aboutsummaryrefslogtreecommitdiff
path: root/kevlar/2026-06-15/OPERATIONS_LOG.md
blob: 26fd19966da845b545b52eb1cf16d9c2bf15a3a0 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
# Weekly BP Report -- Operations Log

## 2026-06-15 02:21:00 -- Phase 0: Initialize
- ASNs loaded: 26
- Censys credits: 10,000 (sufficient)
- Prior baseline: 2026-06-08 (confirmed)
- Cache directories created: honeylabs/, censys/, changes/, iocs/
- Run date: 2026-06-15

## 2026-06-15 02:21:00 -- Phase 1: Honeylabs Queries (Starting)

## 2026-06-15 02:22:00 -- Phase 1: Honeylabas Queries (Complete)
- ASNs queried: 26
- Active ASNs found: 10 (AS198953, AS51396, AS14956, AS51852, AS214940, AS210644, AS200651, AS138915, AS209847, AS213702)
- API calls made: ~45
- Results cached: Y
- Errors: none

## 2026-06-15 02:25:00 -- Phase 2: Censys Infrastructure Profiling (Complete)
- ASNs aggregated: 9 (port, software, labels)
- All active ASNs carry BULLETPROOF label
- Per-IP enrichment: skipped (aggregation sufficient for report)
- Results cached: Y

## 2026-06-15 02:28:00 -- Phase 3: Change Detection (Complete)
- Prior baseline: 2026-06-08
- Anomalies flagged: 3
  - PROTON66 massive volume spike (42K+ events, +1,860%)
  - June 14 global scanning spike (1.1M events, 4x daily avg)
  - QWINS LTD new entrant (X11 port probing)

## 2026-06-15 02:30:00 -- Phase 4: Blog Post (Written)
- File: /Users/hrbrmstr/projects/ai.rud.is/src/data/blog/2026-06-15-weekly-bulletproof-report.md
- Sections: Executive Summary, By the Numbers, Top ASN Deep Dives, Infrastructure Correlation, Fleet Observations, IoCs

## 2026-06-15 02:32:00 -- Phase 5: IoC Archival (Complete)
- Files created: all-observed-ips.txt, fingerprints.txt, c2-paths.txt, README.md
- Build verification: pending

## 2026-06-15 02:33:00 -- Build Verification
- Running: cd /Users/hrbrmstr/projects/ai.rud.is && npm run build