aboutsummaryrefslogtreecommitdiff
path: root/kevlar/2026-08-31/iocs/fingerprints.txt
blob: 344497d0f7fed717139aeb32a43a28ee15305a15 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
# Fingerprints observed via Honeylabs, 2026-08-24 to 2026-08-31

t12i130500_2d7513195f68_e51b7354d87f  -- JA4, AS210644 (AEZA-AS), source 217.144.190.138
ge11nn0500_9af7e0472034  -- JA4H, AS210644 (AEZA-AS), source 217.144.190.138
ge11nn0400_88d30a62b7ad  -- JA4H, AS210644 (AEZA-AS), source 217.144.190.138
t13i1909h2_9dc949149365_97f8aa674fd9  -- JA4, AS210644 (AEZA-AS), source 147.45.71.214
19532158b559096b89b1a5f7d17175b2  -- HASSH, AS210644 (AEZA-AS), source 185.246.217.150
t13i190900_9dc949149365_e7c285222651  -- JA4, AS210644 (AEZA-AS), source 176.124.203.177
t13i220900_231e334592e8_29829a46703f  -- JA4, AS138915 (KAOPU-HK (Kaopu Cloud HK Limited)), source 154.90.37.55
po11nn0400_52fce913cf3b  -- JA4H, AS138915 (KAOPU-HK (Kaopu Cloud HK Limited)), source 154.90.37.55
ge11nn0500_39072d476f20  -- JA4H, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 107.189.26.103
t13i100900_61a7ad8aa9b6_88aa062a14c8  -- JA4, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 144.172.99.12
ge11nn0300_7fd797acd99d  -- JA4H, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 144.172.99.12
bf7dbf67fa9b26ee9f9deb99c49320ba  -- HASSH, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 45.61.182.81
ge11nn0400_9c3956fad5da  -- JA4H, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 167.88.168.121
t13i311000_e8f1e7e78f70_d41ae481755e  -- JA4, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 144.172.115.222
ge11nn0400_9c3956fad5da  -- JA4H, AS51852 (PLI-AS), source 81.17.28.131
ge11nn0300_341eb0d8946c  -- JA4H, AS51852 (PLI-AS), source 179.43.150.26
t13i1310h1_f57a46bbacb6_e7c285222651  -- JA4, AS51852 (PLI-AS), source 179.43.146.27
ge11nn0400_9c3956fad5da  -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 45.135.194.113
ge11nn0400_88d30a62b7ad  -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.149.236
t13i140900_cbb2034c60b8_e7c285222651  -- JA4, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.148.226
ge11nn0500_cac2c496544b  -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.148.226
ge11nn0500_9af7e0472034  -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.149.201
t13i190800_9dc949149365_97f8aa674fd9  -- JA4, AS51396 (PFCLOUD (Pfcloud UG)), source 45.135.193.198
ge10nn0200_3ed38b250d3d  -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 45.135.193.198
t13i1909h2_9dc949149365_97f8aa674fd9  -- JA4, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.149.188
ge11nn0500_d3a2dcb1cd63  -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.148.71
t13i251000_b78ed14e2fd0_ab7e3b40a677  -- JA4, AS51396 (PFCLOUD (Pfcloud UG)), source 77.83.39.94
e54ef3ec27fe1fea7ab64d3fa05359fd  -- HASSH, AS200651 (FLOKINET), source 185.100.87.136
po11nn0600_c9506d37ac14  -- JA4H, AS200651 (FLOKINET), source 185.100.87.136
t13i1909h2_9dc949149365_97f8aa674fd9  -- JA4, AS200651 (FLOKINET), source 185.100.87.136
ge11nn0400_88d30a62b7ad  -- JA4H, AS200651 (FLOKINET), source 185.100.87.136
po11nn0500_e4a47a99f1ac  -- JA4H, AS200651 (FLOKINET), source 185.100.87.136
ge11nn0500_2d30dc89d981  -- JA4H, AS214351 (FEMOIT), source 192.162.199.180
t13i1010h1_61a7ad8aa9b6_792d2c6655cb  -- JA4, AS198953 (PROTON66), source 176.120.22.43
po11nn18en_9a6afedbb443  -- JA4H, AS198953 (PROTON66), source 176.120.22.43
t13i1010h1_61a7ad8aa9b6_3a8073edd8ef  -- JA4, AS198953 (PROTON66), source 176.120.22.43
ge11nn0400_8b1ed2202073  -- JA4H, AS198953 (PROTON66), source 176.120.22.43
ge11cn06ru_b2fb244bb31f  -- JA4H, AS198953 (PROTON66), source 176.120.22.43
po11nn0500_63d29dec8e1d  -- JA4H, AS198953 (PROTON66), source 176.120.22.43
ge11nn05en_3bd45b6f184e  -- JA4H, AS198953 (PROTON66), source 176.120.22.43

# Cross-run correlations
t13i1909h2_9dc949149365_97f8aa674fd9  -- beacon family: FLOKINET 185.100.87.136 (prior weeks) AND AEZA 147.45.71.214 (this week)