diff options
| author | hrbrmstr <bob@rud.is> | 2026-08-03 06:52:30 -0400 |
|---|---|---|
| committer | hrbrmstr <bob@rud.is> | 2026-08-03 06:52:30 -0400 |
| commit | 89a294a0e93277e5f27fc96710f638a5ac85ab35 (patch) | |
| tree | 92a53bcae9c10f02877e60e9a6393d9f4ae167c3 /kevlar/2026-08-02/iocs/fingerprints.txt | |
| parent | 4c5956acd240953aec538d8a25e2724a608ce9be (diff) | |
chore: weekly BPH update
Diffstat (limited to 'kevlar/2026-08-02/iocs/fingerprints.txt')
| -rw-r--r-- | kevlar/2026-08-02/iocs/fingerprints.txt | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/kevlar/2026-08-02/iocs/fingerprints.txt b/kevlar/2026-08-02/iocs/fingerprints.txt new file mode 100644 index 0000000..bd25290 --- /dev/null +++ b/kevlar/2026-08-02/iocs/fingerprints.txt @@ -0,0 +1,8 @@ +# JA4H HTTP Fingerprints + +ge11nn0400_9c3956fad5da -- PFCLOUD Go-http-client/1.1 proxy checker, 204.76.203.78-80 +ge11nn0400_88d30a62b7ad -- PFCLOUD zgrab/0.x web scanner, 176.65.149.236 + +# Note: No JA4 TLS or HASSH SSH fingerprints were observed in Honeylabs events +# from monitored ASNs this week. All non-PFCLOUD ASNs registered zero honeypot +# events in the 2026-07-27 to 2026-08-02 observation window. |