diff options
| author | hrbrmstr <bob@rud.is> | 2026-06-15 02:53:38 -0400 |
|---|---|---|
| committer | hrbrmstr <bob@rud.is> | 2026-06-15 02:53:38 -0400 |
| commit | bef08f968baf5e0fa534b4c2c95b07ab8416e70c (patch) | |
| tree | 56d50e76af00ee62a63c4f944da9cda2cbb0a684 /kevlar/2026-06-15/honeylabs | |
| parent | 8d2890e93ff96fc21d6e00fe0a03cf4b1a871271 (diff) | |
chore: weekly asn update
Diffstat (limited to 'kevlar/2026-06-15/honeylabs')
| -rw-r--r-- | kevlar/2026-06-15/honeylabs/fingerprints.csv | 7 | ||||
| -rw-r--r-- | kevlar/2026-06-15/honeylabs/top-attackers.csv | 16 |
2 files changed, 23 insertions, 0 deletions
diff --git a/kevlar/2026-06-15/honeylabs/fingerprints.csv b/kevlar/2026-06-15/honeylabs/fingerprints.csv new file mode 100644 index 0000000..e814969 --- /dev/null +++ b/kevlar/2026-06-15/honeylabs/fingerprints.csv @@ -0,0 +1,7 @@ +FP_Type,Fingerprint,SourceASN,SourceIP,Notes +JA4,t13i1909h2_9dc949149365_97f8aa674fd9,AS200651,185.100.87.136,TLSv1.3 CHACHA20_POLY1305 - SPARK beacon +JA4H,ge11nn0400_88d30a62b7ad,AS200651,185.100.87.136,HTTP JA4H for SPARK beacon +JA3,7c1e207beb00684bbbe144f1b0abe1d5,AS200651,185.100.87.136,Legacy JA3 for SPARK +HASSH,f555226df1963d1d3c09daf865abdc9a,AS210644,multiple,SSH libssh 0.9.6 +JA4T,t13i1310h1_f57a46bbacb6_e7c285222651,AS209847,45.83.20.230,TLSv1.3 AES_128_GCM - Firefox 140 on Linux +JA4H,ge11nn0400_9c3956fad5da,AS138915,154.205.145.161,Docker API scanning (go-dockerclient) diff --git a/kevlar/2026-06-15/honeylabs/top-attackers.csv b/kevlar/2026-06-15/honeylabs/top-attackers.csv new file mode 100644 index 0000000..d7ddaed --- /dev/null +++ b/kevlar/2026-06-15/honeylabs/top-attackers.csv @@ -0,0 +1,16 @@ +ASN,IP,Events,TopPorts,Country +AS198953,37.77.150.67,42057,1433/6358/234/5776/8534,RU +AS198953,176.120.22.147,873,44410/44405/36443/44411/44512,RU +AS198953,176.120.22.240,7,5678/7547,RU +AS51396,45.135.193.193,480,8888/8080/443/80/8000,DE +AS51396,204.76.203.206,417,8081/80/8080/82/83,NL +AS51396,176.65.139.103,322,8006,DE +AS51396,204.76.203.219,282,80/82/81/8081/88,NL +AS51396,176.65.139.31,208,6036/17000/17001,DE +AS51396,176.65.139.130,201,22/10022/24442/222/22022,DE +AS51396,176.65.132.141,154,27017,DE +AS51396,176.65.139.36,111,80/1080/1081/8080/81,DE +AS51396,176.65.149.27,99,36115/36114/36111/36116/36088,NL +AS51396,176.65.148.147,98,9080/8088/8082/7081/20200,NL +AS51396,176.65.149.30,87,30112/30108/30109/30107/30111,NL +AS51396,176.65.139.151,84,23,DE |