From 4294adbcb3a35e85f3107922e953aa98158989d7 Mon Sep 17 00:00:00 2001 From: hrbrmstr Date: Mon, 22 Jun 2026 06:54:25 -0400 Subject: add: 2026-06-20 kevlar iocs --- kevlar/2026-06-20/changes/anomalies.csv | 3 +++ kevlar/2026-06-20/changes/diff-vs-prior-week.csv | 11 +++++++++++ 2 files changed, 14 insertions(+) create mode 100644 kevlar/2026-06-20/changes/anomalies.csv create mode 100644 kevlar/2026-06-20/changes/diff-vs-prior-week.csv (limited to 'kevlar/2026-06-20/changes') diff --git a/kevlar/2026-06-20/changes/anomalies.csv b/kevlar/2026-06-20/changes/anomalies.csv new file mode 100644 index 0000000..6864d1f --- /dev/null +++ b/kevlar/2026-06-20/changes/anomalies.csv @@ -0,0 +1,3 @@ +severity,asn,provider,finding,rationale +medium,57043,HOSTKEY-AS,New large ASN discovered with 99,992 hosts,Not previously tracked; now the largest network in the watchlist +low,198953,PROTON66,Event normalization from 42K to 112,Last week's massive spike was temporary; likely a campaign that ended diff --git a/kevlar/2026-06-20/changes/diff-vs-prior-week.csv b/kevlar/2026-06-20/changes/diff-vs-prior-week.csv new file mode 100644 index 0000000..45bf0db --- /dev/null +++ b/kevlar/2026-06-20/changes/diff-vs-prior-week.csv @@ -0,0 +1,11 @@ +asn,provider,prior_hosts,current_hosts,delta,delta_pct,notes +51396,PFCLOUD,3424,3476,+52,+1.5%,wg-easy deployments driving growth +138915,KAOPU-HK,35900,34264,-1636,-4.6%,Infrastructure churn +51852,PLI-AS,11259,11209,-50,-0.4%,Stable +14956,ROUTERHOSTING,25869,25182,-687,-2.7%,Slight decline +210644,AEZA-AS,76683,76411,-272,-0.4%,Stable (within noise) +57043,HOSTKEY-AS,--,99992,--,--,Newly tracked this week +198953,PROTON66,62,62,0,0%,Stable host count but massive event normalization (42K->112) +200651,FLOKINET,3462,3462,0,0%,Stable +209847,THE,13517,13517,0,0%,Stable (no current Censys query this week) +213702,QWINS-LTD,6967,6967,0,0%,Stable (no current Censys query this week) -- cgit v1.2.3