diff options
| author | hrbrmstr <bob@rud.is> | 2026-08-03 06:52:30 -0400 |
|---|---|---|
| committer | hrbrmstr <bob@rud.is> | 2026-08-03 06:52:30 -0400 |
| commit | 89a294a0e93277e5f27fc96710f638a5ac85ab35 (patch) | |
| tree | 92a53bcae9c10f02877e60e9a6393d9f4ae167c3 /kevlar/2026-08-02/OPERATIONS_LOG.md | |
| parent | 4c5956acd240953aec538d8a25e2724a608ce9be (diff) | |
chore: weekly BPH update
Diffstat (limited to 'kevlar/2026-08-02/OPERATIONS_LOG.md')
| -rw-r--r-- | kevlar/2026-08-02/OPERATIONS_LOG.md | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/kevlar/2026-08-02/OPERATIONS_LOG.md b/kevlar/2026-08-02/OPERATIONS_LOG.md new file mode 100644 index 0000000..d1f13ee --- /dev/null +++ b/kevlar/2026-08-02/OPERATIONS_LOG.md @@ -0,0 +1,23 @@ +# Operations Log -- 2026-08-02 + +## 2026-08-02 Initialization -- Phase 0: Initialize +- ASNs loaded: 26 +- Run date: 2026-08-02 +- Prior baseline: 2026-07-27 +- Cache directories created: sponge/, honeylabs/, censys/, changes/, iocs/ +- Censys credit check: pending +## 2026-08-03 03:43:00 -- Run Complete +- ASNs queried across all sources: 26 +- Sponge queries: 78 (26 ASNs x 3 aggregations + 1 timeline) +- Honeylabs queries: 6 (IOC lookups + 1 event search + 1 top attackers) +- Censys queries: 13 (6 port + 1 software + 6 labels aggregations) +- Results cached: Y +- Blog post built: Y (astro build succeeded) +- IoC files written: Y (IPs, fingerprints, C2 paths, README) +- Errors: 0 +- Censys credits remaining: 10,000 (no per-IP enrichment attempted) + +### Key Finding +Only AS51396 (PFCLOUD) registered honeypot activity. 25 of 26 ASNs show zero +Honeylabs events despite significant Sponge session counts. All 6 Censys-profiled +ASNs are universally BULLETPROOF-labeled. |