Dashboard
Counts below are a hand-written snapshot taken 2026-09-10; a generated
dashboard from the data files is still on the TODO.md list.
| Data file | Contents | Count |
|---|---|---|
dataflow.out/01_ip_probe.json | routable four-prime-octet addresses | 7,400,808 |
dataflow.out/02_ip_block.json | RIR blocks holding at least one probe | 9,200 |
dataflow.out/03_ip_probe.json | probe-to-block pairs (operator-held) | 7,351,236 |
dataflow.out/04_ip_probe.json | probes no operator holds | 49,572 |
dataflow.out/05_ip_probe_http.json | HTTP observations | 49,572 |
dataflow.out/06_ip_probe_characterize.json | phase 4 evidence (106 anomalies, 236 controls) | 342 |
Phase 3 outcome, 2026-09-10: http_response 99,
connect_refused 6, connection_reset 1,
timeout 49,466.
Phase 4 outcome, 2026-09-11: 241 of 342 targets answered, every answer a catch-all; the controls answered as readily as the four-prime addresses. Verdicts: incidental (Sites A and C), incidental plus nefarious (Site B), unexplained (Site D).
RIR delegation files fetched 2026-09-10; digests in dataflow.out/raw/SHA256SUMS.