aboutsummaryrefslogtreecommitdiff
path: root/kevlar/2026-06-20/iocs/fingerprints.txt
blob: 8b7490309ed6c9f0bb5fd4ae016d9f9241386ef4 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
# Unique Fingerprints Observed -- Weekly BP Report 2026-06-20
# Generated: 2026-06-22T10:44:00Z

# JA4 TLS Fingerprints
t13i131000_f57a46bbacb6_ab7e3b40a677  -- Go TLS client, observed on 3 IPs across KAOPU-HK and THE ASNs; TLSv1.3 AES_128_GCM_SHA256

# JA3 Legacy Fingerprints
2196848d251b217de8b2c037e356c11d  -- Go TLS client (JA3 equivalent of above), seen on KAOPU-HK IPs (38.60.254.173, 154.203.143.169)

# JA4H HTTP Fingerprints
ge11nn0300_0db47b7d240d  -- Go-http-client/1.1, KAOPU-HK (38.60.254.173), probing HTTP/HTTPS/9200
po11nn0700_4784ccc9db2c  -- Mozilla/4.0 compatible MSIE 6.0 UPnP client, KAOPU-HK (149.104.66.228), UPnP AddPortMapping attempts