HALOWERKNetzwerk
bgp update anomaly
Counts BGP updates for a prefix or an autonomous system in a recent window and compares them against a baseline built from a longer preceding period for the same resource. The comparison is deliberately self-referential: an AS with a hundred prefixes has a different normal than one with ten thousand, and a fixed threshold is blind for the first and a permanent alarm for the second.
POST https://netz.halowerk.com/v1/bgp-update-anomalyEingaben
| Feld | Typ | Pflicht | Beschreibung |
|---|---|---|---|
| resource | string | Ja | A prefix like 8.8.8.0/24 or an AS like AS3320. |
| window_hours | integer | Nein | The recent window to examine. |
| baseline_hours | integer | Nein | The preceding period used to build the baseline. |
| sensitivity | string | Nein |
Vollständiges Eingabeschema anzeigen
{
"type": "object",
"required": [
"resource"
],
"additionalProperties": false,
"properties": {
"resource": {
"type": "string",
"minLength": 2,
"maxLength": 60,
"description": "A prefix like 8.8.8.0/24 or an AS like AS3320."
},
"window_hours": {
"type": "integer",
"minimum": 1,
"maximum": 48,
"default": 6,
"description": "The recent window to examine."
},
"baseline_hours": {
"type": "integer",
"minimum": 6,
"maximum": 336,
"default": 72,
"description": "The preceding period used to build the baseline."
},
"sensitivity": {
"type": "string",
"enum": [
"low",
"normal",
"high"
],
"default": "normal"
}
}
}Veröffentlichtes Eingabebeispiel
{
"resource": "8.8.8.0/24",
"window_hours": 6,
"baseline_hours": 72,
"sensitivity": "normal"
}Ergebnis & Dokumentation
Maschinenlesbare Dokumentation dieses Hubs
Quelle dieser Seite: der veröffentlichte HALOWERK-Katalog. Stand: 2026-11-01, 15:19 UTC.
Weitere Endpunkte dieses Hubs
- Netzwerk0,004 USDC
asn neighbours
POSThttps://netz.halowerk.com/v1/asn-neighboursReturns the neighbouring autonomous systems observed next to a given AS in BGP paths, each with the number of observers that saw the adjacency and how often it appeared, which together indicate how solid the observation is rather than how i
- Netzwerk0,004 USDC
bgp origin
POSThttps://netz.halowerk.com/v1/bgp-originResolves a prefix to its announcing autonomous systems and puts that answer in context. The current state gives every origin AS seen for the prefix, the number of more specific and less specific prefixes routed alongside it, when the prefix
- Netzwerk0,006 USDC
hijack suspicion
POSThttps://netz.halowerk.com/v1/hijack-suspicionCollects the observable signs of a route hijack for one prefix and reports which of them are present, with the measurement behind each. Four signs carry different weight. RPKI invalidity is the only hard one: a ROA exists and does not autho