diff options
| author | hrbrmstr <bob@rud.is> | 2026-08-10 07:14:00 -0400 |
|---|---|---|
| committer | hrbrmstr <bob@rud.is> | 2026-08-10 07:14:00 -0400 |
| commit | 7439049b2d46c035fda40b27d3f64b0b9f48af8a (patch) | |
| tree | 64335a1ba8765780114d873f919952776fc48809 /kevlar/2026-08-10/iocs/c2-paths.txt | |
| parent | dd7a507679c042a9fa100ea4ff3024b2a8c11826 (diff) | |
feat: update bph iocs
Diffstat (limited to 'kevlar/2026-08-10/iocs/c2-paths.txt')
| -rw-r--r-- | kevlar/2026-08-10/iocs/c2-paths.txt | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/kevlar/2026-08-10/iocs/c2-paths.txt b/kevlar/2026-08-10/iocs/c2-paths.txt new file mode 100644 index 0000000..36aae8c --- /dev/null +++ b/kevlar/2026-08-10/iocs/c2-paths.txt @@ -0,0 +1,11 @@ +# C2 and Exploitation Paths Observed + +# PFCLOUD (AS51396) +http://169.254.169.254/latest/user-data -- cloud metadata probe, 176.65.148.142, port 3001 +/src/universalTouchGamepad.js -- zgrab web scanner probe, 45.135.194.31, ports 3000/3001 +http://proxy.flarevpn.digital:8080/judge -- proxy-quality judge check, 45.135.194.113, port 8019 + +# PLI-AS (AS51852) +/.env -- environment file exfiltration, 179.43.150.26, ports 8001/8443 +/.git -- git repository discovery, 179.43.150.26, ports 8001/8443 +/z5044, /s/5124, /.e2382 -- randomized directory-bruteforce paths, 179.43.150.26 |