diff options
| author | hrbrmstr <bob@rud.is> | 2026-08-17 07:45:20 -0400 |
|---|---|---|
| committer | hrbrmstr <bob@rud.is> | 2026-08-17 07:45:20 -0400 |
| commit | 237f2d9330398e0a0628980056db6b09098d5f2f (patch) | |
| tree | 09f16c0f363ee4a23bdc64cf3cfaab7562a80432 /kevlar/2026-08-17/honeylabs/events-AS200651.json | |
| parent | 7439049b2d46c035fda40b27d3f64b0b9f48af8a (diff) | |
feat: update bph iocs
Diffstat (limited to 'kevlar/2026-08-17/honeylabs/events-AS200651.json')
| -rw-r--r-- | kevlar/2026-08-17/honeylabs/events-AS200651.json | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/kevlar/2026-08-17/honeylabs/events-AS200651.json b/kevlar/2026-08-17/honeylabs/events-AS200651.json new file mode 100644 index 0000000..f2dd6ad --- /dev/null +++ b/kevlar/2026-08-17/honeylabs/events-AS200651.json @@ -0,0 +1,5 @@ +[{"timestamp":"2026-08-16T21:21:40","source_ip":"185.146.234.64","country_code":"IS","asn_number":200651,"asn_org":"FlokiNET ehf","dest_port":3389,"application_protocol":"rdp","event_summary":"Cookie: mstshash=hello"}, +{"timestamp":"2026-08-14T16:44:45","source_ip":"185.100.87.136","country_code":"RO","asn_number":200651,"asn_org":"FlokiNET ehf","dest_port":443,"application_protocol":"","network_protocol":""}, +{"timestamp":"2026-08-13T20:32:54","source_ip":"185.100.87.136","country_code":"RO","asn_number":200651,"asn_org":"FlokiNET ehf","dest_port":443,"application_protocol":"http","http_method":"POST","user_agent":"SPARK COMMIT: 08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17","url_path":"/api/client/update?arch=amd64&commit=08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17&os=windows","request_headers_secret":"3de172c65c5204dbce4c985d6616ca6fbbf337be4ddd40746307af802fa510a2","http_request_ja4h":"po11nn0600_c9506d37ac14"}, +{"timestamp":"2026-08-13T20:32:53","source_ip":"185.100.87.136","country_code":"RO","asn_number":200651,"asn_org":"FlokiNET ehf","dest_port":443,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:104.71.6212.24) Firefox/2.0","url_path":"/","tls_client_ja4":"t13i1909h2_9dc949149365_97f8aa674fd9","tls_client_ja3":"7c1e207beb00684bbbe144f1b0abe1d5","http_request_ja4h":"ge11nn0400_88d30a62b7ad"}, +{"timestamp":"2026-08-12T20:14:48","source_ip":"185.100.87.136","country_code":"RO","asn_number":200651,"asn_org":"FlokiNET ehf","dest_port":8080,"application_protocol":""}] |