chore: weekly BPH updateHEADmain

1 files changed, 254 insertions, 0 deletions

diff --git a/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS51396.json b/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS51396.json
new file mode 100644
index 0000000..933fc46
--- /dev/null
+++ b/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS51396.json
@@ -0,0 +1,254 @@
+[
+ {
+  "value": "Go-http-client/1.1",
+  "event_count": 372,
+  "unique_ips": 5,
+  "first_seen": "2026-08-31T00:35:35",
+  "last_seen": "2026-09-06T23:47:43",
+  "top_ports": [
+   4550,
+   4747,
+   222,
+   8000,
+   11434
+  ],
+  "countries": [
+   "NL",
+   "DE"
+  ]
+ },
+ {
+  "value": "0day",
+  "event_count": 200,
+  "unique_ips": 1,
+  "first_seen": "2026-08-31T01:11:46",
+  "last_seen": "2026-09-06T07:38:01",
+  "top_ports": [
+   8181,
+   8080,
+   18080,
+   18088,
+   8888
+  ],
+  "countries": [
+   "DE"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36",
+  "event_count": 126,
+  "unique_ips": 1,
+  "first_seen": "2026-08-31T02:03:10",
+  "last_seen": "2026-09-06T17:30:01",
+  "top_ports": [
+   80,
+   443,
+   8500,
+   8090,
+   3000
+  ],
+  "countries": [
+   "NL"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 zgrab/0.x",
+  "event_count": 95,
+  "unique_ips": 5,
+  "first_seen": "2026-08-31T00:50:18",
+  "last_seen": "2026-09-06T21:26:21",
+  "top_ports": [
+   8000,
+   8001,
+   443,
+   9000,
+   88
+  ],
+  "countries": [
+   "NL"
+  ]
+ },
+ {
+  "value": "kubo-probe/1.0",
+  "event_count": 12,
+  "unique_ips": 1,
+  "first_seen": "2026-08-31T11:11:43",
+  "last_seen": "2026-09-02T16:28:23",
+  "top_ports": [
+   5001,
+   8080
+  ],
+  "countries": [
+   "DE"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36",
+  "event_count": 10,
+  "unique_ips": 1,
+  "first_seen": "2026-08-31T10:08:26",
+  "last_seen": "2026-09-05T08:05:52",
+  "top_ports": [
+   80
+  ],
+  "countries": [
+   "NL"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36",
+  "event_count": 6,
+  "unique_ips": 1,
+  "first_seen": "2026-09-05T12:54:20",
+  "last_seen": "2026-09-05T13:26:20",
+  "top_ports": [
+   8090
+  ],
+  "countries": [
+   "NL"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36",
+  "event_count": 4,
+  "unique_ips": 1,
+  "first_seen": "2026-09-01T09:55:22",
+  "last_seen": "2026-09-02T01:32:40",
+  "top_ports": [
+   80
+  ],
+  "countries": [
+   "NL"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15",
+  "event_count": 1,
+  "unique_ips": 1,
+  "first_seen": "2026-09-01T10:40:15",
+  "last_seen": "2026-09-01T10:40:15",
+  "top_ports": [
+   443
+  ],
+  "countries": [
+   "UA"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15",
+  "event_count": 1,
+  "unique_ips": 1,
+  "first_seen": "2026-09-01T06:45:24",
+  "last_seen": "2026-09-01T06:45:24",
+  "top_ports": [
+   443
+  ],
+  "countries": [
+   "UA"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36",
+  "event_count": 1,
+  "unique_ips": 1,
+  "first_seen": "2026-08-31T07:27:42",
+  "last_seen": "2026-08-31T07:27:42",
+  "top_ports": [
+   443
+  ],
+  "countries": [
+   "UA"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36",
+  "event_count": 1,
+  "unique_ips": 1,
+  "first_seen": "2026-08-31T09:52:59",
+  "last_seen": "2026-08-31T09:52:59",
+  "top_ports": [
+   443
+  ],
+  "countries": [
+   "UA"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246",
+  "event_count": 1,
+  "unique_ips": 1,
+  "first_seen": "2026-09-03T10:27:07",
+  "last_seen": "2026-09-03T10:27:07",
+  "top_ports": [
+   8080
+  ],
+  "countries": [
+   "NL"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36",
+  "event_count": 1,
+  "unique_ips": 1,
+  "first_seen": "2026-08-31T18:59:50",
+  "last_seen": "2026-08-31T18:59:50",
+  "top_ports": [
+   443
+  ],
+  "countries": [
+   "UA"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0",
+  "event_count": 1,
+  "unique_ips": 1,
+  "first_seen": "2026-09-01T07:30:45",
+  "last_seen": "2026-09-01T07:30:45",
+  "top_ports": [
+   443
+  ],
+  "countries": [
+   "UA"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/19.0 Safari/605.1.15",
+  "event_count": 1,
+  "unique_ips": 1,
+  "first_seen": "2026-08-31T07:08:42",
+  "last_seen": "2026-08-31T07:08:42",
+  "top_ports": [
+   443
+  ],
+  "countries": [
+   "UA"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15 AlohaBrowser/7.6.0",
+  "event_count": 1,
+  "unique_ips": 1,
+  "first_seen": "2026-08-31T19:29:52",
+  "last_seen": "2026-08-31T19:29:52",
+  "top_ports": [
+   443
+  ],
+  "countries": [
+   "UA"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.17",
+  "event_count": 1,
+  "unique_ips": 1,
+  "first_seen": "2026-08-31T22:17:09",
+  "last_seen": "2026-08-31T22:17:09",
+  "top_ports": [
+   443
+  ],
+  "countries": [
+   "UA"
+  ]
+ }
+]
\ No newline at end of file