feat: update bph iocs

1 files changed, 56 insertions, 0 deletions

diff --git a/kevlar/2026-08-17/honeylabs/top-attackers.csv b/kevlar/2026-08-17/honeylabs/top-attackers.csv
new file mode 100644
index 0000000..8c4baf5
--- /dev/null
+++ b/kevlar/2026-08-17/honeylabs/top-attackers.csv
@@ -0,0 +1,56 @@
+asn,ip,event_count,top_ports,country
+AS51396,204.76.203.224,2177,"3080,25000,9090,7081,8759",NL
+AS51396,204.76.203.226,2117,"9089,12010,1433,7443,8391",NL
+AS51396,204.76.203.225,2053,"11180,8390,3080,2054,50011",NL
+AS51396,204.76.203.73,2029,"1723,135,1580,6399,18120",NL
+AS51396,204.76.203.7,970,"64,69,10800,1036,161",NL
+AS51396,45.135.193.193,432,"8888,3128,8081,443,81",DE
+AS51396,45.135.194.113,376,"1085,1083,1082,1087,1080",DE
+AS51396,204.76.203.49,340,"10808,5678,10809,1081,4145",NL
+AS51396,204.76.203.222,264,"5050,5522,5477,5555,4443",NL
+AS51396,204.76.203.214,239,"7788,7777,5002,5001,6000",NL
+AS51396,204.76.203.221,235,"5555,5200,6688,7777,6001",NL
+AS51396,204.76.203.212,235,"4443,5520,6666,5477,5008",NL
+AS51396,204.76.203.213,233,"5104,6152,5103,6541,5001",NL
+AS51396,204.76.203.43,154,"80,82,8080,83,81",NL
+AS51396,176.65.149.27,106,"37548,37546,37545,37542,37543",NL
+AS51396,176.65.149.212,106,"7508,7507,7506,7504,7505",NL
+AS51396,176.65.149.31,106,"1471,1466,1464,1463,1465",NL
+AS51396,204.76.203.30,105,"3128,8080,3000,8443,9090",NL
+AS51396,176.65.149.30,100,"31528,31527,31515,31520,31516",NL
+AS51396,176.65.148.216,81,"25565",NL
+AS198953,176.120.22.61,1664,"33000,1437,43399,5433,6802",RU
+AS198953,176.120.22.240,18,"3389,6379,6380,23389",RU
+AS198953,193.143.1.66,9,"3389",RU
+AS51852,81.17.28.131,69,"8899,8089,135",CH
+AS51852,179.43.150.26,24,"80,8080",CH
+AS51852,179.43.185.147,6,"5985",CH
+AS51852,179.43.146.27,5,"1433,9000,20443,4433",CH
+AS51852,179.43.140.210,2,"443",CH
+AS51852,179.43.175.56,1,"2375",CH
+AS14956,172.86.91.225,24,"445",US
+AS14956,144.172.104.239,24,"25565",US
+AS14956,172.86.89.13,16,"445",US
+AS14956,216.126.224.182,11,"5061",US
+AS14956,172.86.117.139,10,"80",US
+AS14956,144.172.116.49,8,"445",US
+AS14956,172.86.119.138,8,"445",US
+AS14956,172.86.114.38,6,"25565",US
+AS14956,167.88.168.121,6,"14330,8888,8001,5432,1080",US
+AS14956,153.75.85.203,4,"80",NL
+AS14956,45.61.150.67,4,"443",US
+AS14956,216.126.239.150,3,"3389",US
+AS14956,144.172.99.148,2,"9200",US
+AS14956,144.172.101.79,2,"3389",US
+AS14956,144.172.107.146,2,"8888",US
+AS14956,216.126.236.232,1,"1723",US
+AS14956,107.189.22.104,1,"5060",NL
+AS14956,172.86.123.118,1,"9401",US
+AS14956,107.189.17.174,1,"5060",NL
+AS14956,153.75.94.130,1,"5060",SG
+AS138915,154.93.53.239,1,"5985",SC
+AS214940,77.83.39.6,13,"443",UA
+AS214940,77.83.39.94,3,"443",UA
+AS57043,193.247.77.84,3,"9443,4434,60443",DE
+AS200651,185.100.87.136,7,"443,8080",RO
+AS200651,185.146.234.64,1,"3389",IS