feat: update bph iocs

1 files changed, 15 insertions, 0 deletions

diff --git a/kevlar/2026-08-10/honeylabs/events-AS51396.ndjson b/kevlar/2026-08-10/honeylabs/events-AS51396.ndjson
new file mode 100644
index 0000000..bc5b3ad
--- /dev/null
+++ b/kevlar/2026-08-10/honeylabs/events-AS51396.ndjson
@@ -0,0 +1,15 @@
+{"timestamp":"2026-08-09T23:53:23","source_ip":"176.65.149.212","asn_number":51396,"asn_org":"Pfcloud UG","dest_port":7396,"application_protocol":"ssh","event_summary":"SSH-2.0-OpenSSH"}
+{"timestamp":"2026-08-09T23:45:57","source_ip":"176.65.149.55","asn_number":51396,"asn_org":"Pfcloud UG","dest_port":25435,"application_protocol":"ssh","event_summary":"SSH-2.0-OpenSSH"}
+{"timestamp":"2026-08-09T23:30:10","source_ip":"176.65.134.3","asn_number":51396,"asn_org":"Pfcloud UG","dest_port":11089,"application_protocol":"http_connect","event_summary":"CONNECT 185.65.245.10:7227 python-socks/2.3.0"}
+{"timestamp":"2026-08-09T23:23:07","source_ip":"45.135.193.193","asn_number":51396,"asn_org":"Pfcloud UG","dest_port":8888,"application_protocol":"http_connect","event_summary":"CONNECT httpbin.org:443"}
+{"timestamp":"2026-08-09T22:30:29","source_ip":"45.135.194.113","asn_number":51396,"asn_org":"Pfcloud UG","dest_port":8019,"application_protocol":"http_proxy","user_agent":"Go-http-client/1.1","url_path":"http://proxy.flarevpn.digital:8080/judge","http_request_ja4h":"ge11nn0400_9c3956fad5da"}
+{"timestamp":"2026-08-09T22:30:28","source_ip":"45.135.194.113","asn_number":51396,"asn_org":"Pfcloud UG","dest_port":8019,"application_protocol":"socks5","event_summary":"SOCKS5"}
+{"timestamp":"2026-08-09T22:29:56","source_ip":"45.135.194.99","asn_number":51396,"asn_org":"Pfcloud UG","dest_port":3128,"application_protocol":"google","event_summary":"CONNECT google.com:443 Go-http-client/1.1"}
+{"timestamp":"2026-08-09T22:17:56","source_ip":"176.65.148.2","asn_number":51396,"asn_org":"Pfcloud UG","dest_port":999,"application_protocol":"http_connect","event_summary":"CONNECT 185.65.245.10:7227 python-socks/2.3.0"}
+{"timestamp":"2026-08-09T21:56:25","source_ip":"176.65.149.236","asn_number":51396,"asn_org":"Pfcloud UG","dest_port":82,"application_protocol":"http","user_agent":"Mozilla/5.0 zgrab/0.x","http_request_ja4h":"ge11nn0400_88d30a62b7ad"}
+{"timestamp":"2026-08-09T20:01:21","source_ip":"176.65.148.142","asn_number":51396,"asn_org":"Pfcloud UG","dest_port":3001,"application_protocol":"http_proxy","url_path":"http://169.254.169.254/latest/user-data","http_request_ja4h":"ge11nn0500_795d05eb4583"}
+{"timestamp":"2026-08-09T20:00:54","source_ip":"176.65.148.142","asn_number":51396,"asn_org":"Pfcloud UG","dest_port":3001,"application_protocol":"http_proxy","url_path":"http://169.254.169.254/latest/user-data","http_request_ja4h":"ge11nn0200_f24fcf356134"}
+{"timestamp":"2026-08-09T19:47:08","source_ip":"45.135.194.31","asn_number":51396,"asn_org":"Pfcloud UG","dest_port":3001,"application_protocol":"http","user_agent":"Mozilla/5.0 zgrab/0.x","url_path":"/src/universalTouchGamepad.js","http_request_ja4h":"ge11nn0400_88d30a62b7ad"}
+{"timestamp":"2026-08-09T20:42:47","source_ip":"176.65.148.153","asn_number":51396,"asn_org":"Pfcloud UG","dest_port":3389,"application_protocol":"rdp","event_summary":"RDP mstshash=Test"}
+{"timestamp":"2026-08-09T18:26:01","source_ip":"176.65.148.58","asn_number":51396,"asn_org":"Pfcloud UG","dest_port":8069,"application_protocol":"http","user_agent":"odin-scanner/0.4","http_request_ja4h":"ge10nn0400_17292dadbc7b"}
+{"timestamp":"2026-08-09T17:30:45","source_ip":"176.65.149.182","asn_number":51396,"asn_org":"Pfcloud UG","dest_port":8880,"application_protocol":"http_connect","event_summary":"CONNECT ipv4-internet.yandex.net:443"}