From 4294adbcb3a35e85f3107922e953aa98158989d7 Mon Sep 17 00:00:00 2001 From: hrbrmstr Date: Mon, 22 Jun 2026 06:54:25 -0400 Subject: add: 2026-06-20 kevlar iocs --- kevlar/2026-06-20/iocs/c2-paths.txt | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 kevlar/2026-06-20/iocs/c2-paths.txt (limited to 'kevlar/2026-06-20/iocs/c2-paths.txt') diff --git a/kevlar/2026-06-20/iocs/c2-paths.txt b/kevlar/2026-06-20/iocs/c2-paths.txt new file mode 100644 index 0000000..695bd81 --- /dev/null +++ b/kevlar/2026-06-20/iocs/c2-paths.txt @@ -0,0 +1,6 @@ +# Notable HTTP URL Paths Observed -- Weekly BP Report 2026-06-20 +# Generated: 2026-06-22T10:44:00Z + +# UPnP Exploitation +/wanipcn.xml -- SOAP AddPortMapping target, 14 events, KAOPU-HK AS138915 (149.104.66.228, Peru) +/picdesc.xml -- UPnP device description, paired with AddPortMapping, KAOPU-HK AS138915 (149.104.66.228, Peru) -- cgit v1.2.3