diff options
| author | hrbrmstr <bob@rud.is> | 2026-08-31 07:56:38 -0400 |
|---|---|---|
| committer | hrbrmstr <bob@rud.is> | 2026-08-31 07:56:38 -0400 |
| commit | e93e7f67d4f70177c3ab5a34e8cc5b24fa2dde6d (patch) | |
| tree | e02486c0af8f5f8bf64600f0a1a2b4904c4c123a /kevlar/2026-08-31/honeylabs/ioc-62.60.226.150.json | |
| parent | 1d9b78adfc083d1120c55e403e6b3d6317a1171f (diff) | |
add: bph report iocs
Diffstat (limited to 'kevlar/2026-08-31/honeylabs/ioc-62.60.226.150.json')
| -rw-r--r-- | kevlar/2026-08-31/honeylabs/ioc-62.60.226.150.json | 39 |
1 files changed, 39 insertions, 0 deletions
diff --git a/kevlar/2026-08-31/honeylabs/ioc-62.60.226.150.json b/kevlar/2026-08-31/honeylabs/ioc-62.60.226.150.json new file mode 100644 index 0000000..01a1092 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-62.60.226.150.json @@ -0,0 +1,39 @@ +{ + "total_events": 6, + "first_seen": "2026-08-22T16:21:05", + "last_seen": "2026-08-28T22:58:01", + "asn_number": 214351, + "asn_org": "Femo It Solutions Limited", + "country_name": "Germany", + "country_code": "DE", + "ports_targeted": [ + 1723 + ], + "ports_targeted_count": 1, + "tls_event_count": 0, + "top_http_methods": [], + "top_user_agents": [], + "top_url_paths": [], + "top_ja4_fingerprints": [], + "top_ja3_fingerprints": [], + "top_hassh_fingerprints": [], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "", + "loader_hits": 0, + "exploit_hits": 0, + "bytes_sent": 936, + "unique_source_ips": 1, + "ioc": "62.60.226.150", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "probing", + "verdict": "Low-level probing", + "verdict_why": [ + "6 event(s), fewer than 10 distinct ports, no exploit payloads.", + "Not in any known-scanner range." + ], + "verdict_confidence": "low", + "cve_probes": [] +}
\ No newline at end of file |