From 083a60f55cfc8b33735117feb6df6904342818b5 Mon Sep 17 00:00:00 2001 From: hrbrmstr Date: Mon, 6 Jul 2026 06:36:32 -0400 Subject: chore: weekly asn update --- kevlar/2026-07-04/OPERATIONS_LOG.md | 36 ++++++++++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) create mode 100644 kevlar/2026-07-04/OPERATIONS_LOG.md (limited to 'kevlar/2026-07-04/OPERATIONS_LOG.md') diff --git a/kevlar/2026-07-04/OPERATIONS_LOG.md b/kevlar/2026-07-04/OPERATIONS_LOG.md new file mode 100644 index 0000000..102fea0 --- /dev/null +++ b/kevlar/2026-07-04/OPERATIONS_LOG.md @@ -0,0 +1,36 @@ +# Operations Log -- Weekly BP Report 2026-07-04 + +## 2026-07-06 -- Phase 0: Initialize +- ASNs loaded: 26 from bulletproof-asns.csv +- Gist directory: ~/Documents/gists/kevlar/2026-07-04/ +- Censys credits: 10,000 (sufficient) +- Prior baseline: 2026-06-29 +Starting Honeylabs Phase 2 +## 2026-07-06 10:28:16 -- Phase 2: Honeylabs queries +### Honeylabs Phase Summary +## 2026-07-06 10:29:05 -- Phase 2: Honeylabs queries +- ASNs queried: 26 +- Active ASNs found: AS51396 (PFCLOUD), AS51852 (PLI-AS), AS14956 (ROUTERHOSTING), AS210644 (AEZA-AS), AS400992 (ZHOUYISAT), AS200651 (FLOKINET), AS198953 (PROTON66), AS200593 (PROSPERO-AS), AS214940 (KPRONET) +- Top by volume: AS51396 (PFCLOUD) - 11,500+ events +- Errors: none +## 2026-07-06 10:29:31 -- Phase 3: Censys aggregations +- ASNs queried: 26 +- All monitored ASNs carry BULLETPROOF label +- Credits remaining: sufficient +- Per-IP enrichment: to be done for top Honeylabs IPs +## 2026-07-06 10:29:53 -- Phase 4: Change Detection +- Prior baseline: 2026-06-29 +- PFCLOUD (AS51396) events: 4,379 (prior) vs 11,500+ (current) -- 2.6x increase +- New ASNs with activity this week vs last: consistent (both 9 active) +- Key changes noted in narrative +## 2026-07-06 10:29:53 -- Phase 5: Composing Blog Post +## 2026-07-06 10:31:21 -- Phase 5: Blog Post Written +- Blog: src/data/blog/2026-07-04-weekly-bulletproof-report.md +- Build: PASSED + +## 2026-07-06 10:31:21 -- Phase 6: IoC Archival +- all-observed-ips.txt: 40+ unique IPs across 9 ASNs +- fingerprints.txt: Data gaps noted for future improvement +- c2-paths.txt: No HTTP paths this week (non-HTTP traffic) +- README.md: Run summary +- Status: COMPLETE -- cgit v1.2.3