blob: 7d9f2d159cdf80946956b6d85167968765e0954d (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
# Weekly BP Report -- 2026-08-17
Operations log for the 2026-08-17 run.
## 2026-08-17 -- Phase 0: Initialize
- ASNs queried: 0
- API calls made: 0
- Results cached: N
- Errors: none
## 2026-08-17 -- Phase 1: Sponge (Arkime)
- ASNs queried: 25
- API calls made: 76 (73 stats + 2 timelines + 1 schema)
- Results cached: Y
- Errors: none
## 2026-08-17 -- Phase 2: Honeylabs
- ASNs queried: 13 (events), 5 (top attackers), 7 (per-IP IOC)
- API calls made: 26
- Results cached: Y
- Errors: ioc_lookup treats "AS*" as domain type - used asn-filtered search_events/top_attackers instead
## 2026-08-17 -- Phase 3: Censys
- ASNs queried: 11 aggregations, 6 per-IP
- API calls made: 38
- Results cached: Y
- Errors: aggregate endpoint transient "Query error" x6 - retry succeeded; no credit exhaustion (10,000 balance)
## 2026-08-17 -- Phase 4: Change detection
- Baseline: 2026-08-10
- Results cached: Y
- Anomalies: 7
## 2026-08-17 -- Phase 5: Blog post
- Wrote 2026-08-17-weekly-bulletproof-report.md
- Build: npm run build exit=0, 0 errors, post rendered
## 2026-08-17 -- Phase 6: IoC archival
- Files written to iocs/: all-observed-ips.txt, fingerprints.txt, c2-paths.txt, README.md
|
