts":null,"id":"submoas-1784846100-721=367","insert_ts":1784848890,"last_modified_ts":1784848890,"pfx_events":[{"finished_ts":null,"inferences":[{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":87,"explanation":"all newcomer origins are siblings with at least one customer of a potential victim","inference_id":"all-newcomers-siblings-with-oldcomers-customer","labels":["legitimate"],"suspicion_level":20},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"143.74.165.0/24","super_pfx":"143.74.0.0/16","tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"hegemony-valley-paths"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"some-newcomers-are-rel-downstream"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"}]}],"summary":{"ases":["367","721"],"attackers":["367"],"inference_result":{"inferences":[{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1}],"primary_inference":{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1}},"newcomers":["367"],"prefixes":["143.74.165.0/24","143.74.0.0/16"],"tags":[{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-all-newcomer-no-record"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"hegemony-valley-paths"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"some-newcomers-are-rel-downstream"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"some-newcomers-stub-ases"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"}],"tr_worthy":false,"victims":["721"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"38676":{"asrank":{"asn":"38676","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"FLEXNET-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-38676-APNIC","orgName":"flexnetworks"},"rank":12717},"hegemony":2.610059708644161e-05},"4670":{"asrank":{"asn":"4670","asnDegree":{"customer":5,"peer":0,"provider":1},"asnName":"HYUNDAI-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-4670-APNIC","orgName":"Shinbiro"},"rank":3331},"hegemony":0.00013793969178298008}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-newcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"all-victims-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"some-victims-stub-ases"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-more-specific-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"prefix-small-edit-distance"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0009632110595703125,"proc_time_tagger":0.0527491569519043,"total_tags_cnt":55},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-4670=38676","insert_ts":1784848890,"last_modified_ts":1784849483,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":75,"explanation":"all newcomers are more specific than their IRR records","inference_id":"all-newcomers-more-specific-irr-record","labels":["legitimate"],"suspicion_level":20},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"58.180.74.0/24","super_pfx":"58.180.74.0/23","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-REACH-all-newcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"all-victims-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["4670","38676"],"attackers":["4670"],"inference_result":{"inferences":[{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}},"newcomers":["4670"],"prefixes":["58.180.74.0/24","58.180.74.0/23"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-REACH-all-newcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"all-victims-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["38676"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"18176":{"asrank":{"asn":"18176","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"KOOKMIN-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-18176-APNIC","orgName":"KOOKMIN UNIVERSITY"},"rank":12717},"hegemony":4.5963823107085e-06},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":7,"name":"irr-RIPE-all-newcomer-no-record"},{"count":7,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":7,"name":"irr-ARIN-all-newcomer-no-record"},{"count":7,"name":"oldcomer-path-prepending"},{"count":7,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":7,"name":"rpki-all-newcomer-unknown-roa"},{"count":7,"name":"irr-REACH-all-oldcomer-no-record"},{"count":7,"name":"rpki-some-oldcomer-unknown-roa"},{"count":7,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":7,"name":"irr-BELL-all-oldcomer-no-record"},{"count":7,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":7,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":7,"name":"single-rel-upstream-chain"},{"count":7,"name":"all-newcomers-next-to-an-oldcomer"},{"count":7,"name":"irr-RADB-all-newcomer-no-record"},{"count":7,"name":"some-newcomers-stub-ases"},{"count":7,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":7,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":7,"name":"single-peer-on-attacker-path"},{"count":7,"name":"some-newcomers-are-rel-downstream"},{"count":7,"name":"irr-all-newcomer-no-record"},{"count":7,"name":"all-newcomers-stub-ases"},{"count":7,"name":"irr-APNIC-all-newcomer-no-record"},{"count":7,"name":"all-newcomers-are-rel-neighbor"},{"count":7,"name":"previously-announced-by-all-newcomers"},{"count":7,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":7,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":7,"name":"irr-TC-all-oldcomer-no-record"},{"count":7,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":7,"name":"some-newcomers-are-rel-neighbor"},{"count":7,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":7,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":7,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":7,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":7,"name":"all-newcomers-are-rel-downstream"},{"count":7,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":7,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":7,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":7,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":7,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":7,"name":"irr-BELL-all-newcomer-no-record"},{"count":7,"name":"rpki-some-newcomer-unknown-roa"},{"count":7,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":7,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":7,"name":"some-newcomers-are-customers"},{"count":7,"name":"irr-REACH-all-newcomer-no-record"},{"count":7,"name":"irr-BBOI-all-newcomer-no-record"},{"count":7,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":7,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":7,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":7,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":7,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":7,"name":"irr-PANIX-all-newcomer-no-record"},{"count":7,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":7,"name":"rpki-all-oldcomer-unknown-roa"},{"count":7,"name":"all-origins-same-country"},{"count":7,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":7,"name":"all-newcomers-are-customers"},{"count":7,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":7,"name":"previously-announced-by-some-newcomers"},{"count":7,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":7,"name":"newcomer-more-specific"},{"count":7,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":7,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":7,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.006421327590942383,"proc_time_tagger":0.11893773078918457,"total_tags_cnt":64},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=18176","insert_ts":1784848890,"last_modified_ts":1784849483,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"1.209.60.0/24","super_pfx":"1.208.0.0/12","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"1.209.62.0/24","super_pfx":"1.208.0.0/12","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"1.209.65.0/24","super_pfx":"1.208.0.0/12","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"1.209.174.0/24","super_pfx":"1.208.0.0/12","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"1.209.176.0/24","super_pfx":"1.208.0.0/12","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"1.209.66.0/24","super_pfx":"1.208.0.0/12","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"1.209.64.0/24","super_pfx":"1.208.0.0/12","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["18176","3786"],"attackers":["18176"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["18176"],"prefixes":["1.209.64.0/24","1.209.66.0/24","1.209.60.0/24","1.208.0.0/12","1.209.65.0/24","1.209.174.0/24","1.209.62.0/24","1.209.176.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"9286":{"asrank":{"asn":"9286","asnDegree":{"customer":19,"peer":6,"provider":1},"asnName":"KINXIDC-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-9286-APNIC","orgName":"KINX"},"rank":1610},"hegemony":0.00013300490887690987},"9957":{"asrank":{"asn":"9957","asnDegree":{"customer":15,"peer":64,"provider":9},"asnName":"KINX-AS","organization":{"country":{"iso":"KR"},"orgId":"@aut-9286-APNIC","orgName":"KINX"},"rank":893},"hegemony":0.0003601242273367497}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":3,"name":"irr-RIPE-all-newcomer-no-record"},{"count":3,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":3,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":3,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":3,"name":"rpki-all-newcomer-unknown-roa"},{"count":3,"name":"irr-REACH-all-oldcomer-no-record"},{"count":3,"name":"rpki-some-oldcomer-unknown-roa"},{"count":3,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":3,"name":"irr-BELL-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":3,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"all-oldcomers-routeviews-peer"},{"count":3,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":3,"name":"single-peer-on-attacker-path"},{"count":1,"name":"long-prefix"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":3,"name":"irr-APNIC-all-newcomer-no-record"},{"count":3,"name":"all-newcomers-are-rel-neighbor"},{"count":3,"name":"previously-announced-by-all-newcomers"},{"count":3,"name":"oldcomer-newcomer-some-siblings"},{"count":3,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":3,"name":"irr-TC-all-oldcomer-no-record"},{"count":3,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"newcomer-less-specific"},{"count":3,"name":"some-newcomers-are-rel-neighbor"},{"count":3,"name":"oldcomer-newcomer-all-siblings"},{"count":3,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":3,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":3,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":3,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":3,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":3,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":3,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":3,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":3,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":3,"name":"irr-BELL-all-newcomer-no-record"},{"count":3,"name":"rpki-some-newcomer-unknown-roa"},{"count":3,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":3,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":3,"name":"irr-REACH-all-newcomer-no-record"},{"count":3,"name":"irr-BBOI-all-newcomer-no-record"},{"count":3,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":3,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":3,"name":"irr-RADB-all-newcomer-more-specific-record"},{"count":3,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":3,"name":"irr-PANIX-all-newcomer-no-record"},{"count":3,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":3,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":3,"name":"rpki-all-oldcomer-unknown-roa"},{"count":3,"name":"all-origins-same-country"},{"count":1,"name":"all-newcomers-are-customers"},{"count":3,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":3,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":3,"name":"previously-announced-by-some-newcomers"},{"count":3,"name":"prefix-small-edit-distance"},{"count":3,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":3,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":3,"name":"irr-TC-all-newcomer-no-record"},{"count":2,"name":"all-newcomers-are-providers"},{"count":2,"name":"all-newcomers-next-to-an-oldcomer"},{"count":2,"name":"all-newcomers-are-rel-upstream"},{"count":2,"name":"some-newcomers-are-providers"},{"count":2,"name":"some-newcomers-are-rel-upstream"},{"count":2,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":2,"name":"all-newcomers-routeviews-peer"},{"count":2,"name":"newcomer-more-specific"},{"count":2,"name":"newcomers-always-on-oldcomer-originated-paths"}],"pfx_events_cnt":3,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0039026737213134766,"proc_time_tagger":0.06637024879455566,"total_tags_cnt":72},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-9286=9957","insert_ts":1784848890,"last_modified_ts":1784849483,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":93,"explanation":"The ASNs of (at least one) newcomer AS and (at least one) oldcomer AS are siblings/friends and previously announced similar prefixes. This event is likely benign and probably not a misconfiguration","inference_id":"sibling-close-prefix","labels":["legitimate"],"suspicion_level":2},{"confidence":92,"explanation":"all newcomer(s) are customer(s) of the oldcomer(s) and have advertised the prefix in the past","inference_id":"all-newcomers-customers-announced-prefix","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"Prefix more specific than a /24 (unlikely to be propagated). It could be blackholing (e.g., for DoS mitigation)","inference_id":"blackholed-prefix","labels":["legitimate"],"suspicion_level":9},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":75,"explanation":"all newcomers are more specific than their IRR records","inference_id":"all-newcomers-more-specific-irr-record","labels":["legitimate"],"suspicion_level":20},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"121.78.227.0/25","super_pfx":"121.78.227.0/24","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"long-prefix"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"prefix-small-edit-distance"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":93,"explanation":"The ASNs of (at least one) newcomer AS and (at least one) oldcomer AS are siblings/friends and previously announced similar prefixes. This event is likely benign and probably not a misconfiguration","inference_id":"sibling-close-prefix","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":75,"explanation":"all newcomers are more specific than their IRR records","inference_id":"all-newcomers-more-specific-irr-record","labels":["legitimate"],"suspicion_level":20},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are providers and all the traffic towards the oldcomers goes through the newcomers","inference_id":"all-newcomers-providers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"121.78.7.0/24","super_pfx":"121.78.0.0/18","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-routeviews-peer"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"newcomers-always-on-oldcomer-originated-paths"}]},{"finished_ts":1784846700,"inferences":[{"confidence":93,"explanation":"The ASNs of (at least one) newcomer AS and (at least one) oldcomer AS are siblings/friends and previously announced similar prefixes. This event is likely benign and probably not a misconfiguration","inference_id":"sibling-close-prefix","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":75,"explanation":"all newcomers are more specific than their IRR records","inference_id":"all-newcomers-more-specific-irr-record","labels":["legitimate"],"suspicion_level":20},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are providers and all the traffic towards the oldcomers goes through the newcomers","inference_id":"all-newcomers-providers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"121.78.8.0/24","super_pfx":"121.78.0.0/18","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-routeviews-peer"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"newcomers-always-on-oldcomer-originated-paths"}]}],"summary":{"ases":["9286","9957"],"attackers":["9286","9957"],"inference_result":{"inferences":[{"confidence":99,"explanation":"Prefix more specific than a /24 (unlikely to be propagated). It could be blackholing (e.g., for DoS mitigation)","inference_id":"blackholed-prefix","labels":["legitimate"],"suspicion_level":9},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1}],"primary_inference":{"confidence":99,"explanation":"Event has prefix events with different inferences, but they all map to the same class.","inference_id":"mixed-legitimate","labels":["legitimate"],"suspicion_level":9}},"newcomers":["9286","9957"],"prefixes":["121.78.0.0/18","121.78.8.0/24","121.78.227.0/24","121.78.227.0/25","121.78.7.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"long-prefix"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"newcomer-less-specific"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-routeviews-peer"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"all-newcomers-are-rel-upstream"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"newcomers-always-on-oldcomer-originated-paths"}],"tr_worthy":false,"victims":["9286","9957"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855},"45989":{"asrank":{"asn":"45989","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"KLNETCO-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-45989-APNIC","orgName":"KL-Net Corp."},"rank":12717},"hegemony":2.462362544216075e-07}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004940032958984375,"proc_time_tagger":0.009404897689819336,"total_tags_cnt":63},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=45989","insert_ts":1784848890,"last_modified_ts":1784849483,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.234.61.0/24","super_pfx":"211.234.0.0/17","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["45989","3786"],"attackers":["45989"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["45989"],"prefixes":["211.234.0.0/17","211.234.61.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"152204":{"asrank":{"asn":"152204","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"JWGROUP-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-152204-APNIC","orgName":"JW Holdings"},"rank":12717},"hegemony":2.4623204798529823e-07},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":3,"name":"irr-RIPE-all-newcomer-no-record"},{"count":3,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":3,"name":"irr-ARIN-all-newcomer-no-record"},{"count":3,"name":"oldcomer-path-prepending"},{"count":3,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":3,"name":"rpki-all-newcomer-unknown-roa"},{"count":3,"name":"irr-REACH-all-oldcomer-no-record"},{"count":3,"name":"rpki-some-oldcomer-unknown-roa"},{"count":3,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":3,"name":"irr-BELL-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":3,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":3,"name":"all-newcomers-next-to-an-oldcomer"},{"count":3,"name":"irr-RADB-all-newcomer-no-record"},{"count":3,"name":"some-newcomers-stub-ases"},{"count":3,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":3,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":3,"name":"single-peer-on-attacker-path"},{"count":3,"name":"some-newcomers-are-rel-downstream"},{"count":3,"name":"irr-all-newcomer-no-record"},{"count":3,"name":"all-newcomers-stub-ases"},{"count":3,"name":"irr-APNIC-all-newcomer-no-record"},{"count":3,"name":"all-newcomers-are-rel-neighbor"},{"count":3,"name":"previously-announced-by-all-newcomers"},{"count":3,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":3,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-TC-all-oldcomer-no-record"},{"count":3,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":3,"name":"some-newcomers-are-rel-neighbor"},{"count":3,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":3,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":3,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":3,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":3,"name":"all-newcomers-are-rel-downstream"},{"count":3,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":3,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":3,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":3,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":3,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":3,"name":"irr-BELL-all-newcomer-no-record"},{"count":3,"name":"rpki-some-newcomer-unknown-roa"},{"count":3,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":3,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":3,"name":"some-newcomers-are-customers"},{"count":3,"name":"irr-REACH-all-newcomer-no-record"},{"count":3,"name":"irr-BBOI-all-newcomer-no-record"},{"count":3,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":3,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":3,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":3,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":3,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":3,"name":"irr-PANIX-all-newcomer-no-record"},{"count":3,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":3,"name":"rpki-all-oldcomer-unknown-roa"},{"count":3,"name":"all-origins-same-country"},{"count":3,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":3,"name":"all-newcomers-are-customers"},{"count":3,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":3,"name":"previously-announced-by-some-newcomers"},{"count":3,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":3,"name":"newcomer-more-specific"},{"count":3,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":3,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":3,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0011801719665527344,"proc_time_tagger":0.027980327606201172,"total_tags_cnt":63},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=152204","insert_ts":1784848890,"last_modified_ts":1784849483,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.60.135.0/24","super_pfx":"211.60.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.171.218.0/24","super_pfx":"211.171.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.181.114.0/24","super_pfx":"211.181.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","152204"],"attackers":["152204"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["152204"],"prefixes":["211.60.135.0/24","211.171.218.0/24","211.60.0.0/16","211.181.0.0/16","211.181.114.0/24","211.171.0.0/16"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"10059":{"asrank":{"asn":"10059","asnDegree":{"customer":0,"peer":0,"provider":0},"asnName":"KIDC-AS","organization":{"country":{"iso":"KR"},"orgId":"@aut-10059-APNIC","orgName":"LG DACOM KIDC"},"rank":null},"hegemony":0},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004706382751464844,"proc_time_tagger":0.006899833679199219,"total_tags_cnt":57},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=10059","insert_ts":1784848890,"last_modified_ts":1784849483,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"117.52.30.0/24","super_pfx":"117.52.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","10059"],"attackers":["10059"],"inference_result":{"inferences":[{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"primary_inference":{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}},"newcomers":["10059"],"prefixes":["117.52.30.0/24","117.52.0.0/16"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"131858":{"asrank":{"asn":"131858","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"KAKAOPAYINSURE-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-131858-APNIC","orgName":"kakaopay insurance"},"rank":12717},"hegemony":4.1038846913682977e-07},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005116462707519531,"proc_time_tagger":0.009310245513916016,"total_tags_cnt":63},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=131858","insert_ts":1784848890,"last_modified_ts":1784849483,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"115.91.215.0/24","super_pfx":"115.88.0.0/13","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["131858","3786"],"attackers":["131858"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["131858"],"prefixes":["115.91.215.0/24","115.88.0.0/13"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855},"55627":{"asrank":{"asn":"55627","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"DONGDUK-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-55627-APNIC","orgName":"Dongduk Womens University"},"rank":12717},"hegemony":9.028508426127599e-07}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":2,"name":"irr-RIPE-all-newcomer-no-record"},{"count":2,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"irr-ARIN-all-newcomer-no-record"},{"count":2,"name":"oldcomer-path-prepending"},{"count":2,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":2,"name":"rpki-all-newcomer-unknown-roa"},{"count":2,"name":"irr-REACH-all-oldcomer-no-record"},{"count":2,"name":"rpki-some-oldcomer-unknown-roa"},{"count":2,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":2,"name":"irr-BELL-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":2,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":2,"name":"single-rel-upstream-chain"},{"count":2,"name":"all-newcomers-next-to-an-oldcomer"},{"count":2,"name":"some-newcomers-stub-ases"},{"count":2,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":2,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":2,"name":"single-peer-on-attacker-path"},{"count":2,"name":"some-newcomers-are-rel-downstream"},{"count":2,"name":"all-newcomers-stub-ases"},{"count":2,"name":"irr-APNIC-all-newcomer-no-record"},{"count":2,"name":"all-newcomers-are-rel-neighbor"},{"count":2,"name":"previously-announced-by-all-newcomers"},{"count":2,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":2,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-TC-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":2,"name":"some-newcomers-are-rel-neighbor"},{"count":2,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":2,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":2,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":2,"name":"all-newcomers-are-rel-downstream"},{"count":2,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":2,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":2,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":2,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":2,"name":"irr-BELL-all-newcomer-no-record"},{"count":2,"name":"rpki-some-newcomer-unknown-roa"},{"count":2,"name":"irr-RADB-all-newcomer-exact-record"},{"count":2,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":2,"name":"some-newcomers-are-customers"},{"count":2,"name":"irr-REACH-all-newcomer-no-record"},{"count":2,"name":"irr-BBOI-all-newcomer-no-record"},{"count":2,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":2,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":2,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":2,"name":"irr-PANIX-all-newcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":2,"name":"rpki-all-oldcomer-unknown-roa"},{"count":2,"name":"all-origins-same-country"},{"count":2,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":2,"name":"all-newcomers-are-customers"},{"count":2,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":2,"name":"previously-announced-by-some-newcomers"},{"count":2,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":2,"name":"newcomer-more-specific"},{"count":2,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":2,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":2,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0016584396362304688,"proc_time_tagger":0.021100282669067383,"total_tags_cnt":63},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=55627","insert_ts":1784848890,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"1.214.126.0/24","super_pfx":"1.208.0.0/12","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"1.214.127.0/24","super_pfx":"1.208.0.0/12","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["55627","3786"],"attackers":["55627"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["55627"],"prefixes":["1.208.0.0/12","1.214.127.0/24","1.214.126.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855},"4668":{"asrank":{"asn":"4668","asnDegree":{"customer":0,"peer":2,"provider":3},"asnName":"LGNET-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-4668-APNIC","orgName":"LG CNS"},"rank":12717},"hegemony":0.00013083352984934746}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004971027374267578,"proc_time_tagger":0.022928476333618164,"total_tags_cnt":63},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=4668","insert_ts":1784848889,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"115.91.28.0/24","super_pfx":"115.88.0.0/13","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","4668"],"attackers":["4668"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["4668"],"prefixes":["115.91.28.0/24","115.88.0.0/13"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"131883":{"asrank":{"asn":"131883","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"GBST-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-131883-APNIC","orgName":"INSTITUTES OF GREENBIO SCIENCE AND TECHNOLOGY"},"rank":12717},"hegemony":0},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004839897155761719,"proc_time_tagger":0.017531871795654297,"total_tags_cnt":57},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=131883","insert_ts":1784848889,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"115.92.244.0/24","super_pfx":"115.88.0.0/13","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","131883"],"attackers":["131883"],"inference_result":{"inferences":[{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"primary_inference":{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}},"newcomers":["131883"],"prefixes":["115.88.0.0/13","115.92.244.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855},"45402":{"asrank":{"asn":"45402","asnDegree":{"customer":0,"peer":0,"provider":0},"asnName":"SAMSUNGLIFESERVICE-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-45402-APNIC","orgName":"SAMSUNG LIFE SERVICE"},"rank":null},"hegemony":0}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-newcomer-exact-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.000576019287109375,"proc_time_tagger":0.007585048675537109,"total_tags_cnt":56},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=45402","insert_ts":1784848890,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"210.108.67.0/24","super_pfx":"210.108.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","45402"],"attackers":["45402"],"inference_result":{"inferences":[{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"primary_inference":{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}},"newcomers":["45402"],"prefixes":["210.108.67.0/24","210.108.0.0/16"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"10167":{"asrank":{"asn":"10167","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"HANVIT-AS","organization":{"country":{"iso":"KR"},"orgId":"@aut-10167-APNIC","orgName":"HANVIT BANK"},"rank":12717},"hegemony":2.2160977333388805e-06},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-newcomer-exact-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005800724029541016,"proc_time_tagger":0.011793851852416992,"total_tags_cnt":62},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=10167","insert_ts":1784848890,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"115.88.201.0/24","super_pfx":"115.88.0.0/13","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["10167","3786"],"attackers":["10167"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["10167"],"prefixes":["115.88.201.0/24","115.88.0.0/13"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"17612":{"asrank":{"asn":"17612","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"RINNAI-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-17612-APNIC","orgName":"Rinnai Korea"},"rank":12717},"hegemony":1.3193906288329784e-05},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.00048279762268066406,"proc_time_tagger":0.015661239624023438,"total_tags_cnt":57},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=17612","insert_ts":1784848890,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"58.72.180.0/24","super_pfx":"58.72.0.0/13","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["17612","3786"],"attackers":["17612"],"inference_result":{"inferences":[{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"primary_inference":{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}},"newcomers":["17612"],"prefixes":["58.72.180.0/24","58.72.0.0/13"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"138915":{"asrank":{"asn":"138915","asnDegree":{"customer":19,"peer":876,"provider":39},"asnName":"KAOPU-HK","organization":{"country":{"iso":"HK"},"orgId":"ORG-KCHL2-AP-APNIC","orgName":"Kaopu Cloud HK Limited"},"rank":1610},"hegemony":0.00011571120664497564},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"spamhaus-asn-drop"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005643367767333984,"proc_time_tagger":0.11159014701843262,"total_tags_cnt":55},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=138915","insert_ts":1784848889,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":80,"explanation":"the AS was on spamhaus asn-drop list","inference_id":"suspicious-spamhaus-asn","labels":["suspicious","incident"],"suspicion_level":80},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.60.106.0/24","super_pfx":"211.60.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"spamhaus-asn-drop"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","138915"],"attackers":["138915"],"inference_result":{"inferences":[{"confidence":80,"explanation":"the AS was on spamhaus asn-drop list","inference_id":"suspicious-spamhaus-asn","labels":["suspicious","incident"],"suspicion_level":80}],"primary_inference":{"confidence":80,"explanation":"the AS was on spamhaus asn-drop list","inference_id":"suspicious-spamhaus-asn","labels":["suspicious","incident"],"suspicion_level":80}},"newcomers":["138915"],"prefixes":["211.60.0.0/16","211.60.106.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"spamhaus-asn-drop"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855},"45399":{"asrank":{"asn":"45399","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"KAL-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-45399-APNIC","orgName":"Hanjin Information Systems Telecommunication Co., Ltd"},"rank":12717},"hegemony":1.559496278003514e-06}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004935264587402344,"proc_time_tagger":0.012078285217285156,"total_tags_cnt":57},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=45399","insert_ts":1784848890,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"110.45.205.0/24","super_pfx":"110.45.128.0/17","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","45399"],"attackers":["45399"],"inference_result":{"inferences":[{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"primary_inference":{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}},"newcomers":["45399"],"prefixes":["110.45.128.0/17","110.45.205.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855},"4791":{"asrank":{"asn":"4791","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"JOONGANGLIBO-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-4791-APNIC","orgName":"JoongAng Ilbo"},"rank":12717},"hegemony":1.411672704288889e-06}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":3,"name":"irr-RIPE-all-newcomer-no-record"},{"count":3,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":3,"name":"irr-ARIN-all-newcomer-no-record"},{"count":3,"name":"oldcomer-path-prepending"},{"count":3,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":3,"name":"rpki-all-newcomer-unknown-roa"},{"count":3,"name":"irr-REACH-all-oldcomer-no-record"},{"count":3,"name":"rpki-some-oldcomer-unknown-roa"},{"count":3,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":3,"name":"irr-BELL-all-oldcomer-no-record"},{"count":3,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":3,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":3,"name":"single-rel-upstream-chain"},{"count":3,"name":"all-newcomers-next-to-an-oldcomer"},{"count":3,"name":"irr-RADB-all-newcomer-no-record"},{"count":3,"name":"some-newcomers-stub-ases"},{"count":3,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":3,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":3,"name":"single-peer-on-attacker-path"},{"count":3,"name":"some-newcomers-are-rel-downstream"},{"count":3,"name":"irr-all-newcomer-no-record"},{"count":3,"name":"all-newcomers-stub-ases"},{"count":3,"name":"irr-APNIC-all-newcomer-no-record"},{"count":3,"name":"all-newcomers-are-rel-neighbor"},{"count":3,"name":"previously-announced-by-all-newcomers"},{"count":3,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":3,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":3,"name":"irr-TC-all-oldcomer-no-record"},{"count":3,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":3,"name":"some-newcomers-are-rel-neighbor"},{"count":3,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":3,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":3,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":3,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":3,"name":"all-newcomers-are-rel-downstream"},{"count":3,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":3,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":3,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":3,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":3,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":3,"name":"irr-BELL-all-newcomer-no-record"},{"count":3,"name":"rpki-some-newcomer-unknown-roa"},{"count":3,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":3,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":3,"name":"some-newcomers-are-customers"},{"count":3,"name":"irr-REACH-all-newcomer-no-record"},{"count":3,"name":"irr-BBOI-all-newcomer-no-record"},{"count":3,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":3,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":3,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":3,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":3,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":3,"name":"irr-PANIX-all-newcomer-no-record"},{"count":3,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":3,"name":"rpki-all-oldcomer-unknown-roa"},{"count":3,"name":"all-origins-same-country"},{"count":3,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":3,"name":"all-newcomers-are-customers"},{"count":3,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":3,"name":"prefix-small-edit-distance"},{"count":3,"name":"previously-announced-by-some-newcomers"},{"count":3,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":3,"name":"newcomer-more-specific"},{"count":3,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":3,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":3,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.002622842788696289,"proc_time_tagger":0.03840517997741699,"total_tags_cnt":65},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=4791","insert_ts":1784848889,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"117.52.112.0/24","super_pfx":"117.52.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"117.52.113.0/24","super_pfx":"117.52.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"117.52.117.0/24","super_pfx":"117.52.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","4791"],"attackers":["4791"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["4791"],"prefixes":["117.52.117.0/24","117.52.0.0/16","117.52.112.0/24","117.52.113.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"4664":{"asrank":{"asn":"4664","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"HIT-KR-AP","organization":{"country":{"iso":"KR"},"orgId":"@aut-4670-APNIC","orgName":"Shinbiro"},"rank":12717},"hegemony":1.6415380795847077e-06},"4670":{"asrank":{"asn":"4670","asnDegree":{"customer":5,"peer":0,"provider":1},"asnName":"HYUNDAI-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-4670-APNIC","orgName":"Shinbiro"},"rank":3331},"hegemony":0.00013793969178298008}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-newcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"all-victims-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"oldcomer-newcomer-some-siblings"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"oldcomer-newcomer-all-siblings"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"some-victims-stub-ases"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-more-specific-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0010068416595458984,"proc_time_tagger":0.06985783576965332,"total_tags_cnt":57},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-4670=4664","insert_ts":1784848889,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10},{"confidence":75,"explanation":"all newcomers are more specific than their IRR records","inference_id":"all-newcomers-more-specific-irr-record","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"61.111.114.0/24","super_pfx":"61.111.114.0/23","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-REACH-all-newcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"all-victims-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["4670","4664"],"attackers":["4670"],"inference_result":{"inferences":[{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1}],"primary_inference":{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1}},"newcomers":["4670"],"prefixes":["61.111.114.0/24","61.111.114.0/23"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-REACH-all-newcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"all-victims-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["4664"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"20940":{"asrank":{"asn":"20940","asnDegree":{"customer":13,"peer":1439,"provider":103},"asnName":"AKAMAI-ASN1","organization":{"country":{"iso":"NL"},"orgId":"ORG-AT1-RIPE","orgName":"Akamai International B.V."},"rank":2061},"hegemony":0.004387018685576572},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-dps-asn"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"due-to-dps-asn"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-ris-peer"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"has-dps-asn"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-manrs-member"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"all-newcomers-routeviews-peer"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"all-newcomers-dps-asn"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005207061767578125,"proc_time_tagger":0.6009256839752197,"total_tags_cnt":61},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=20940","insert_ts":1784848890,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":60,"explanation":"The event is caused by ASNs performing DoS Protection Services (DPS)","inference_id":"dps-asn","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"121.254.136.0/24","super_pfx":"121.254.128.0/17","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"some-newcomers-dps-asn"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"due-to-dps-asn"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"all-newcomers-ris-peer"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"has-dps-asn"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-routeviews-peer"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"all-newcomers-dps-asn"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["20940","3786"],"attackers":["20940"],"inference_result":{"inferences":[{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"primary_inference":{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}},"newcomers":["20940"],"prefixes":["121.254.136.0/24","121.254.128.0/17"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"some-newcomers-dps-asn"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"due-to-dps-asn"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"all-newcomers-ris-peer"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"has-dps-asn"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"all-newcomers-manrs-member"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-routeviews-peer"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"all-newcomers-dps-asn"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"131791":{"asrank":{"asn":"131791","asnDegree":{"customer":0,"peer":0,"provider":0},"asnName":"KAP-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-131791-APNIC","orgName":"Korea Asset Pricing"},"rank":null},"hegemony":0},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004813671112060547,"proc_time_tagger":0.013581037521362305,"total_tags_cnt":57},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=131791","insert_ts":1784848889,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.119.234.0/24","super_pfx":"211.119.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","131791"],"attackers":["131791"],"inference_result":{"inferences":[{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"primary_inference":{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}},"newcomers":["131791"],"prefixes":["211.119.0.0/16","211.119.234.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"152287":{"asrank":{"asn":"152287","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"HANWHALIFE-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-152287-APNIC","orgName":"HANWHALIFE"},"rank":12717},"hegemony":1.6415469865686547e-07},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-newcomer-exact-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005881786346435547,"proc_time_tagger":0.008866548538208008,"total_tags_cnt":62},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=152287","insert_ts":1784848890,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"106.249.60.0/24","super_pfx":"106.240.0.0/12","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["152287","3786"],"attackers":["152287"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["152287"],"prefixes":["106.240.0.0/12","106.249.60.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"131886":{"asrank":{"asn":"131886","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"TOSSCX-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-131886-APNIC","orgName":"tosscx"},"rank":12717},"hegemony":0},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0004813671112060547,"proc_time_tagger":0.009266853332519531,"total_tags_cnt":57},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=131886","insert_ts":1784848890,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.115.118.0/24","super_pfx":"211.115.64.0/18","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["131886","3786"],"attackers":["131886"],"inference_result":{"inferences":[{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"primary_inference":{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}},"newcomers":["131886"],"prefixes":["211.115.64.0/18","211.115.118.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"131809":{"asrank":{"asn":"131809","asnDegree":{"customer":0,"peer":0,"provider":0},"asnName":"KCISMYDATA-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-131809-APNIC","orgName":"Korea Credit Information Services"},"rank":null},"hegemony":0},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-newcomer-exact-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005693435668945312,"proc_time_tagger":0.007767915725708008,"total_tags_cnt":56},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=131809","insert_ts":1784848890,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"210.216.219.0/24","super_pfx":"210.216.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","131809"],"attackers":["131809"],"inference_result":{"inferences":[{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"primary_inference":{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}},"newcomers":["131809"],"prefixes":["210.216.219.0/24","210.216.0.0/16"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855},"55611":{"asrank":{"asn":"55611","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"KYUNGMIN-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-55611-APNIC","orgName":"kyungmin university"},"rank":12717},"hegemony":5.745414452990292e-07}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-newcomer-exact-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0006029605865478516,"proc_time_tagger":0.009482145309448242,"total_tags_cnt":62},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=55611","insert_ts":1784848890,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.50.167.0/24","super_pfx":"211.50.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","55611"],"attackers":["55611"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["55611"],"prefixes":["211.50.0.0/16","211.50.167.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855},"9575":{"asrank":{"asn":"9575","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"KCTC-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@family-20195","orgName":"KCTC"},"rank":12717},"hegemony":8.207825554836605e-08}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005238056182861328,"proc_time_tagger":0.009393692016601562,"total_tags_cnt":63},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=9575","insert_ts":1784848890,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.181.50.0/24","super_pfx":"211.181.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["9575","3786"],"attackers":["9575"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["9575"],"prefixes":["211.181.0.0/16","211.181.50.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"136897":{"asrank":{"asn":"136897","asnDegree":{"customer":13,"peer":43,"provider":18},"asnName":"ENJOYVC-AS-AP","organization":{"country":{"iso":"HK"},"orgId":"ORG-ECGL1-AP-APNIC","orgName":"Enjoyvc Cloud Group Limited."},"rank":1359},"hegemony":4.1408620156744236e-05},"4670":{"asrank":{"asn":"4670","asnDegree":{"customer":5,"peer":0,"provider":1},"asnName":"HYUNDAI-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-4670-APNIC","orgName":"Shinbiro"},"rank":3331},"hegemony":0.00013793969178298008}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-newcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"newcomer-less-specific"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-all-oldcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-more-specific-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"prefix-small-edit-distance"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0009531974792480469,"proc_time_tagger":0.051175832748413086,"total_tags_cnt":53},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-4670=136897","insert_ts":1784848890,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":75,"explanation":"all newcomers are more specific than their IRR records","inference_id":"all-newcomers-more-specific-irr-record","labels":["legitimate"],"suspicion_level":20},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"61.110.11.0/24","super_pfx":"61.110.10.0/23","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-REACH-all-newcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["4670","136897"],"attackers":["4670"],"inference_result":{"inferences":[{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}},"newcomers":["4670"],"prefixes":["61.110.10.0/23","61.110.11.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-REACH-all-newcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["136897"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855},"45987":{"asrank":{"asn":"45987","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"DONGWHA-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-45987-APNIC","orgName":"Dongwha Enterprise Co. Ltd."},"rank":12717},"hegemony":1.6415469865686547e-07}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"single-rel-upstream-chain"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-newcomer-exact-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005962848663330078,"proc_time_tagger":0.009908199310302734,"total_tags_cnt":63},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=45987","insert_ts":1784848890,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"210.120.82.0/24","super_pfx":"210.120.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","45987"],"attackers":["45987"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["45987"],"prefixes":["210.120.0.0/16","210.120.82.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"18333":{"asrank":{"asn":"18333","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"ATNET-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-18333-APNIC","orgName":"at(Korea Argo-Fisheries Food Trade Corporation)"},"rank":12717},"hegemony":1.6415469865686547e-07},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"single-rel-upstream-chain"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005123615264892578,"proc_time_tagger":0.00957632064819336,"total_tags_cnt":64},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=18333","insert_ts":1784848890,"last_modified_ts":1784849484,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"210.124.170.0/24","super_pfx":"210.124.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","18333"],"attackers":["18333"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["18333"],"prefixes":["210.124.0.0/16","210.124.170.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"17843":{"asrank":{"asn":"17843","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"SAHMYOOK-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-17843-APNIC","orgName":"Sahmyook University"},"rank":12717},"hegemony":2.6264751785098475e-06},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"single-rel-upstream-chain"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005292892456054688,"proc_time_tagger":0.009797811508178711,"total_tags_cnt":64},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=17843","insert_ts":1784848890,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"115.91.25.0/24","super_pfx":"115.88.0.0/13","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","17843"],"attackers":["17843"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["17843"],"prefixes":["115.91.25.0/24","115.88.0.0/13"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"131851":{"asrank":{"asn":"131851","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"HANAINSEXT-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@family-28407","orgName":"Hana Insurance Co., Ltd."},"rank":12717},"hegemony":6.610563709051071e-08},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"single-rel-upstream-chain"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005283355712890625,"proc_time_tagger":0.010133981704711914,"total_tags_cnt":68},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=131851","insert_ts":1784848890,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.181.170.0/24","super_pfx":"211.181.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","131851"],"attackers":["131851"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["131851"],"prefixes":["211.181.170.0/24","211.181.0.0/16"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"17853":{"asrank":{"asn":"17853","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"LGTELECOM-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-17853-APNIC","orgName":"LGTELECOM"},"rank":12717},"hegemony":0.0001302581915552569},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":7,"name":"irr-RIPE-all-newcomer-no-record"},{"count":7,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":7,"name":"irr-ARIN-all-newcomer-no-record"},{"count":7,"name":"oldcomer-path-prepending"},{"count":7,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":7,"name":"rpki-all-newcomer-unknown-roa"},{"count":7,"name":"irr-REACH-all-oldcomer-no-record"},{"count":7,"name":"rpki-some-oldcomer-unknown-roa"},{"count":6,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":7,"name":"irr-BELL-all-oldcomer-no-record"},{"count":7,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":7,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":7,"name":"single-rel-upstream-chain"},{"count":7,"name":"all-newcomers-next-to-an-oldcomer"},{"count":7,"name":"irr-RADB-all-newcomer-no-record"},{"count":7,"name":"some-newcomers-stub-ases"},{"count":7,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":7,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":7,"name":"single-peer-on-attacker-path"},{"count":7,"name":"some-newcomers-are-rel-downstream"},{"count":7,"name":"irr-all-newcomer-no-record"},{"count":7,"name":"all-newcomers-stub-ases"},{"count":7,"name":"irr-APNIC-all-newcomer-no-record"},{"count":7,"name":"all-newcomers-are-rel-neighbor"},{"count":7,"name":"previously-announced-by-all-newcomers"},{"count":7,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":6,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":7,"name":"irr-TC-all-oldcomer-no-record"},{"count":7,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":7,"name":"some-newcomers-are-rel-neighbor"},{"count":7,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":7,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":7,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":7,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":7,"name":"all-newcomers-are-rel-downstream"},{"count":7,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":7,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":7,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":7,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":7,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":7,"name":"irr-BELL-all-newcomer-no-record"},{"count":7,"name":"rpki-some-newcomer-unknown-roa"},{"count":7,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":7,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":7,"name":"some-newcomers-are-customers"},{"count":7,"name":"irr-REACH-all-newcomer-no-record"},{"count":7,"name":"irr-BBOI-all-newcomer-no-record"},{"count":7,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":7,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":7,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":7,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":7,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":7,"name":"irr-PANIX-all-newcomer-no-record"},{"count":7,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":7,"name":"rpki-all-oldcomer-unknown-roa"},{"count":7,"name":"all-origins-same-country"},{"count":7,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":7,"name":"all-newcomers-are-customers"},{"count":7,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":7,"name":"previously-announced-by-some-newcomers"},{"count":7,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":7,"name":"newcomer-more-specific"},{"count":7,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":7,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"}],"pfx_events_cnt":7,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.006292104721069336,"proc_time_tagger":0.6536407470703125,"total_tags_cnt":66},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=17853","insert_ts":1784848889,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"210.182.125.0/24","super_pfx":"210.182.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.60.66.0/24","super_pfx":"211.60.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.40.215.0/24","super_pfx":"211.40.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"210.216.171.0/24","super_pfx":"210.216.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.119.251.0/24","super_pfx":"211.119.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.181.234.0/24","super_pfx":"211.181.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.234.43.0/24","super_pfx":"211.234.0.0/17","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","17853"],"attackers":["17853"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["17853"],"prefixes":["210.216.171.0/24","211.234.0.0/17","211.40.0.0/16","211.119.251.0/24","210.182.0.0/16","211.119.0.0/16","210.182.125.0/24","211.60.0.0/16","210.216.0.0/16","211.181.0.0/16","211.181.234.0/24","211.60.66.0/24","211.40.215.0/24","211.234.43.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-APNIC-all-oldcomer-more-specific-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"138195":{"asrank":{"asn":"138195","asnDegree":{"customer":16,"peer":5,"provider":5},"asnName":"MOACKCOLTD-AS-AP","organization":{"country":{"iso":"KR"},"orgId":"ORG-MA68-AP-APNIC","orgName":"MOACK.Co.LTD"},"rank":1803},"hegemony":2.2957969927250306e-05},"4670":{"asrank":{"asn":"4670","asnDegree":{"customer":5,"peer":0,"provider":1},"asnName":"HYUNDAI-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-4670-APNIC","orgName":"Shinbiro"},"rank":3331},"hegemony":0.00013793969178298008}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":2,"name":"irr-RIPE-all-newcomer-no-record"},{"count":2,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"irr-ARIN-all-newcomer-no-record"},{"count":2,"name":"oldcomer-path-prepending"},{"count":2,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":2,"name":"rpki-all-newcomer-unknown-roa"},{"count":2,"name":"irr-REACH-all-oldcomer-no-record"},{"count":2,"name":"rpki-some-oldcomer-unknown-roa"},{"count":2,"name":"irr-REACH-all-newcomer-more-specific-record"},{"count":2,"name":"irr-BELL-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":2,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":2,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":2,"name":"single-peer-on-attacker-path"},{"count":2,"name":"irr-APNIC-all-newcomer-no-record"},{"count":2,"name":"irr-RADB-all-oldcomer-no-record"},{"count":2,"name":"previously-announced-by-all-newcomers"},{"count":2,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":2,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-TC-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":2,"name":"newcomer-less-specific"},{"count":2,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":2,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":2,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":2,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":2,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":2,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":2,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":2,"name":"irr-BELL-all-newcomer-no-record"},{"count":2,"name":"rpki-some-newcomer-unknown-roa"},{"count":2,"name":"irr-all-oldcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":2,"name":"irr-BBOI-all-newcomer-no-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":2,"name":"irr-RADB-all-newcomer-more-specific-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":2,"name":"irr-PANIX-all-newcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":2,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":2,"name":"rpki-all-oldcomer-unknown-roa"},{"count":2,"name":"all-origins-same-country"},{"count":2,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":2,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":2,"name":"prefix-small-edit-distance"},{"count":2,"name":"previously-announced-by-some-newcomers"},{"count":2,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":2,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":2,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":2,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0023696422576904297,"proc_time_tagger":0.10662508010864258,"total_tags_cnt":54},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-4670=138195","insert_ts":1784848890,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":75,"explanation":"all newcomers are more specific than their IRR records","inference_id":"all-newcomers-more-specific-irr-record","labels":["legitimate"],"suspicion_level":20},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"61.110.3.0/24","super_pfx":"61.110.2.0/23","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-REACH-all-newcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":75,"explanation":"all newcomers are more specific than their IRR records","inference_id":"all-newcomers-more-specific-irr-record","labels":["legitimate"],"suspicion_level":20},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"61.110.23.0/24","super_pfx":"61.110.22.0/23","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-REACH-all-newcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["138195","4670"],"attackers":["4670"],"inference_result":{"inferences":[{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}},"newcomers":["4670"],"prefixes":["61.110.23.0/24","61.110.22.0/23","61.110.3.0/24","61.110.2.0/23"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"newcomer-less-specific"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-more-specific-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-newcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["138195"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"1659":{"asrank":{"asn":"1659","asnDegree":{"customer":0,"peer":0,"provider":4},"asnName":"ERX-TANET-ASN1","organization":{"country":{"iso":"TW"},"orgId":"@aut-1659-APNIC","orgName":"Taiwan Academic Network (TANet) Information Center"},"rank":12717},"hegemony":0.0017981952373814511},"17716":{"asrank":{"asn":"17716","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"NTU-TW","organization":{"country":{"iso":"TW"},"orgId":"@aut-17716-APNIC","orgName":"National Taiwan University"},"rank":12717},"hegemony":2.1034640515579332e-05}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":4,"name":"irr-RIPE-all-newcomer-no-record"},{"count":4,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":4,"name":"irr-ARIN-all-newcomer-no-record"},{"count":4,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":4,"name":"irr-REACH-all-oldcomer-no-record"},{"count":4,"name":"irr-BELL-all-oldcomer-no-record"},{"count":4,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":4,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":4,"name":"rpki-some-newcomer-valid-roa"},{"count":4,"name":"rpki-some-oldcomer-valid-roa"},{"count":4,"name":"irr-RADB-all-newcomer-no-record"},{"count":4,"name":"some-newcomers-stub-ases"},{"count":4,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":4,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":4,"name":"single-peer-on-attacker-path"},{"count":4,"name":"rpki-all-newcomer-valid-roa"},{"count":4,"name":"irr-all-newcomer-no-record"},{"count":4,"name":"all-victims-stub-ases"},{"count":4,"name":"all-newcomers-stub-ases"},{"count":4,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-no-record"},{"count":4,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":4,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-TC-all-oldcomer-no-record"},{"count":4,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":4,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":4,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":4,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":4,"name":"rpki-all-oldcomer-valid-roa"},{"count":4,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":4,"name":"some-victims-stub-ases"},{"count":4,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":4,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":4,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":4,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":4,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":4,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-all-oldcomer-no-record"},{"count":4,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":4,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":4,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":4,"name":"irr-REACH-all-newcomer-no-record"},{"count":4,"name":"irr-BBOI-all-newcomer-no-record"},{"count":4,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":4,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":4,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":4,"name":"irr-PANIX-all-newcomer-no-record"},{"count":4,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":4,"name":"all-origins-same-country"},{"count":4,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":4,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":3,"name":"prefix-small-edit-distance"},{"count":4,"name":"previously-announced-by-some-newcomers"},{"count":4,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":4,"name":"newcomer-more-specific"},{"count":4,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":4,"name":"irr-TC-all-newcomer-no-record"},{"count":3,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":3,"name":"irr-NTTCOM-all-oldcomer-more-specific-record"}],"pfx_events_cnt":4,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0032520294189453125,"proc_time_tagger":0.08873534202575684,"total_tags_cnt":60},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-1659=17716","insert_ts":1784848890,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":89,"explanation":"The ASNs of the potential attacker previously announced similar prefix, this is more likely to be caused by a misconfiguration","inference_id":"misconfig-fatfinger-prefix","labels":["misconfig","fatfinger","incident"],"suspicion_level":20}],"sub_pfx":"120.96.0.0/15","super_pfx":"120.96.0.0/11","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-all-newcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":89,"explanation":"The ASNs of the potential attacker previously announced similar prefix, this is more likely to be caused by a misconfiguration","inference_id":"misconfig-fatfinger-prefix","labels":["misconfig","fatfinger","incident"],"suspicion_level":20}],"sub_pfx":"210.60.149.0/24","super_pfx":"210.60.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-all-newcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"sub_pfx":"203.68.168.0/24","super_pfx":"203.68.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-all-newcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":89,"explanation":"The ASNs of the potential attacker previously announced similar prefix, this is more likely to be caused by a misconfiguration","inference_id":"misconfig-fatfinger-prefix","labels":["misconfig","fatfinger","incident"],"suspicion_level":20}],"sub_pfx":"210.60.150.0/24","super_pfx":"210.60.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-all-newcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["1659","17716"],"attackers":["17716"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["17716"],"prefixes":["203.68.168.0/24","210.60.0.0/16","120.96.0.0/15","210.60.149.0/24","203.68.0.0/16","210.60.150.0/24","120.96.0.0/11"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-all-newcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"all-newcomers-stub-ases"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["1659"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"46003":{"asrank":{"asn":"46003","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"KOREACENTER-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-46003-APNIC","orgName":"CONNECTWAVE"},"rank":12717},"hegemony":1.5758851071059087e-05},"9286":{"asrank":{"asn":"9286","asnDegree":{"customer":19,"peer":6,"provider":1},"asnName":"KINXIDC-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-9286-APNIC","orgName":"KINX"},"rank":1610},"hegemony":0.00013300490887690987}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-providers"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-victims-stub-ases"},{"count":1,"name":"all-newcomers-are-rel-upstream"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-providers"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"some-victims-stub-ases"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-upstream"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-rel-upstream"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-rel-upstream"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"prefix-small-edit-distance"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.00027489662170410156,"proc_time_tagger":0.030204296112060547,"total_tags_cnt":63},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-46003=9286","insert_ts":1784848890,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s) and have advertised the prefix in the past","inference_id":"all-newcomers-providers-announced-prefix","labels":["legitimate"],"suspicion_level":20},{"confidence":89,"explanation":"The ASNs of the potential attacker previously announced similar prefix, this is more likely to be caused by a misconfiguration","inference_id":"misconfig-fatfinger-prefix","labels":["misconfig","fatfinger","incident"],"suspicion_level":20}],"sub_pfx":"14.129.0.0/24","super_pfx":"14.129.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-rel-upstream"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"some-newcomers-siblings-with-oldcomers-rel-upstream"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["46003","9286"],"attackers":["9286"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s) and have advertised the prefix in the past","inference_id":"all-newcomers-providers-announced-prefix","labels":["legitimate"],"suspicion_level":20}],"primary_inference":{"confidence":92,"explanation":"all newcomer(s) are provider(s) of the oldcomer(s) and have advertised the prefix in the past","inference_id":"all-newcomers-providers-announced-prefix","labels":["legitimate"],"suspicion_level":20}},"newcomers":["9286"],"prefixes":["14.129.0.0/16","14.129.0.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-all-newcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-rel-upstream"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"some-newcomers-siblings-with-oldcomers-rel-upstream"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["46003"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"8069":{"asrank":{"asn":"8069","asnDegree":{"customer":0,"peer":0,"provider":7},"asnName":"MICROSOFT-CORP-MSN-AS-BLOCK","organization":{"country":{"iso":"US"},"orgId":"MSFT-ARIN","orgName":"Microsoft Corporation"},"rank":12717},"hegemony":8.791869895381267e-05},"8075":{"asrank":{"asn":"8075","asnDegree":{"customer":7,"peer":286,"provider":12},"asnName":"MICROSOFT-CORP-MSN-AS-BLOCK","organization":{"country":{"iso":"US"},"orgId":"MSFT-ARIN","orgName":"Microsoft Corporation"},"rank":3033},"hegemony":0.026546959952275753}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":13,"name":"irr-RIPE-all-newcomer-no-record"},{"count":13,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":13,"name":"irr-ARIN-all-newcomer-no-record"},{"count":13,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":13,"name":"irr-REACH-all-oldcomer-no-record"},{"count":13,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":13,"name":"irr-BELL-all-oldcomer-no-record"},{"count":13,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":13,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":13,"name":"rpki-some-newcomer-valid-roa"},{"count":13,"name":"some-newcomers-siblings-with-oldcomers-customers"},{"count":13,"name":"rpki-some-oldcomer-valid-roa"},{"count":13,"name":"all-newcomers-next-to-an-oldcomer"},{"count":13,"name":"some-newcomers-stub-ases"},{"count":13,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":13,"name":"all-oldcomers-routeviews-peer"},{"count":13,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":13,"name":"single-peer-on-attacker-path"},{"count":13,"name":"rpki-all-newcomer-valid-roa"},{"count":13,"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":13,"name":"some-newcomers-are-rel-downstream"},{"count":13,"name":"all-newcomers-stub-ases"},{"count":13,"name":"irr-APNIC-all-newcomer-no-record"},{"count":13,"name":"all-newcomers-are-rel-neighbor"},{"count":13,"name":"previously-announced-by-all-newcomers"},{"count":13,"name":"oldcomer-newcomer-some-siblings"},{"count":13,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":13,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":13,"name":"irr-TC-all-oldcomer-no-record"},{"count":13,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":13,"name":"some-newcomers-are-rel-neighbor"},{"count":13,"name":"oldcomer-newcomer-all-siblings"},{"count":13,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":13,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":13,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":13,"name":"rpki-all-oldcomer-valid-roa"},{"count":13,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":13,"name":"all-newcomers-are-rel-downstream"},{"count":13,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":13,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":13,"name":"all-oldcomers-manrs-member"},{"count":13,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":13,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":13,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":13,"name":"all-newcomers-siblings-with-oldcomers-customers"},{"count":13,"name":"irr-BELL-all-newcomer-no-record"},{"count":5,"name":"irr-RADB-all-newcomer-exact-record"},{"count":13,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":13,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":13,"name":"some-newcomers-are-customers"},{"count":13,"name":"irr-REACH-all-newcomer-no-record"},{"count":13,"name":"irr-BBOI-all-newcomer-no-record"},{"count":13,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":13,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":13,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":13,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":13,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":13,"name":"irr-PANIX-all-newcomer-no-record"},{"count":13,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":13,"name":"all-origins-same-country"},{"count":13,"name":"all-oldcomers-ris-peer"},{"count":13,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":13,"name":"all-newcomers-are-customers"},{"count":13,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":13,"name":"prefix-small-edit-distance"},{"count":13,"name":"previously-announced-by-some-newcomers"},{"count":13,"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":13,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":13,"name":"newcomer-more-specific"},{"count":13,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":13,"name":"irr-TC-all-newcomer-no-record"},{"count":8,"name":"irr-RADB-all-newcomer-no-record"},{"count":8,"name":"irr-all-newcomer-no-record"}],"pfx_events_cnt":13,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.006129741668701172,"proc_time_tagger":1.4663546085357666,"total_tags_cnt":73},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-8075=8069","insert_ts":1784848890,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":93,"explanation":"The ASNs of (at least one) newcomer AS and (at least one) oldcomer AS are siblings/friends and previously announced similar prefixes. This event is likely benign and probably not a misconfiguration","inference_id":"sibling-close-prefix","labels":["legitimate"],"suspicion_level":2},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"20.47.46.0/24","super_pfx":"20.40.0.0/13","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":93,"explanation":"The ASNs of (at least one) newcomer AS and (at least one) oldcomer AS are siblings/friends and previously announced similar prefixes. This event is likely benign and probably not a misconfiguration","inference_id":"sibling-close-prefix","labels":["legitimate"],"suspicion_level":2},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"20.47.47.0/24","super_pfx":"20.40.0.0/13","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":93,"explanation":"The ASNs of (at least one) newcomer AS and (at least one) oldcomer AS are siblings/friends and previously announced similar prefixes. This event is likely benign and probably not a misconfiguration","inference_id":"sibling-close-prefix","labels":["legitimate"],"suspicion_level":2},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"20.47.90.0/24","super_pfx":"20.40.0.0/13","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":93,"explanation":"The ASNs of (at least one) newcomer AS and (at least one) oldcomer AS are siblings/friends and previously announced similar prefixes. This event is likely benign and probably not a misconfiguration","inference_id":"sibling-close-prefix","labels":["legitimate"],"suspicion_level":2},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"52.122.216.0/22","super_pfx":"52.120.0.0/14","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":93,"explanation":"The ASNs of (at least one) newcomer AS and (at least one) oldcomer AS are siblings/friends and previously announced similar prefixes. This event is likely benign and probably not a misconfiguration","inference_id":"sibling-close-prefix","labels":["legitimate"],"suspicion_level":2},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"20.47.91.0/24","super_pfx":"20.40.0.0/13","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":93,"explanation":"The ASNs of (at least one) newcomer AS and (at least one) oldcomer AS are siblings/friends and previously announced similar prefixes. This event is likely benign and probably not a misconfiguration","inference_id":"sibling-close-prefix","labels":["legitimate"],"suspicion_level":2},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"20.33.154.0/24","super_pfx":"20.33.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":93,"explanation":"The ASNs of (at least one) newcomer AS and (at least one) oldcomer AS are siblings/friends and previously announced similar prefixes. This event is likely benign and probably not a misconfiguration","inference_id":"sibling-close-prefix","labels":["legitimate"],"suspicion_level":2},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"52.122.253.0/24","super_pfx":"52.120.0.0/14","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":93,"explanation":"The ASNs of (at least one) newcomer AS and (at least one) oldcomer AS are siblings/friends and previously announced similar prefixes. This event is likely benign and probably not a misconfiguration","inference_id":"sibling-close-prefix","labels":["legitimate"],"suspicion_level":2},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"52.122.212.0/22","super_pfx":"52.120.0.0/14","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":93,"explanation":"The ASNs of (at least one) newcomer AS and (at least one) oldcomer AS are siblings/friends and previously announced similar prefixes. This event is likely benign and probably not a misconfiguration","inference_id":"sibling-close-prefix","labels":["legitimate"],"suspicion_level":2},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"20.33.94.0/24","super_pfx":"20.33.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":93,"explanation":"The ASNs of (at least one) newcomer AS and (at least one) oldcomer AS are siblings/friends and previously announced similar prefixes. This event is likely benign and probably not a misconfiguration","inference_id":"sibling-close-prefix","labels":["legitimate"],"suspicion_level":2},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"20.33.7.0/24","super_pfx":"20.33.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":93,"explanation":"The ASNs of (at least one) newcomer AS and (at least one) oldcomer AS are siblings/friends and previously announced similar prefixes. This event is likely benign and probably not a misconfiguration","inference_id":"sibling-close-prefix","labels":["legitimate"],"suspicion_level":2},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"20.157.140.0/24","super_pfx":"20.157.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":93,"explanation":"The ASNs of (at least one) newcomer AS and (at least one) oldcomer AS are siblings/friends and previously announced similar prefixes. This event is likely benign and probably not a misconfiguration","inference_id":"sibling-close-prefix","labels":["legitimate"],"suspicion_level":2},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"20.157.137.0/24","super_pfx":"20.157.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":93,"explanation":"The ASNs of (at least one) newcomer AS and (at least one) oldcomer AS are siblings/friends and previously announced similar prefixes. This event is likely benign and probably not a misconfiguration","inference_id":"sibling-close-prefix","labels":["legitimate"],"suspicion_level":2},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":99,"explanation":"All ASes involved are siblings","inference_id":"sibling-origins","labels":["legitimate"],"suspicion_level":1},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"52.122.36.0/22","super_pfx":"52.120.0.0/14","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-oldcomers-ris-peer"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["8069","8075"],"attackers":["8069"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["8069"],"prefixes":["20.33.94.0/24","20.157.0.0/16","20.47.47.0/24","52.122.216.0/22","20.33.7.0/24","20.47.46.0/24","20.157.137.0/24","20.157.140.0/24","20.47.91.0/24","20.47.90.0/24","52.120.0.0/14","20.33.154.0/24","52.122.253.0/24","20.40.0.0/13","52.122.212.0/22","52.122.36.0/22","20.33.0.0/16"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-oldcomers-ris-peer"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-oldcomers-routeviews-peer"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-some-siblings"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"oldcomer-newcomer-all-siblings"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"all-oldcomers-manrs-member"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["8075"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"152229":{"asrank":{"asn":"152229","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"COUPANGCIC-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-152229-APNIC","orgName":"Coupang Inc"},"rank":12717},"hegemony":1.641565110967321e-07},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-newcomer-exact-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005664825439453125,"proc_time_tagger":0.011592388153076172,"total_tags_cnt":56},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=152229","insert_ts":1784848890,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"115.92.28.0/24","super_pfx":"115.88.0.0/13","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","152229"],"attackers":["152229"],"inference_result":{"inferences":[{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"primary_inference":{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}},"newcomers":["152229"],"prefixes":["115.92.28.0/24","115.88.0.0/13"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"10155":{"asrank":{"asn":"10155","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"KOSME-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-10155-APNIC","orgName":"KOSME"},"rank":12717},"hegemony":8.207825554836605e-08},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-customers"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-newcomer-exact-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"prefix-small-edit-distance"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005643367767333984,"proc_time_tagger":0.010582685470581055,"total_tags_cnt":61},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=10155","insert_ts":1784848890,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":87,"explanation":"all newcomer origins are siblings with at least one customer of a potential victim","inference_id":"all-newcomers-siblings-with-oldcomers-customer","labels":["legitimate"],"suspicion_level":20},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"117.52.164.0/24","super_pfx":"117.52.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["10155","3786"],"attackers":["10155"],"inference_result":{"inferences":[{"confidence":87,"explanation":"all newcomer origins are siblings with at least one customer of a potential victim","inference_id":"all-newcomers-siblings-with-oldcomers-customer","labels":["legitimate"],"suspicion_level":20}],"primary_inference":{"confidence":87,"explanation":"all newcomer origins are siblings with at least one customer of a potential victim","inference_id":"all-newcomers-siblings-with-oldcomers-customer","labels":["legitimate"],"suspicion_level":20}},"newcomers":["10155"],"prefixes":["117.52.0.0/16","117.52.164.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"some-newcomers-siblings-with-oldcomers-customers"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"all-newcomers-siblings-with-oldcomers-customers"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"all-newcomers-siblings-with-oldcomers-rel-downstream"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855},"54201":{"asrank":{"asn":"54201","asnDegree":{"customer":0,"peer":2,"provider":8},"asnName":"WEWORK-MANAGEMENT-LLC","organization":{"country":{"iso":"US"},"orgId":"WLNL-1-ARIN","orgName":"We Link Networks LLC"},"rank":12717},"hegemony":7.38717805513484e-07}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":14,"name":"irr-RIPE-all-newcomer-no-record"},{"count":14,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":14,"name":"irr-ARIN-all-newcomer-no-record"},{"count":14,"name":"oldcomer-path-prepending"},{"count":14,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":14,"name":"rpki-all-newcomer-unknown-roa"},{"count":14,"name":"irr-REACH-all-oldcomer-no-record"},{"count":14,"name":"rpki-some-oldcomer-unknown-roa"},{"count":14,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":14,"name":"irr-BELL-all-oldcomer-no-record"},{"count":14,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":14,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":14,"name":"all-newcomers-next-to-an-oldcomer"},{"count":14,"name":"irr-RADB-all-newcomer-no-record"},{"count":14,"name":"some-newcomers-stub-ases"},{"count":14,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":14,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":14,"name":"single-peer-on-attacker-path"},{"count":14,"name":"some-newcomers-are-rel-downstream"},{"count":14,"name":"irr-all-newcomer-no-record"},{"count":14,"name":"all-newcomers-stub-ases"},{"count":14,"name":"irr-APNIC-all-newcomer-no-record"},{"count":14,"name":"all-newcomers-are-rel-neighbor"},{"count":14,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":14,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":14,"name":"irr-TC-all-oldcomer-no-record"},{"count":14,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":14,"name":"some-newcomers-are-rel-neighbor"},{"count":14,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":14,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":14,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":14,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":14,"name":"all-newcomers-are-rel-downstream"},{"count":14,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":14,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":14,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":14,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":14,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":14,"name":"irr-BELL-all-newcomer-no-record"},{"count":14,"name":"rpki-some-newcomer-unknown-roa"},{"count":14,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":14,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":14,"name":"some-newcomers-are-customers"},{"count":14,"name":"irr-REACH-all-newcomer-no-record"},{"count":14,"name":"irr-BBOI-all-newcomer-no-record"},{"count":14,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":14,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":14,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":14,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":14,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":14,"name":"irr-PANIX-all-newcomer-no-record"},{"count":14,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":14,"name":"rpki-all-oldcomer-unknown-roa"},{"count":14,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":14,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":14,"name":"all-newcomers-are-customers"},{"count":14,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":14,"name":"not-previously-announced-by-any-newcomer"},{"count":14,"name":"newcomer-more-specific"},{"count":14,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":14,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":14,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.006859302520751953,"proc_time_tagger":0.19930338859558105,"total_tags_cnt":61},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=54201","insert_ts":1784848889,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.60.53.0/24","super_pfx":"211.60.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.119.209.0/24","super_pfx":"211.119.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.169.10.0/24","super_pfx":"211.169.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.118.12.0/24","super_pfx":"211.118.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.170.67.0/24","super_pfx":"211.170.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.170.155.0/24","super_pfx":"211.170.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.168.7.0/24","super_pfx":"211.168.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.171.4.0/24","super_pfx":"211.171.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.171.131.0/24","super_pfx":"211.171.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.171.5.0/24","super_pfx":"211.171.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.169.43.0/24","super_pfx":"211.169.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.169.27.0/24","super_pfx":"211.169.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"106.241.36.0/24","super_pfx":"106.240.0.0/12","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.169.35.0/24","super_pfx":"211.169.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","54201"],"attackers":["54201"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["54201"],"prefixes":["106.240.0.0/12","211.119.0.0/16","211.170.67.0/24","211.171.4.0/24","211.171.5.0/24","211.169.43.0/24","211.171.131.0/24","211.169.0.0/16","106.241.36.0/24","211.118.0.0/16","211.60.0.0/16","211.168.7.0/24","211.169.27.0/24","211.170.155.0/24","211.119.209.0/24","211.169.10.0/24","211.60.53.0/24","211.171.0.0/16","211.169.35.0/24","211.170.0.0/16","211.118.12.0/24","211.168.0.0/16"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"not-previously-announced-by-any-newcomer"},{"name":"newcomer-more-specific"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"4780":{"asrank":{"asn":"4780","asnDegree":{"customer":59,"peer":22,"provider":5},"asnName":"SEEDNET","organization":{"country":{"iso":"TW"},"orgId":"@aut-4780-APNIC","orgName":"Digital United Inc."},"rank":522},"hegemony":0.002028298145736943},"9919":{"asrank":{"asn":"9919","asnDegree":{"customer":1,"peer":0,"provider":2},"asnName":"NCIC-TW","organization":{"country":{"iso":"TW"},"orgId":"@aut-131586-APNIC","orgName":"New Century InfoComm Tech Co., Ltd."},"rank":7784},"hegemony":0.00016380457280048297}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-providers"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-valid-roa"},{"count":1,"name":"rpki-some-oldcomer-valid-roa"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"rpki-all-newcomer-valid-roa"},{"count":1,"name":"all-newcomers-are-rel-upstream"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-valid-roa"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-providers"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-RADB-all-oldcomer-exact-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-upstream"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"irr-RADB-all-newcomer-exact-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"prefix-small-edit-distance"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"},{"count":1,"name":"newcomers-always-on-oldcomer-originated-paths"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005834102630615234,"proc_time_tagger":0.23210597038269043,"total_tags_cnt":59},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-9919=4780","insert_ts":1784848890,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":92,"explanation":"all newcomers are providers and all the traffic towards the oldcomers goes through the newcomers","inference_id":"all-newcomers-providers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"106.105.41.0/24","super_pfx":"106.105.40.0/21","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"newcomers-always-on-oldcomer-originated-paths"}]}],"summary":{"ases":["4780","9919"],"attackers":["4780"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["4780"],"prefixes":["106.105.41.0/24","106.105.40.0/21"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-exact-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"newcomers-always-on-oldcomer-originated-paths"}],"tr_worthy":false,"victims":["9919"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"1659":{"asrank":{"asn":"1659","asnDegree":{"customer":0,"peer":0,"provider":4},"asnName":"ERX-TANET-ASN1","organization":{"country":{"iso":"TW"},"orgId":"@aut-1659-APNIC","orgName":"Taiwan Academic Network (TANet) Information Center"},"rank":12717},"hegemony":0.0017981952373814511},"17716":{"asrank":{"asn":"17716","asnDegree":{"customer":0,"peer":0,"provider":3},"asnName":"NTU-TW","organization":{"country":{"iso":"TW"},"orgId":"@aut-17716-APNIC","orgName":"National Taiwan University"},"rank":12717},"hegemony":2.1034640515579332e-05}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":5,"name":"irr-RIPE-all-newcomer-no-record"},{"count":5,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":5,"name":"irr-ARIN-all-newcomer-no-record"},{"count":5,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":5,"name":"irr-REACH-all-oldcomer-no-record"},{"count":5,"name":"rpki-some-oldcomer-invalid-roa"},{"count":5,"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"count":5,"name":"irr-BELL-all-oldcomer-no-record"},{"count":5,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":5,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":5,"name":"rpki-some-newcomer-valid-roa"},{"count":5,"name":"irr-RADB-all-newcomer-no-record"},{"count":5,"name":"some-newcomers-stub-ases"},{"count":5,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":5,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":5,"name":"single-peer-on-attacker-path"},{"count":5,"name":"rpki-all-newcomer-valid-roa"},{"count":5,"name":"irr-all-newcomer-no-record"},{"count":5,"name":"all-victims-stub-ases"},{"count":5,"name":"all-newcomers-stub-ases"},{"count":5,"name":"irr-APNIC-all-newcomer-no-record"},{"count":5,"name":"irr-RADB-all-oldcomer-no-record"},{"count":5,"name":"previously-announced-by-all-newcomers"},{"count":5,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":5,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":5,"name":"irr-TC-all-oldcomer-no-record"},{"count":5,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":5,"name":"newcomer-less-specific"},{"count":5,"name":"rpki-all-oldcomer-invalid-roa"},{"count":5,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":5,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":5,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":5,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":5,"name":"some-victims-stub-ases"},{"count":5,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":5,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":5,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":5,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":5,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":5,"name":"irr-BELL-all-newcomer-no-record"},{"count":5,"name":"irr-all-oldcomer-no-record"},{"count":5,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":5,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":5,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":5,"name":"irr-REACH-all-newcomer-no-record"},{"count":5,"name":"irr-BBOI-all-newcomer-no-record"},{"count":5,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":5,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":5,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":5,"name":"irr-PANIX-all-newcomer-no-record"},{"count":5,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":5,"name":"all-origins-same-country"},{"count":5,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":5,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":5,"name":"prefix-small-edit-distance"},{"count":5,"name":"previously-announced-by-some-newcomers"},{"count":5,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":5,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":5,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":5,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.004400968551635742,"proc_time_tagger":0.10036683082580566,"total_tags_cnt":59},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-17716=1659","insert_ts":1784848890,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":89,"explanation":"The ASNs of the potential attacker previously announced similar prefix, this is more likely to be caused by a misconfiguration","inference_id":"misconfig-fatfinger-prefix","labels":["misconfig","fatfinger","incident"],"suspicion_level":20},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"120.96.160.0/19","super_pfx":"120.96.0.0/15","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-all-newcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":89,"explanation":"The ASNs of the potential attacker previously announced similar prefix, this is more likely to be caused by a misconfiguration","inference_id":"misconfig-fatfinger-prefix","labels":["misconfig","fatfinger","incident"],"suspicion_level":20},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"120.96.192.0/20","super_pfx":"120.96.0.0/15","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-all-newcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":89,"explanation":"The ASNs of the potential attacker previously announced similar prefix, this is more likely to be caused by a misconfiguration","inference_id":"misconfig-fatfinger-prefix","labels":["misconfig","fatfinger","incident"],"suspicion_level":20},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"120.96.144.0/20","super_pfx":"120.96.0.0/15","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-all-newcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":89,"explanation":"The ASNs of the potential attacker previously announced similar prefix, this is more likely to be caused by a misconfiguration","inference_id":"misconfig-fatfinger-prefix","labels":["misconfig","fatfinger","incident"],"suspicion_level":20},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"120.96.208.0/20","super_pfx":"120.96.0.0/15","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-all-newcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":89,"explanation":"The ASNs of the potential attacker previously announced similar prefix, this is more likely to be caused by a misconfiguration","inference_id":"misconfig-fatfinger-prefix","labels":["misconfig","fatfinger","incident"],"suspicion_level":20},{"confidence":95,"explanation":"less specific prefix cannot attract traffic","inference_id":"newcomer-less-specific","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"120.96.224.0/20","super_pfx":"120.96.0.0/15","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-all-newcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"newcomer-less-specific"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["1659","17716"],"attackers":["17716"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["17716"],"prefixes":["120.96.0.0/15","120.96.160.0/19","120.96.224.0/20","120.96.208.0/20","120.96.144.0/20","120.96.192.0/20"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-oldcomer-invalid-roa-due-to-length"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"irr-RADB-all-oldcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"newcomer-less-specific"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"prefix-small-edit-distance"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-invalid-roa"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-all-newcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"all-newcomers-stub-ases"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-invalid-roa"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["1659"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"17858":{"asrank":{"asn":"17858","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"POWERVIS-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-17858-APNIC","orgName":"LG POWERCOMM"},"rank":12717},"hegemony":0.0033046347248883137},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":2,"name":"irr-RIPE-all-newcomer-no-record"},{"count":2,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"irr-ARIN-all-newcomer-no-record"},{"count":2,"name":"oldcomer-path-prepending"},{"count":2,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":2,"name":"rpki-all-newcomer-unknown-roa"},{"count":2,"name":"irr-REACH-all-oldcomer-no-record"},{"count":2,"name":"rpki-some-oldcomer-unknown-roa"},{"count":2,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":2,"name":"irr-BELL-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":2,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":2,"name":"single-rel-upstream-chain"},{"count":2,"name":"all-newcomers-next-to-an-oldcomer"},{"count":2,"name":"some-newcomers-stub-ases"},{"count":2,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":2,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":2,"name":"single-peer-on-attacker-path"},{"count":2,"name":"some-newcomers-are-rel-downstream"},{"count":2,"name":"all-newcomers-stub-ases"},{"count":2,"name":"irr-APNIC-all-newcomer-no-record"},{"count":2,"name":"all-newcomers-are-rel-neighbor"},{"count":2,"name":"previously-announced-by-all-newcomers"},{"count":2,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":2,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-TC-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":2,"name":"some-newcomers-are-rel-neighbor"},{"count":2,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":2,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":2,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":2,"name":"all-newcomers-are-rel-downstream"},{"count":2,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":2,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":2,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":2,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":2,"name":"irr-BELL-all-newcomer-no-record"},{"count":2,"name":"rpki-some-newcomer-unknown-roa"},{"count":2,"name":"irr-RADB-all-newcomer-exact-record"},{"count":2,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":2,"name":"some-newcomers-are-customers"},{"count":2,"name":"irr-REACH-all-newcomer-no-record"},{"count":2,"name":"irr-BBOI-all-newcomer-no-record"},{"count":2,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":2,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":2,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":2,"name":"irr-PANIX-all-newcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":2,"name":"rpki-all-oldcomer-unknown-roa"},{"count":2,"name":"all-origins-same-country"},{"count":2,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":2,"name":"all-newcomers-are-customers"},{"count":2,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":2,"name":"previously-announced-by-some-newcomers"},{"count":2,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":2,"name":"newcomer-more-specific"},{"count":2,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":2,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":2,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0016300678253173828,"proc_time_tagger":0.072113037109375,"total_tags_cnt":63},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=17858","insert_ts":1784848889,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"58.77.0.0/16","super_pfx":"58.72.0.0/13","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"58.78.0.0/15","super_pfx":"58.72.0.0/13","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["17858","3786"],"attackers":["17858"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["17858"],"prefixes":["58.77.0.0/16","58.78.0.0/15","58.72.0.0/13"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"10190":{"asrank":{"asn":"10190","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"JB-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-10190-APNIC","orgName":"Joongbu University"},"rank":12717},"hegemony":3.1189392744804437e-06},"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"irr-RADB-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"irr-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005135536193847656,"proc_time_tagger":0.011987686157226562,"total_tags_cnt":63},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=10190","insert_ts":1784848890,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"1.209.241.0/24","super_pfx":"1.208.0.0/12","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","10190"],"attackers":["10190"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["10190"],"prefixes":["1.208.0.0/12","1.209.241.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855},"9782":{"asrank":{"asn":"9782","asnDegree":{"customer":0,"peer":0,"provider":2},"asnName":"WOOSONGEDU","organization":{"country":{"iso":"KR"},"orgId":"@aut-9782-APNIC","orgName":"WooSong University"},"rank":12717},"hegemony":2.70855252783828e-06}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":1,"name":"irr-RIPE-all-newcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-newcomer-no-record"},{"count":1,"name":"oldcomer-path-prepending"},{"count":1,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":1,"name":"rpki-all-newcomer-unknown-roa"},{"count":1,"name":"irr-REACH-all-oldcomer-no-record"},{"count":1,"name":"rpki-some-oldcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":1,"name":"irr-BELL-all-oldcomer-no-record"},{"count":1,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-next-to-an-oldcomer"},{"count":1,"name":"some-newcomers-stub-ases"},{"count":1,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":1,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":1,"name":"single-peer-on-attacker-path"},{"count":1,"name":"some-newcomers-are-rel-downstream"},{"count":1,"name":"all-newcomers-stub-ases"},{"count":1,"name":"irr-APNIC-all-newcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-neighbor"},{"count":1,"name":"previously-announced-by-all-newcomers"},{"count":1,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":1,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":1,"name":"some-newcomers-are-rel-neighbor"},{"count":1,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":1,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":1,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-rel-downstream"},{"count":1,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":1,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":1,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":1,"name":"irr-BELL-all-newcomer-no-record"},{"count":1,"name":"rpki-some-newcomer-unknown-roa"},{"count":1,"name":"irr-RADB-all-newcomer-exact-record"},{"count":1,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":1,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":1,"name":"some-newcomers-are-customers"},{"count":1,"name":"irr-REACH-all-newcomer-no-record"},{"count":1,"name":"irr-BBOI-all-newcomer-no-record"},{"count":1,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":1,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":1,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":1,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":1,"name":"irr-PANIX-all-newcomer-no-record"},{"count":1,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":1,"name":"rpki-all-oldcomer-unknown-roa"},{"count":1,"name":"all-origins-same-country"},{"count":1,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":1,"name":"all-newcomers-are-customers"},{"count":1,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":1,"name":"previously-announced-by-some-newcomers"},{"count":1,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":1,"name":"newcomer-more-specific"},{"count":1,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":1,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":1,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0005905628204345703,"proc_time_tagger":0.012449979782104492,"total_tags_cnt":62},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=9782","insert_ts":1784848890,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":80,"explanation":"all newcomers have exact IRR records","inference_id":"all-newcomers-exact-irr-record","labels":["legitimate"],"suspicion_level":1},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"211.181.201.0/24","super_pfx":"211.181.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","9782"],"attackers":["9782"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["9782"],"prefixes":["211.181.201.0/24","211.181.0.0/16"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-RADB-all-newcomer-exact-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"24164":{"asrank":{"asn":"24164","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"UBBNET-AS-TW","organization":{"country":{"iso":"TW"},"orgId":"@family-49245","orgName":"UNION BROADBAND NETWORK"},"rank":12717},"hegemony":7.986376109457345e-05},"9924":{"asrank":{"asn":"9924","asnDegree":{"customer":49,"peer":52,"provider":8},"asnName":"TFN-TW","organization":{"country":{"iso":"TW"},"orgId":"@aut-9924-APNIC","orgName":"Taiwan Fixed Network, Telco and Network Service Provider."},"rank":733},"hegemony":0.001030006260159839}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":2,"name":"irr-RIPE-all-newcomer-no-record"},{"count":2,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"irr-ARIN-all-newcomer-no-record"},{"count":2,"name":"all-newcomers-are-providers"},{"count":2,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":2,"name":"irr-REACH-all-oldcomer-no-record"},{"count":2,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":2,"name":"irr-BELL-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":2,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":2,"name":"rpki-some-newcomer-valid-roa"},{"count":2,"name":"single-rel-upstream-chain"},{"count":2,"name":"rpki-some-oldcomer-valid-roa"},{"count":2,"name":"irr-RADB-all-newcomer-no-record"},{"count":2,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":2,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":2,"name":"single-peer-on-attacker-path"},{"count":2,"name":"rpki-all-newcomer-valid-roa"},{"count":2,"name":"irr-all-newcomer-no-record"},{"count":2,"name":"all-victims-stub-ases"},{"count":2,"name":"all-newcomers-are-rel-upstream"},{"count":2,"name":"irr-APNIC-all-newcomer-no-record"},{"count":2,"name":"all-newcomers-are-rel-neighbor"},{"count":2,"name":"previously-announced-by-all-newcomers"},{"count":2,"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"count":2,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-TC-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":2,"name":"some-newcomers-are-rel-neighbor"},{"count":2,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":2,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":2,"name":"rpki-all-oldcomer-valid-roa"},{"count":2,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":2,"name":"some-newcomers-are-providers"},{"count":2,"name":"some-victims-stub-ases"},{"count":2,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":2,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":2,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":2,"name":"some-newcomers-are-rel-upstream"},{"count":2,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":2,"name":"irr-BELL-all-newcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":2,"name":"irr-REACH-all-newcomer-no-record"},{"count":2,"name":"irr-BBOI-all-newcomer-no-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":2,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":2,"name":"irr-PANIX-all-newcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":2,"name":"all-origins-same-country"},{"count":2,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":2,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":2,"name":"previously-announced-by-some-newcomers"},{"count":2,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":2,"name":"newcomer-more-specific"},{"count":2,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":2,"name":"irr-TC-all-newcomer-no-record"},{"count":2,"name":"newcomers-always-on-oldcomer-originated-paths"}],"pfx_events_cnt":2,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0014164447784423828,"proc_time_tagger":0.1752018928527832,"total_tags_cnt":62},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-24164=9924","insert_ts":1784848890,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":92,"explanation":"all newcomers are providers and all the traffic towards the oldcomers goes through the newcomers","inference_id":"all-newcomers-providers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"203.77.6.0/24","super_pfx":"203.77.0.0/18","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"single-rel-upstream-chain"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-all-newcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"newcomers-always-on-oldcomer-originated-paths"}]},{"finished_ts":1784846700,"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2},{"confidence":92,"explanation":"all newcomers are providers and all the traffic towards the oldcomers goes through the newcomers","inference_id":"all-newcomers-providers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"sub_pfx":"203.77.24.0/24","super_pfx":"203.77.0.0/18","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"single-rel-upstream-chain"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-all-newcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"all-newcomers-are-rel-upstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"newcomers-always-on-oldcomer-originated-paths"}]}],"summary":{"ases":["9924","24164"],"attackers":["9924"],"inference_result":{"inferences":[{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}],"primary_inference":{"confidence":99,"explanation":"all newcomers have valid ROAs","inference_id":"all-newcomers-rpki-valid","labels":["legitimate"],"suspicion_level":2}},"newcomers":["9924"],"prefixes":["203.77.24.0/24","203.77.0.0/18","203.77.6.0/24"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"all-newcomers-are-providers"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"rpki-some-newcomer-valid-roa"},{"name":"single-rel-upstream-chain"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-valid-roa"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"some-newcomers-are-providers"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-upstream"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-valid-roa"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-valid-roa"},{"name":"irr-all-newcomer-no-record"},{"name":"all-victims-stub-ases"},{"name":"all-newcomers-are-rel-upstream"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-more-specific-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"some-victims-stub-ases"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"newcomers-always-on-oldcomer-originated-paths"}],"tr_worthy":false,"victims":["24164"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855},"55614":{"asrank":{"asn":"55614","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"DANAL-AS-KR","organization":{"country":{"iso":"KR"},"orgId":"@aut-55614-APNIC","orgName":"danal.co"},"rank":12717},"hegemony":6.566187946274619e-07}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":6,"name":"irr-RIPE-all-newcomer-no-record"},{"count":6,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":6,"name":"irr-ARIN-all-newcomer-no-record"},{"count":6,"name":"oldcomer-path-prepending"},{"count":6,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":6,"name":"rpki-all-newcomer-unknown-roa"},{"count":6,"name":"irr-REACH-all-oldcomer-no-record"},{"count":6,"name":"rpki-some-oldcomer-unknown-roa"},{"count":6,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":6,"name":"irr-BELL-all-oldcomer-no-record"},{"count":6,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":6,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":6,"name":"single-rel-upstream-chain"},{"count":6,"name":"all-newcomers-next-to-an-oldcomer"},{"count":6,"name":"irr-RADB-all-newcomer-no-record"},{"count":6,"name":"some-newcomers-stub-ases"},{"count":6,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":6,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":6,"name":"single-peer-on-attacker-path"},{"count":6,"name":"some-newcomers-are-rel-downstream"},{"count":6,"name":"irr-all-newcomer-no-record"},{"count":6,"name":"all-newcomers-stub-ases"},{"count":6,"name":"irr-APNIC-all-newcomer-no-record"},{"count":6,"name":"all-newcomers-are-rel-neighbor"},{"count":6,"name":"previously-announced-by-all-newcomers"},{"count":6,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":6,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":6,"name":"irr-TC-all-oldcomer-no-record"},{"count":6,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":6,"name":"some-newcomers-are-rel-neighbor"},{"count":6,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":6,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":6,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":6,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":6,"name":"all-newcomers-are-rel-downstream"},{"count":6,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":6,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":6,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":6,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":6,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":6,"name":"irr-BELL-all-newcomer-no-record"},{"count":6,"name":"rpki-some-newcomer-unknown-roa"},{"count":6,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":6,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":6,"name":"some-newcomers-are-customers"},{"count":6,"name":"irr-REACH-all-newcomer-no-record"},{"count":6,"name":"irr-BBOI-all-newcomer-no-record"},{"count":6,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":6,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":6,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":6,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":6,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":6,"name":"irr-PANIX-all-newcomer-no-record"},{"count":6,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":6,"name":"rpki-all-oldcomer-unknown-roa"},{"count":6,"name":"all-origins-same-country"},{"count":6,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":6,"name":"all-newcomers-are-customers"},{"count":6,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":6,"name":"previously-announced-by-some-newcomers"},{"count":6,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":6,"name":"newcomer-more-specific"},{"count":6,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":6,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":6,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.00545501708984375,"proc_time_tagger":0.06858444213867188,"total_tags_cnt":64},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=55614","insert_ts":1784848889,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"117.52.244.0/24","super_pfx":"117.52.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"117.52.246.0/24","super_pfx":"117.52.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"121.254.161.0/24","super_pfx":"121.254.128.0/17","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"117.52.42.0/24","super_pfx":"117.52.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"117.52.40.0/24","super_pfx":"117.52.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"117.52.41.0/24","super_pfx":"117.52.0.0/16","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","55614"],"attackers":["55614"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["55614"],"prefixes":["117.52.0.0/16","117.52.244.0/24","121.254.161.0/24","117.52.40.0/24","117.52.246.0/24","117.52.41.0/24","117.52.42.0/24","121.254.128.0/17"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100},{"asinfo":{"3786":{"asrank":{"asn":"3786","asnDegree":{"customer":405,"peer":157,"provider":8},"asnName":"LGDACOM","organization":{"country":{"iso":"KR"},"orgId":"@aut-9688-APNIC","orgName":"LG DACOM Corporation"},"rank":128},"hegemony":0.007698587074388855},"9769":{"asrank":{"asn":"9769","asnDegree":{"customer":0,"peer":0,"provider":1},"asnName":"SEJONG-AS","organization":{"country":{"iso":"KR"},"orgId":"@aut-9769-APNIC","orgName":"Sejong University"},"rank":12717},"hegemony":9.0285084261276e-06}},"debug":{},"duration":600,"event_metrics":{"per_tag_cnt":[{"count":2,"name":"irr-RIPE-all-newcomer-no-record"},{"count":2,"name":"irr-WCGDB-all-oldcomer-no-record"},{"count":2,"name":"irr-ARIN-all-newcomer-no-record"},{"count":2,"name":"oldcomer-path-prepending"},{"count":2,"name":"irr-AFRINIC-all-oldcomer-no-record"},{"count":2,"name":"rpki-all-newcomer-unknown-roa"},{"count":2,"name":"irr-REACH-all-oldcomer-no-record"},{"count":2,"name":"rpki-some-oldcomer-unknown-roa"},{"count":2,"name":"irr-RADB-all-oldcomer-more-specific-record"},{"count":2,"name":"irr-BELL-all-oldcomer-no-record"},{"count":2,"name":"irr-RIPE-all-oldcomer-no-record"},{"count":2,"name":"irr-IDNIC-all-oldcomer-no-record"},{"count":2,"name":"single-rel-upstream-chain"},{"count":2,"name":"all-newcomers-next-to-an-oldcomer"},{"count":2,"name":"irr-RADB-all-newcomer-no-record"},{"count":2,"name":"some-newcomers-stub-ases"},{"count":2,"name":"irr-NESTEGG-all-oldcomer-no-record"},{"count":2,"name":"irr-ARIN-all-oldcomer-no-record"},{"count":2,"name":"single-peer-on-attacker-path"},{"count":2,"name":"some-newcomers-are-rel-downstream"},{"count":2,"name":"irr-all-newcomer-no-record"},{"count":2,"name":"all-newcomers-stub-ases"},{"count":2,"name":"irr-APNIC-all-newcomer-no-record"},{"count":2,"name":"all-newcomers-are-rel-neighbor"},{"count":2,"name":"previously-announced-by-all-newcomers"},{"count":2,"name":"irr-NTTCOM-all-oldcomer-no-record"},{"count":2,"name":"irr-APNIC-all-oldcomer-no-record"},{"count":2,"name":"irr-TC-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-newcomer-no-record"},{"count":2,"name":"some-newcomers-are-rel-neighbor"},{"count":2,"name":"irr-AFRINIC-all-newcomer-no-record"},{"count":2,"name":"irr-CANARIE-all-newcomer-no-record"},{"count":2,"name":"irr-IDNIC-all-newcomer-no-record"},{"count":2,"name":"irr-BBOI-all-oldcomer-no-record"},{"count":2,"name":"all-newcomers-are-rel-downstream"},{"count":2,"name":"irr-NTTCOM-all-newcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-oldcomer-no-record"},{"count":2,"name":"irr-OPENFACE-all-oldcomer-no-record"},{"count":2,"name":"irr-WCGDB-all-newcomer-no-record"},{"count":2,"name":"irr-PANIX-all-oldcomer-no-record"},{"count":2,"name":"irr-BELL-all-newcomer-no-record"},{"count":2,"name":"rpki-some-newcomer-unknown-roa"},{"count":2,"name":"irr-CANARIE-all-oldcomer-no-record"},{"count":2,"name":"irr-LACNIC-all-oldcomer-no-record"},{"count":2,"name":"some-newcomers-are-customers"},{"count":2,"name":"irr-REACH-all-newcomer-no-record"},{"count":2,"name":"irr-BBOI-all-newcomer-no-record"},{"count":2,"name":"irr-JPIRR-all-newcomer-no-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"count":2,"name":"oldcomers-always-on-newcomer-originated-paths"},{"count":2,"name":"irr-OPENFACE-all-newcomer-no-record"},{"count":2,"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"count":2,"name":"irr-PANIX-all-newcomer-no-record"},{"count":2,"name":"irr-ALTDB-all-newcomer-no-record"},{"count":2,"name":"rpki-all-oldcomer-unknown-roa"},{"count":2,"name":"all-origins-same-country"},{"count":2,"name":"irr-LEVEL3-all-oldcomer-no-record"},{"count":2,"name":"all-newcomers-are-customers"},{"count":2,"name":"irr-NESTEGG-all-newcomer-no-record"},{"count":2,"name":"previously-announced-by-some-newcomers"},{"count":2,"name":"irr-LEVEL3-all-newcomer-no-record"},{"count":2,"name":"newcomer-more-specific"},{"count":2,"name":"irr-JPIRR-all-oldcomer-no-record"},{"count":2,"name":"irr-TC-all-newcomer-no-record"}],"pfx_events_cnt":2,"pfx_events_with_tr_cnt":0,"proc_time_driver":0.0,"proc_time_inference":0.0007519721984863281,"proc_time_tagger":0.021890878677368164,"total_tags_cnt":64},"event_type":"submoas","finished_ts":1784846700,"id":"submoas-1784846100-3786=9769","insert_ts":1784848890,"last_modified_ts":1784849485,"pfx_events":[{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"115.91.213.0/24","super_pfx":"115.88.0.0/13","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]},{"finished_ts":1784846700,"inferences":[{"confidence":90,"explanation":"All origins in the event are in a single customer-provider chain","inference_id":"customer-provider-single-chain","labels":["legitimate"],"suspicion_level":20},{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10},{"confidence":80,"explanation":"old origins are always on the paths of the new origins, traffic flow through old origins first","inference_id":"oldcomer-on-paths","labels":["legitimate"],"suspicion_level":20}],"sub_pfx":"115.91.214.0/24","super_pfx":"115.88.0.0/13","tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"all-origins-same-country"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"}]}],"summary":{"ases":["3786","9769"],"attackers":["9769"],"inference_result":{"inferences":[{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}],"primary_inference":{"confidence":92,"explanation":"all newcomers are customers and all the traffic goes through the oldcomers","inference_id":"all-newcomers-customers-traffic-safe","labels":["legitimate"],"suspicion_level":10}},"newcomers":["9769"],"prefixes":["115.91.213.0/24","115.91.214.0/24","115.88.0.0/13"],"tags":[{"name":"irr-RIPE-all-newcomer-no-record"},{"name":"irr-WCGDB-all-oldcomer-no-record"},{"name":"irr-ARIN-all-newcomer-no-record"},{"name":"irr-REACH-all-oldcomer-no-record"},{"name":"rpki-some-oldcomer-unknown-roa"},{"name":"irr-RIPE-all-oldcomer-no-record"},{"name":"irr-IDNIC-all-oldcomer-no-record"},{"name":"single-rel-upstream-chain"},{"name":"all-newcomers-next-to-an-oldcomer"},{"name":"irr-RADB-all-newcomer-no-record"},{"name":"some-newcomers-stub-ases"},{"name":"irr-ARIN-all-oldcomer-no-record"},{"name":"single-peer-on-attacker-path"},{"name":"some-newcomers-are-rel-downstream"},{"name":"irr-APNIC-all-newcomer-no-record"},{"name":"previously-announced-by-all-newcomers"},{"name":"irr-IDNIC-all-newcomer-no-record"},{"name":"irr-BBOI-all-oldcomer-no-record"},{"name":"irr-WCGDB-all-newcomer-no-record"},{"name":"irr-PANIX-all-oldcomer-no-record"},{"name":"irr-BELL-all-newcomer-no-record"},{"name":"rpki-some-newcomer-unknown-roa"},{"name":"irr-JPIRR-all-newcomer-no-record"},{"name":"irr-REACH-all-newcomer-no-record"},{"name":"irr-BBOI-all-newcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-newcomer-no-record"},{"name":"all-origins-same-country"},{"name":"all-newcomers-are-customers"},{"name":"irr-NESTEGG-all-newcomer-no-record"},{"name":"previously-announced-by-some-newcomers"},{"name":"irr-LEVEL3-all-newcomer-no-record"},{"name":"newcomer-more-specific"},{"name":"irr-OPENFACE-all-oldcomer-no-record"},{"name":"irr-JPIRR-all-oldcomer-no-record"},{"name":"irr-TC-all-newcomer-no-record"},{"name":"oldcomer-path-prepending"},{"name":"irr-AFRINIC-all-oldcomer-no-record"},{"name":"rpki-all-newcomer-unknown-roa"},{"name":"irr-RADB-all-oldcomer-more-specific-record"},{"name":"irr-BELL-all-oldcomer-no-record"},{"name":"irr-NESTEGG-all-oldcomer-no-record"},{"name":"irr-all-newcomer-no-record"},{"name":"all-newcomers-stub-ases"},{"name":"all-newcomers-are-rel-neighbor"},{"name":"irr-NTTCOM-all-oldcomer-no-record"},{"name":"irr-APNIC-all-oldcomer-no-record"},{"name":"irr-TC-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-newcomer-no-record"},{"name":"some-newcomers-are-rel-neighbor"},{"name":"irr-AFRINIC-all-newcomer-no-record"},{"name":"irr-CANARIE-all-newcomer-no-record"},{"name":"all-newcomers-are-rel-downstream"},{"name":"irr-NTTCOM-all-newcomer-no-record"},{"name":"irr-ALTDB-all-oldcomer-no-record"},{"name":"irr-CANARIE-all-oldcomer-no-record"},{"name":"irr-LACNIC-all-oldcomer-no-record"},{"name":"some-newcomers-are-customers"},{"name":"oldcomers-always-on-newcomer-originated-paths"},{"name":"irr-OPENFACE-all-newcomer-no-record"},{"name":"irr-PANIX-all-newcomer-no-record"},{"name":"irr-ALTDB-all-newcomer-no-record"},{"name":"rpki-all-oldcomer-unknown-roa"},{"name":"irr-LEVEL3-all-oldcomer-no-record"},{"name":"irr-RIPE-NONAUTH-all-oldcomer-no-record"}],"tr_worthy":false,"victims":["3786"]},"tr_metrics":{"max_event_ases":3,"max_pfx_events":2,"max_vps_per_event_as":10,"selected_event_as_cnt":0,"selected_pfx_event_cnt":0,"selected_unique_vp_cnt":0,"selected_vp_cnt":0,"total_event_as_cnt":0,"tr_request_cnt":0,"tr_request_failure_cnt":0,"tr_skip_reason":"","tr_skipped":false,"tr_worthy":false,"tr_worthy_pfx_event_cnt":0,"tr_worthy_tags":[]},"view_ts":1784846100}],"draw":null,"recordsFiltered":0,"recordsTotal":10000}