diff options
| author | hrbrmstr <bob@rud.is> | 2026-08-31 07:56:38 -0400 |
|---|---|---|
| committer | hrbrmstr <bob@rud.is> | 2026-08-31 07:56:38 -0400 |
| commit | e93e7f67d4f70177c3ab5a34e8cc5b24fa2dde6d (patch) | |
| tree | e02486c0af8f5f8bf64600f0a1a2b4904c4c123a /kevlar/2026-08-31/honeylabs/events-AS400992.ndjson | |
| parent | 1d9b78adfc083d1120c55e403e6b3d6317a1171f (diff) | |
add: bph report iocs
Diffstat (limited to 'kevlar/2026-08-31/honeylabs/events-AS400992.ndjson')
| -rw-r--r-- | kevlar/2026-08-31/honeylabs/events-AS400992.ndjson | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/kevlar/2026-08-31/honeylabs/events-AS400992.ndjson b/kevlar/2026-08-31/honeylabs/events-AS400992.ndjson new file mode 100644 index 0000000..6febabe --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS400992.ndjson @@ -0,0 +1 @@ +{"timestamp": "2026-08-30T15:38:28", "event_id": "098ea664-7e47-4ee2-b41a-1f9fb543395f", "source_ip": "194.48.142.134", "source_port": 54390, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 400992, "asn_org": "ZhouyiSat Communications", "dest_port": 25565, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 22, "dest_bytes": 14, "network_bytes": 36, "event_summary": "\u0013\u0000/\r<HONEYPOT>c\ufffd\u0001\u0001\u0000"} |