add: bph report iocs

1 files changed, 46 insertions, 0 deletions

diff --git a/kevlar/2026-08-31/iocs/fingerprints.txt b/kevlar/2026-08-31/iocs/fingerprints.txt
new file mode 100644
index 0000000..344497d
--- /dev/null
+++ b/kevlar/2026-08-31/iocs/fingerprints.txt
@@ -0,0 +1,46 @@
+# Fingerprints observed via Honeylabs, 2026-08-24 to 2026-08-31
+
+t12i130500_2d7513195f68_e51b7354d87f  -- JA4, AS210644 (AEZA-AS), source 217.144.190.138
+ge11nn0500_9af7e0472034  -- JA4H, AS210644 (AEZA-AS), source 217.144.190.138
+ge11nn0400_88d30a62b7ad  -- JA4H, AS210644 (AEZA-AS), source 217.144.190.138
+t13i1909h2_9dc949149365_97f8aa674fd9  -- JA4, AS210644 (AEZA-AS), source 147.45.71.214
+19532158b559096b89b1a5f7d17175b2  -- HASSH, AS210644 (AEZA-AS), source 185.246.217.150
+t13i190900_9dc949149365_e7c285222651  -- JA4, AS210644 (AEZA-AS), source 176.124.203.177
+t13i220900_231e334592e8_29829a46703f  -- JA4, AS138915 (KAOPU-HK (Kaopu Cloud HK Limited)), source 154.90.37.55
+po11nn0400_52fce913cf3b  -- JA4H, AS138915 (KAOPU-HK (Kaopu Cloud HK Limited)), source 154.90.37.55
+ge11nn0500_39072d476f20  -- JA4H, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 107.189.26.103
+t13i100900_61a7ad8aa9b6_88aa062a14c8  -- JA4, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 144.172.99.12
+ge11nn0300_7fd797acd99d  -- JA4H, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 144.172.99.12
+bf7dbf67fa9b26ee9f9deb99c49320ba  -- HASSH, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 45.61.182.81
+ge11nn0400_9c3956fad5da  -- JA4H, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 167.88.168.121
+t13i311000_e8f1e7e78f70_d41ae481755e  -- JA4, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 144.172.115.222
+ge11nn0400_9c3956fad5da  -- JA4H, AS51852 (PLI-AS), source 81.17.28.131
+ge11nn0300_341eb0d8946c  -- JA4H, AS51852 (PLI-AS), source 179.43.150.26
+t13i1310h1_f57a46bbacb6_e7c285222651  -- JA4, AS51852 (PLI-AS), source 179.43.146.27
+ge11nn0400_9c3956fad5da  -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 45.135.194.113
+ge11nn0400_88d30a62b7ad  -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.149.236
+t13i140900_cbb2034c60b8_e7c285222651  -- JA4, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.148.226
+ge11nn0500_cac2c496544b  -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.148.226
+ge11nn0500_9af7e0472034  -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.149.201
+t13i190800_9dc949149365_97f8aa674fd9  -- JA4, AS51396 (PFCLOUD (Pfcloud UG)), source 45.135.193.198
+ge10nn0200_3ed38b250d3d  -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 45.135.193.198
+t13i1909h2_9dc949149365_97f8aa674fd9  -- JA4, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.149.188
+ge11nn0500_d3a2dcb1cd63  -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.148.71
+t13i251000_b78ed14e2fd0_ab7e3b40a677  -- JA4, AS51396 (PFCLOUD (Pfcloud UG)), source 77.83.39.94
+e54ef3ec27fe1fea7ab64d3fa05359fd  -- HASSH, AS200651 (FLOKINET), source 185.100.87.136
+po11nn0600_c9506d37ac14  -- JA4H, AS200651 (FLOKINET), source 185.100.87.136
+t13i1909h2_9dc949149365_97f8aa674fd9  -- JA4, AS200651 (FLOKINET), source 185.100.87.136
+ge11nn0400_88d30a62b7ad  -- JA4H, AS200651 (FLOKINET), source 185.100.87.136
+po11nn0500_e4a47a99f1ac  -- JA4H, AS200651 (FLOKINET), source 185.100.87.136
+ge11nn0500_2d30dc89d981  -- JA4H, AS214351 (FEMOIT), source 192.162.199.180
+t13i1010h1_61a7ad8aa9b6_792d2c6655cb  -- JA4, AS198953 (PROTON66), source 176.120.22.43
+po11nn18en_9a6afedbb443  -- JA4H, AS198953 (PROTON66), source 176.120.22.43
+t13i1010h1_61a7ad8aa9b6_3a8073edd8ef  -- JA4, AS198953 (PROTON66), source 176.120.22.43
+ge11nn0400_8b1ed2202073  -- JA4H, AS198953 (PROTON66), source 176.120.22.43
+ge11cn06ru_b2fb244bb31f  -- JA4H, AS198953 (PROTON66), source 176.120.22.43
+po11nn0500_63d29dec8e1d  -- JA4H, AS198953 (PROTON66), source 176.120.22.43
+ge11nn05en_3bd45b6f184e  -- JA4H, AS198953 (PROTON66), source 176.120.22.43
+
+# Cross-run correlations
+t13i1909h2_9dc949149365_97f8aa674fd9  -- beacon family: FLOKINET 185.100.87.136 (prior weeks) AND AEZA 147.45.71.214 (this week)
+