diff options
Diffstat (limited to 'kevlar/2026-08-02/OPERATIONS_LOG.md')
| -rw-r--r-- | kevlar/2026-08-02/OPERATIONS_LOG.md | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/kevlar/2026-08-02/OPERATIONS_LOG.md b/kevlar/2026-08-02/OPERATIONS_LOG.md new file mode 100644 index 0000000..d1f13ee --- /dev/null +++ b/kevlar/2026-08-02/OPERATIONS_LOG.md @@ -0,0 +1,23 @@ +# Operations Log -- 2026-08-02 + +## 2026-08-02 Initialization -- Phase 0: Initialize +- ASNs loaded: 26 +- Run date: 2026-08-02 +- Prior baseline: 2026-07-27 +- Cache directories created: sponge/, honeylabs/, censys/, changes/, iocs/ +- Censys credit check: pending +## 2026-08-03 03:43:00 -- Run Complete +- ASNs queried across all sources: 26 +- Sponge queries: 78 (26 ASNs x 3 aggregations + 1 timeline) +- Honeylabs queries: 6 (IOC lookups + 1 event search + 1 top attackers) +- Censys queries: 13 (6 port + 1 software + 6 labels aggregations) +- Results cached: Y +- Blog post built: Y (astro build succeeded) +- IoC files written: Y (IPs, fingerprints, C2 paths, README) +- Errors: 0 +- Censys credits remaining: 10,000 (no per-IP enrichment attempted) + +### Key Finding +Only AS51396 (PFCLOUD) registered honeypot activity. 25 of 26 ASNs show zero +Honeylabs events despite significant Sponge session counts. All 6 Censys-profiled +ASNs are universally BULLETPROOF-labeled. |