1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
|
# Weekly BP Report -- 2026-07-13
# Fingerprints observed per ASN
# Query range: 2026-07-05 through 2026-07-11
# HASSH SSH Fingerprints
AS57043,151.243.173.235,hassh,f555226df1963d1d3c09daf865abdc9a,SSH-2.0-libssh_0.9.6,SSH scanning port 22
AS200651,185.100.87.136,hassh,e54ef3ec27fe1fea7ab64d3fa05359fd,SSH-2.0-OpenSSH_10.1,SSH scanning multiple ports (Tor exit node)
# JA4/JA3 TLS Fingerprints
AS400992,185.228.72.109,ja4,t13i1711h1_ab0a1bf427ad_882d495ac381,,TLS 1.3 .env file scanning
AS400992,185.228.72.109,ja3,fb0c9cea0478d6132076f4cdcb0d5224,,TLS 1.3 .env file scanning
AS200651,185.100.87.136,ja4,t13i1909h2_9dc949149365_97f8aa674fd9,,TLS 1.3 transparentpix.gif probing
AS200651,185.100.87.136,ja3,7c1e207beb00684bbbe144f1b0abe1d5,,TLS 1.3 transparentpix.gif probing
AS211720,185.231.33.46,ja4,t13i1813h1_5103eae14fdb_97a66a8f4cb1,,TLS 1.3 Exchange /ews/ recon
AS211720,185.231.33.46,ja3,60eb467937ec4cb8aa43b4008a510ad1,,TLS 1.3 Exchange /ews/ recon
# JA4H HTTP Fingerprints
AS400992,185.228.72.109,ja4h,ge11nn0500_2d30dc89d981,,HTTP GET /.env scanning
AS200651,185.100.87.136,ja4h,ge11nn0400_88d30a62b7ad,,HTTP GET on port 444
AS211720,185.231.33.46,ja4h,he11nn0500_2d30dc89d981,,HTTP HEAD /ews/ Exchange recon
# Censys-enriched SSH versions
AS51396,176.65.148.25,ssh-version,SSH-2.0-OpenSSH_9.2p1,,GreyNoise malicious RDP crawler/bruteforcer
AS51852,179.43.134.114,ssh-version,SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.10,,hostedby.privatelayer.com
AS200651,185.100.87.136,tor-version,Tor 0.4.9.11,,Confirmed Tor exit node on port 9001
|
