From 7439049b2d46c035fda40b27d3f64b0b9f48af8a Mon Sep 17 00:00:00 2001 From: hrbrmstr Date: Mon, 10 Aug 2026 07:14:00 -0400 Subject: feat: update bph iocs --- kevlar/2026-08-10/iocs/c2-paths.txt | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 kevlar/2026-08-10/iocs/c2-paths.txt (limited to 'kevlar/2026-08-10/iocs/c2-paths.txt') diff --git a/kevlar/2026-08-10/iocs/c2-paths.txt b/kevlar/2026-08-10/iocs/c2-paths.txt new file mode 100644 index 0000000..36aae8c --- /dev/null +++ b/kevlar/2026-08-10/iocs/c2-paths.txt @@ -0,0 +1,11 @@ +# C2 and Exploitation Paths Observed + +# PFCLOUD (AS51396) +http://169.254.169.254/latest/user-data -- cloud metadata probe, 176.65.148.142, port 3001 +/src/universalTouchGamepad.js -- zgrab web scanner probe, 45.135.194.31, ports 3000/3001 +http://proxy.flarevpn.digital:8080/judge -- proxy-quality judge check, 45.135.194.113, port 8019 + +# PLI-AS (AS51852) +/.env -- environment file exfiltration, 179.43.150.26, ports 8001/8443 +/.git -- git repository discovery, 179.43.150.26, ports 8001/8443 +/z5044, /s/5124, /.e2382 -- randomized directory-bruteforce paths, 179.43.150.26 -- cgit v1.2.3