# Operations Log -- Weekly BP Report 2026-07-04

## 2026-07-06 -- Phase 0: Initialize
- ASNs loaded: 26 from bulletproof-asns.csv
- Gist directory: ~/Documents/gists/kevlar/2026-07-04/
- Censys credits: 10,000 (sufficient)
- Prior baseline: 2026-06-29
Starting Honeylabs Phase 2
## 2026-07-06 10:28:16 -- Phase 2: Honeylabs queries
### Honeylabs Phase Summary
## 2026-07-06 10:29:05 -- Phase 2: Honeylabs queries
- ASNs queried: 26
- Active ASNs found: AS51396 (PFCLOUD), AS51852 (PLI-AS), AS14956 (ROUTERHOSTING), AS210644 (AEZA-AS), AS400992 (ZHOUYISAT), AS200651 (FLOKINET), AS198953 (PROTON66), AS200593 (PROSPERO-AS), AS214940 (KPRONET)
- Top by volume: AS51396 (PFCLOUD) - 11,500+ events
- Errors: none
## 2026-07-06 10:29:31 -- Phase 3: Censys aggregations
- ASNs queried: 26
- All monitored ASNs carry BULLETPROOF label
- Credits remaining: sufficient
- Per-IP enrichment: to be done for top Honeylabs IPs
## 2026-07-06 10:29:53 -- Phase 4: Change Detection
- Prior baseline: 2026-06-29
- PFCLOUD (AS51396) events: 4,379 (prior) vs 11,500+ (current) -- 2.6x increase
- New ASNs with activity this week vs last: consistent (both 9 active)
- Key changes noted in narrative
## 2026-07-06 10:29:53 -- Phase 5: Composing Blog Post
## 2026-07-06 10:31:21 -- Phase 5: Blog Post Written
- Blog: src/data/blog/2026-07-04-weekly-bulletproof-report.md
- Build: PASSED

## 2026-07-06 10:31:21 -- Phase 6: IoC Archival
- all-observed-ips.txt: 40+ unique IPs across 9 ASNs
- fingerprints.txt: Data gaps noted for future improvement
- c2-paths.txt: No HTTP paths this week (non-HTTP traffic)
- README.md: Run summary
- Status: COMPLETE