diff options
Diffstat (limited to 'kevlar/2026-09-07/iocs/fingerprints.txt')
| -rw-r--r-- | kevlar/2026-09-07/iocs/fingerprints.txt | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/kevlar/2026-09-07/iocs/fingerprints.txt b/kevlar/2026-09-07/iocs/fingerprints.txt new file mode 100644 index 0000000..c3de1f3 --- /dev/null +++ b/kevlar/2026-09-07/iocs/fingerprints.txt @@ -0,0 +1,34 @@ +# fingerprints observed, week 2026-08-31 to 2026-09-07 +# JA4 TLS client fingerprints +t13i181000_85036bcba153_d41ae481755e -- 2 IP(s): 45.151.101.38 (AS216246), 45.61.149.189 (AS14956) +t12i210600_76e208dd3e22_f28add8e7af0 -- 1 IP(s): 176.120.22.240 (AS198953) +t13i1909h2_9dc949149365_97f8aa674fd9 -- 1 IP(s): 185.100.87.136 (AS200651) +t13i170900_5b57614c22b0_78e6aca7449b -- 1 IP(s): 185.246.217.150 (AS210644) +t13i190800_9dc949149365_97f8aa674fd9 -- 1 IP(s): 46.19.142.226 (AS51852) +t13i1310h1_f57a46bbacb6_e7c285222651 -- 1 IP(s): 179.43.146.27 (AS51852) +t13i131000_f57a46bbacb6_ab7e3b40a677 -- 1 IP(s): 179.43.186.220 (AS51852) +t13i100900_61a7ad8aa9b6_88aa062a14c8 -- 1 IP(s): 144.172.99.12 (AS14956) +t13i311000_e8f1e7e78f70_d41ae481755e -- 1 IP(s): 144.172.115.222 (AS14956) + +# JA4H HTTP fingerprints +ge11nn0400_9c3956fad5da -- 3 IP(s): 176.65.134.48 (AS51396), 179.43.146.27 (AS51852), 167.88.168.121 (AS14956) +ge11nn0400_88d30a62b7ad -- 2 IP(s): 185.100.87.136 (AS200651), 179.43.186.220 (AS51852) +po11nn0600_def5433ae821 -- 1 IP(s): 45.151.101.38 (AS216246) +ge11nn0200_549fad093d6b -- 1 IP(s): 176.120.22.240 (AS198953) +ge11nn0300_80168362a4ec -- 1 IP(s): 176.120.22.240 (AS198953) +po11nn0600_c9506d37ac14 -- 1 IP(s): 185.100.87.136 (AS200651) +po11nn0500_e4a47a99f1ac -- 1 IP(s): 185.100.87.136 (AS200651) +ge11nn0500_7992432eef13 -- 1 IP(s): 185.246.217.150 (AS210644) +ge11nn0700_3161ce9d7233 -- 1 IP(s): 185.246.217.150 (AS210644) +po11nn0700_3161ce9d7233 -- 1 IP(s): 185.246.217.150 (AS210644) +ge11nn0500_3012a89e1aee -- 1 IP(s): 185.246.217.150 (AS210644) +po11nn0500_c5c1780925fe -- 1 IP(s): 46.19.142.226 (AS51852) +ge11nn0300_0db47b7d240d -- 1 IP(s): 46.19.142.226 (AS51852) +ge11nn0300_341eb0d8946c -- 1 IP(s): 179.43.150.26 (AS51852) +ge11nn0400_8fd06a127c33 -- 1 IP(s): 45.61.149.189 (AS14956) +ge11nn0400_c3abebcf3d28 -- 1 IP(s): 216.126.227.187 (AS14956) +ge11nn0300_7fd797acd99d -- 1 IP(s): 144.172.99.12 (AS14956) + +# HASSH SSH fingerprints +19532158b559096b89b1a5f7d17175b2 -- 1 IP(s): 185.246.217.150 (AS210644) +98ddc5604ef6a1006a2b49a58759fbe6 -- 1 IP(s): 82.39.165.100 (AS57043) |