diff options
| author | hrbrmstr <bob@rud.is> | 2026-09-07 06:03:32 -0400 |
|---|---|---|
| committer | hrbrmstr <bob@rud.is> | 2026-09-07 06:23:41 -0400 |
| commit | de4c2e99a969eb10708b02d8f2b6f31495eacce8 (patch) | |
| tree | ff5be97683e9dbf19ec0387f3a03a90282477dd2 /kevlar/2026-09-07/honeylabs/top-ips-all.json | |
| parent | c283bcc507b0a7946a8660677a04da6f53cc77e1 (diff) | |
Diffstat (limited to 'kevlar/2026-09-07/honeylabs/top-ips-all.json')
| -rw-r--r-- | kevlar/2026-09-07/honeylabs/top-ips-all.json | 941 |
1 files changed, 941 insertions, 0 deletions
diff --git a/kevlar/2026-09-07/honeylabs/top-ips-all.json b/kevlar/2026-09-07/honeylabs/top-ips-all.json new file mode 100644 index 0000000..bb90954 --- /dev/null +++ b/kevlar/2026-09-07/honeylabs/top-ips-all.json @@ -0,0 +1,941 @@ +[ + { + "asn": "AS57043", + "name": "HOSTKEY-AS", + "value": "::ffff:163.5.16.6", + "event_count": 8, + "unique_ips": 1, + "first_seen": "2026-09-02T21:02:40", + "last_seen": "2026-09-02T21:19:46", + "top_ports": [ + 19571, + 44981, + 14603, + 5070, + 20271 + ], + "countries": [ + "GB" + ], + "asn_org": "Hostkey B.v.", + "asn_number": 57043, + "country_name": "United Kingdom" + }, + { + "asn": "AS57043", + "name": "HOSTKEY-AS", + "value": "::ffff:82.39.165.100", + "event_count": 4, + "unique_ips": 1, + "first_seen": "2026-08-31T15:39:39", + "last_seen": "2026-09-03T03:47:57", + "top_ports": [ + 22 + ], + "countries": [ + "DE" + ], + "asn_org": "Hostkey B.v.", + "asn_number": 57043, + "country_name": "Germany" + }, + { + "asn": "AS210644", + "name": "AEZA-AS", + "value": "::ffff:185.246.217.150", + "event_count": 51, + "unique_ips": 1, + "first_seen": "2026-08-31T22:44:34", + "last_seen": "2026-09-02T15:29:27", + "top_ports": [ + 443, + 2222, + 2375 + ], + "countries": [ + "NL" + ], + "asn_org": "Aeza Group LLC", + "asn_number": 210644, + "country_name": "The Netherlands" + }, + { + "asn": "AS14956", + "name": "ROUTERHOSTING", + "value": "::ffff:45.61.157.82", + "event_count": 32, + "unique_ips": 1, + "first_seen": "2026-09-04T01:15:12", + "last_seen": "2026-09-04T06:30:09", + "top_ports": [ + 445 + ], + "countries": [ + "US" + ], + "asn_org": "RouterHosting LLC", + "asn_number": 14956, + "country_name": "United States" + }, + { + "asn": "AS14956", + "name": "ROUTERHOSTING", + "value": "::ffff:144.172.108.79", + "event_count": 24, + "unique_ips": 1, + "first_seen": "2026-09-04T20:02:59", + "last_seen": "2026-09-05T02:54:19", + "top_ports": [ + 445 + ], + "countries": [ + "US" + ], + "asn_org": "RouterHosting LLC", + "asn_number": 14956, + "country_name": "United States" + }, + { + "asn": "AS14956", + "name": "ROUTERHOSTING", + "value": "::ffff:144.172.99.200", + "event_count": 16, + "unique_ips": 1, + "first_seen": "2026-09-01T07:55:37", + "last_seen": "2026-09-01T08:57:36", + "top_ports": [ + 445 + ], + "countries": [ + "US" + ], + "asn_org": "RouterHosting LLC", + "asn_number": 14956, + "country_name": "United States" + }, + { + "asn": "AS14956", + "name": "ROUTERHOSTING", + "value": "::ffff:216.126.239.215", + "event_count": 8, + "unique_ips": 1, + "first_seen": "2026-09-06T00:12:30", + "last_seen": "2026-09-06T00:12:34", + "top_ports": [ + 445 + ], + "countries": [ + "US" + ], + "asn_org": "RouterHosting LLC", + "asn_number": 14956, + "country_name": "United States" + }, + { + "asn": "AS14956", + "name": "ROUTERHOSTING", + "value": "::ffff:45.61.183.10", + "event_count": 4, + "unique_ips": 1, + "first_seen": "2026-09-06T01:13:05", + "last_seen": "2026-09-06T06:25:29", + "top_ports": [ + 445 + ], + "countries": [ + "US" + ], + "asn_org": "RouterHosting LLC", + "asn_number": 14956, + "country_name": "United States" + }, + { + "asn": "AS14956", + "name": "ROUTERHOSTING", + "value": "::ffff:167.88.168.121", + "event_count": 4, + "unique_ips": 1, + "first_seen": "2026-09-03T06:47:31", + "last_seen": "2026-09-04T19:38:08", + "top_ports": [ + 2095, + 8008 + ], + "countries": [ + "US" + ], + "asn_org": "RouterHosting LLC", + "asn_number": 14956, + "country_name": "United States" + }, + { + "asn": "AS14956", + "name": "ROUTERHOSTING", + "value": "::ffff:144.172.112.11", + "event_count": 2, + "unique_ips": 1, + "first_seen": "2026-09-04T18:11:24", + "last_seen": "2026-09-04T18:11:24", + "top_ports": [ + 445 + ], + "countries": [ + "US" + ], + "asn_org": "RouterHosting LLC", + "asn_number": 14956, + "country_name": "United States" + }, + { + "asn": "AS14956", + "name": "ROUTERHOSTING", + "value": "::ffff:144.172.100.114", + "event_count": 1, + "unique_ips": 1, + "first_seen": "2026-09-02T07:32:32", + "last_seen": "2026-09-02T07:32:32", + "top_ports": [ + 1723 + ], + "countries": [ + "US" + ], + "asn_org": "RouterHosting LLC", + "asn_number": 14956, + "country_name": "United States" + }, + { + "asn": "AS14956", + "name": "ROUTERHOSTING", + "value": "::ffff:144.172.99.12", + "event_count": 1, + "unique_ips": 1, + "first_seen": "2026-09-02T02:45:38", + "last_seen": "2026-09-02T02:45:38", + "top_ports": [ + 443 + ], + "countries": [ + "US" + ], + "asn_org": "RouterHosting LLC", + "asn_number": 14956, + "country_name": "United States" + }, + { + "asn": "AS14956", + "name": "ROUTERHOSTING", + "value": "::ffff:45.61.149.189", + "event_count": 1, + "unique_ips": 1, + "first_seen": "2026-09-06T15:51:16", + "last_seen": "2026-09-06T15:51:16", + "top_ports": [ + 443 + ], + "countries": [ + "US" + ], + "asn_org": "RouterHosting LLC", + "asn_number": 14956, + "country_name": "United States" + }, + { + "asn": "AS14956", + "name": "ROUTERHOSTING", + "value": "::ffff:216.126.227.187", + "event_count": 1, + "unique_ips": 1, + "first_seen": "2026-09-03T17:01:38", + "last_seen": "2026-09-03T17:01:38", + "top_ports": [ + 7860 + ], + "countries": [ + "US" + ], + "asn_org": "RouterHosting LLC", + "asn_number": 14956, + "country_name": "United States" + }, + { + "asn": "AS14956", + "name": "ROUTERHOSTING", + "value": "::ffff:144.172.115.222", + "event_count": 1, + "unique_ips": 1, + "first_seen": "2026-09-01T09:05:26", + "last_seen": "2026-09-01T09:05:26", + "top_ports": [ + 5061 + ], + "countries": [ + "US" + ], + "asn_org": "RouterHosting LLC", + "asn_number": 14956, + "country_name": "United States" + }, + { + "asn": "AS51852", + "name": "PLI-AS", + "value": "::ffff:179.43.150.26", + "event_count": 16, + "unique_ips": 1, + "first_seen": "2026-08-31T15:32:52", + "last_seen": "2026-08-31T16:49:55", + "top_ports": [ + 8443 + ], + "countries": [ + "CH" + ], + "asn_org": "Private Layer INC", + "asn_number": 51852, + "country_name": "Switzerland" + }, + { + "asn": "AS51852", + "name": "PLI-AS", + "value": "::ffff:46.19.142.226", + "event_count": 6, + "unique_ips": 1, + "first_seen": "2026-09-04T18:34:20", + "last_seen": "2026-09-04T19:27:10", + "top_ports": [ + 2087 + ], + "countries": [ + "CH" + ], + "asn_org": "Private Layer INC", + "asn_number": 51852, + "country_name": "Switzerland" + }, + { + "asn": "AS51852", + "name": "PLI-AS", + "value": "::ffff:141.255.165.66", + "event_count": 5, + "unique_ips": 1, + "first_seen": "2026-09-03T20:48:30", + "last_seen": "2026-09-04T11:46:33", + "top_ports": [ + 1723 + ], + "countries": [ + "CH" + ], + "asn_org": "Private Layer INC", + "asn_number": 51852, + "country_name": "Switzerland" + }, + { + "asn": "AS51852", + "name": "PLI-AS", + "value": "::ffff:179.43.186.220", + "event_count": 3, + "unique_ips": 1, + "first_seen": "2026-09-01T12:06:48", + "last_seen": "2026-09-01T12:06:54", + "top_ports": [ + 80, + 443 + ], + "countries": [ + "CH" + ], + "asn_org": "Private Layer INC", + "asn_number": 51852, + "country_name": "Switzerland" + }, + { + "asn": "AS51852", + "name": "PLI-AS", + "value": "::ffff:179.43.146.27", + "event_count": 2, + "unique_ips": 1, + "first_seen": "2026-09-01T07:55:46", + "last_seen": "2026-09-02T18:13:22", + "top_ports": [ + 32400, + 8085 + ], + "countries": [ + "CH" + ], + "asn_org": "Private Layer INC", + "asn_number": 51852, + "country_name": "Switzerland" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:204.76.203.222", + "event_count": 1159, + "unique_ips": 1, + "first_seen": "2026-09-02T09:47:23", + "last_seen": "2026-09-06T23:43:17", + "top_ports": [ + 6128, + 11238, + 10803, + 11148, + 11415 + ], + "countries": [ + "NL" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "The Netherlands" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:204.76.203.221", + "event_count": 1154, + "unique_ips": 1, + "first_seen": "2026-09-02T09:47:23", + "last_seen": "2026-09-06T23:57:44", + "top_ports": [ + 11587, + 10231, + 13246, + 31280, + 1083 + ], + "countries": [ + "NL" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "The Netherlands" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:204.76.203.213", + "event_count": 1123, + "unique_ips": 1, + "first_seen": "2026-09-02T09:53:18", + "last_seen": "2026-09-06T23:40:09", + "top_ports": [ + 5112, + 3385, + 10140, + 50012, + 11644 + ], + "countries": [ + "NL" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "The Netherlands" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:204.76.203.214", + "event_count": 1091, + "unique_ips": 1, + "first_seen": "2026-09-02T09:48:01", + "last_seen": "2026-09-06T23:57:44", + "top_ports": [ + 10119, + 21698, + 11100, + 15120, + 10006 + ], + "countries": [ + "NL" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "The Netherlands" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:204.76.203.49", + "event_count": 836, + "unique_ips": 1, + "first_seen": "2026-08-31T00:54:43", + "last_seen": "2026-09-06T22:29:18", + "top_ports": [ + 8080, + 1081, + 888, + 8888, + 4145 + ], + "countries": [ + "NL" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "The Netherlands" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:176.65.148.153", + "event_count": 453, + "unique_ips": 1, + "first_seen": "2026-09-01T22:14:32", + "last_seen": "2026-09-04T09:28:19", + "top_ports": [ + 3389, + 3318, + 3324, + 3349, + 3372 + ], + "countries": [ + "NL" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "The Netherlands" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:204.76.203.7", + "event_count": 446, + "unique_ips": 1, + "first_seen": "2026-08-31T00:35:35", + "last_seen": "2026-09-03T00:22:11", + "top_ports": [ + 24575, + 24001, + 24444, + 20129, + 20119 + ], + "countries": [ + "NL" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "The Netherlands" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:45.135.193.193", + "event_count": 400, + "unique_ips": 1, + "first_seen": "2026-08-31T11:30:54", + "last_seen": "2026-09-06T23:26:34", + "top_ports": [ + 8888, + 3128, + 81, + 80, + 8080 + ], + "countries": [ + "DE" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "Germany" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:45.135.194.113", + "event_count": 220, + "unique_ips": 1, + "first_seen": "2026-08-31T01:05:13", + "last_seen": "2026-09-06T21:38:43", + "top_ports": [ + 666, + 555, + 8888, + 90, + 8000 + ], + "countries": [ + "DE" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "Germany" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:45.135.193.198", + "event_count": 200, + "unique_ips": 1, + "first_seen": "2026-08-31T01:11:46", + "last_seen": "2026-09-06T07:38:01", + "top_ports": [ + 8181, + 8080, + 18080, + 9999, + 8000 + ], + "countries": [ + "DE" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "Germany" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:176.65.148.226", + "event_count": 126, + "unique_ips": 1, + "first_seen": "2026-08-31T02:03:10", + "last_seen": "2026-09-06T17:30:01", + "top_ports": [ + 80, + 443, + 8500, + 8090, + 3000 + ], + "countries": [ + "NL" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "The Netherlands" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:176.65.149.212", + "event_count": 106, + "unique_ips": 1, + "first_seen": "2026-08-31T00:00:25", + "last_seen": "2026-09-06T23:04:39", + "top_ports": [ + 7994, + 7993, + 7990, + 8010, + 8016 + ], + "countries": [ + "NL" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "The Netherlands" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:176.65.149.27", + "event_count": 102, + "unique_ips": 1, + "first_seen": "2026-08-31T00:56:02", + "last_seen": "2026-09-06T23:58:26", + "top_ports": [ + 38002, + 38026, + 38000, + 38020, + 38001 + ], + "countries": [ + "NL" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "The Netherlands" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:176.65.149.31", + "event_count": 99, + "unique_ips": 1, + "first_seen": "2026-08-31T01:21:26", + "last_seen": "2026-09-06T23:32:25", + "top_ports": [ + 1883, + 1908, + 1906, + 1897, + 1905 + ], + "countries": [ + "NL" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "The Netherlands" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:176.65.149.30", + "event_count": 89, + "unique_ips": 1, + "first_seen": "2026-08-31T00:39:52", + "last_seen": "2026-09-06T22:50:28", + "top_ports": [ + 31975, + 32019, + 31973, + 31974, + 32017 + ], + "countries": [ + "NL" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "The Netherlands" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:176.65.148.93", + "event_count": 67, + "unique_ips": 1, + "first_seen": "2026-09-01T07:37:27", + "last_seen": "2026-09-06T22:49:21", + "top_ports": [ + 1082, + 1085, + 1080, + 1094, + 1079 + ], + "countries": [ + "NL" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "The Netherlands" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:176.65.149.236", + "event_count": 62, + "unique_ips": 1, + "first_seen": "2026-08-31T05:44:55", + "last_seen": "2026-09-06T21:26:21", + "top_ports": [ + 8000, + 9000, + 82, + 88, + 443 + ], + "countries": [ + "NL" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "The Netherlands" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:204.76.203.4", + "event_count": 51, + "unique_ips": 1, + "first_seen": "2026-08-31T00:03:33", + "last_seen": "2026-08-31T11:42:35", + "top_ports": [ + 25564, + 25566, + 25565 + ], + "countries": [ + "NL" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "The Netherlands" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:176.65.148.156", + "event_count": 51, + "unique_ips": 1, + "first_seen": "2026-08-31T15:53:23", + "last_seen": "2026-09-05T11:36:49", + "top_ports": [ + 25565 + ], + "countries": [ + "NL" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "The Netherlands" + }, + { + "asn": "AS51396", + "name": "PFCLOUD", + "value": "::ffff:176.65.134.48", + "event_count": 48, + "unique_ips": 1, + "first_seen": "2026-09-05T04:30:55", + "last_seen": "2026-09-06T23:47:43", + "top_ports": [ + 4550, + 4747, + 4700, + 4646, + 4567 + ], + "countries": [ + "DE" + ], + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "asn_number": 51396, + "country_name": "Germany" + }, + { + "asn": "AS216246", + "name": "RU-AEZA-AS", + "value": "::ffff:176.124.222.61", + "event_count": 1, + "unique_ips": 1, + "first_seen": "2026-08-31T13:15:24", + "last_seen": "2026-08-31T13:15:24", + "top_ports": [ + 5432 + ], + "countries": [ + "RU" + ], + "asn_org": "Aeza Group LLC", + "asn_number": 216246, + "country_name": "Russia" + }, + { + "asn": "AS216246", + "name": "RU-AEZA-AS", + "value": "::ffff:45.151.101.38", + "event_count": 1, + "unique_ips": 1, + "first_seen": "2026-09-03T20:05:03", + "last_seen": "2026-09-03T20:05:03", + "top_ports": [ + 8006 + ], + "countries": [ + "RU" + ], + "asn_org": "Aeza Group LLC", + "asn_number": 216246, + "country_name": "Russia" + }, + { + "asn": "AS200651", + "name": "FLOKINET", + "value": "::ffff:185.100.87.136", + "event_count": 24, + "unique_ips": 1, + "first_seen": "2026-08-31T01:12:02", + "last_seen": "2026-09-06T22:18:29", + "top_ports": [ + 443, + 8443 + ], + "countries": [ + "RO" + ], + "asn_org": "FlokiNET ehf", + "asn_number": 200651, + "country_name": "Romania" + }, + { + "asn": "AS198953", + "name": "PROTON66", + "value": "::ffff:176.120.22.61", + "event_count": 1597, + "unique_ips": 1, + "first_seen": "2026-08-31T09:44:36", + "last_seen": "2026-09-04T10:20:48", + "top_ports": [ + 11433, + 14331, + 14330, + 35366, + 37628 + ], + "countries": [ + "RU" + ], + "asn_org": "Proton66 OOO", + "asn_number": 198953, + "country_name": "Russia" + }, + { + "asn": "AS198953", + "name": "PROTON66", + "value": "::ffff:176.120.22.240", + "event_count": 45, + "unique_ips": 1, + "first_seen": "2026-09-01T05:50:24", + "last_seen": "2026-09-06T14:40:21", + "top_ports": [ + 4443, + 8443, + 10443 + ], + "countries": [ + "RU" + ], + "asn_org": "Proton66 OOO", + "asn_number": 198953, + "country_name": "Russia" + }, + { + "asn": "AS198953", + "name": "PROTON66", + "value": "::ffff:193.143.1.66", + "event_count": 24, + "unique_ips": 1, + "first_seen": "2026-08-31T18:27:14", + "last_seen": "2026-09-04T21:27:35", + "top_ports": [ + 3389, + 3384, + 3349, + 33894 + ], + "countries": [ + "RU" + ], + "asn_org": "Proton66 OOO", + "asn_number": 198953, + "country_name": "Russia" + }, + { + "asn": "AS198953", + "name": "PROTON66", + "value": "::ffff:176.120.22.147", + "event_count": 3, + "unique_ips": 1, + "first_seen": "2026-09-03T02:10:02", + "last_seen": "2026-09-03T02:11:21", + "top_ports": [ + 8006 + ], + "countries": [ + "RU" + ], + "asn_org": "Proton66 OOO", + "asn_number": 198953, + "country_name": "Russia" + } +]
\ No newline at end of file |