From de4c2e99a969eb10708b02d8f2b6f31495eacce8 Mon Sep 17 00:00:00 2001 From: hrbrmstr Date: Mon, 7 Sep 2026 06:03:32 -0400 Subject: chore: weekly BPH update --- .../honeylabs/top-attackers-ua-AS51396.json | 254 +++++++++++++++++++++ 1 file changed, 254 insertions(+) create mode 100644 kevlar/2026-09-07/honeylabs/top-attackers-ua-AS51396.json (limited to 'kevlar/2026-09-07/honeylabs/top-attackers-ua-AS51396.json') diff --git a/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS51396.json b/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS51396.json new file mode 100644 index 0000000..933fc46 --- /dev/null +++ b/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS51396.json @@ -0,0 +1,254 @@ +[ + { + "value": "Go-http-client/1.1", + "event_count": 372, + "unique_ips": 5, + "first_seen": "2026-08-31T00:35:35", + "last_seen": "2026-09-06T23:47:43", + "top_ports": [ + 4550, + 4747, + 222, + 8000, + 11434 + ], + "countries": [ + "NL", + "DE" + ] + }, + { + "value": "0day", + "event_count": 200, + "unique_ips": 1, + "first_seen": "2026-08-31T01:11:46", + "last_seen": "2026-09-06T07:38:01", + "top_ports": [ + 8181, + 8080, + 18080, + 18088, + 8888 + ], + "countries": [ + "DE" + ] + }, + { + "value": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36", + "event_count": 126, + "unique_ips": 1, + "first_seen": "2026-08-31T02:03:10", + "last_seen": "2026-09-06T17:30:01", + "top_ports": [ + 80, + 443, + 8500, + 8090, + 3000 + ], + "countries": [ + "NL" + ] + }, + { + "value": "Mozilla/5.0 zgrab/0.x", + "event_count": 95, + "unique_ips": 5, + "first_seen": "2026-08-31T00:50:18", + "last_seen": "2026-09-06T21:26:21", + "top_ports": [ + 8000, + 8001, + 443, + 9000, + 88 + ], + "countries": [ + "NL" + ] + }, + { + "value": "kubo-probe/1.0", + "event_count": 12, + "unique_ips": 1, + "first_seen": "2026-08-31T11:11:43", + "last_seen": "2026-09-02T16:28:23", + "top_ports": [ + 5001, + 8080 + ], + "countries": [ + "DE" + ] + }, + { + "value": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36", + "event_count": 10, + "unique_ips": 1, + "first_seen": "2026-08-31T10:08:26", + "last_seen": "2026-09-05T08:05:52", + "top_ports": [ + 80 + ], + "countries": [ + "NL" + ] + }, + { + "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36", + "event_count": 6, + "unique_ips": 1, + "first_seen": "2026-09-05T12:54:20", + "last_seen": "2026-09-05T13:26:20", + "top_ports": [ + 8090 + ], + "countries": [ + "NL" + ] + }, + { + "value": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36", + "event_count": 4, + "unique_ips": 1, + "first_seen": "2026-09-01T09:55:22", + "last_seen": "2026-09-02T01:32:40", + "top_ports": [ + 80 + ], + "countries": [ + "NL" + ] + }, + { + "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15", + "event_count": 1, + "unique_ips": 1, + "first_seen": "2026-09-01T10:40:15", + "last_seen": "2026-09-01T10:40:15", + "top_ports": [ + 443 + ], + "countries": [ + "UA" + ] + }, + { + "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15", + "event_count": 1, + "unique_ips": 1, + "first_seen": "2026-09-01T06:45:24", + "last_seen": "2026-09-01T06:45:24", + "top_ports": [ + 443 + ], + "countries": [ + "UA" + ] + }, + { + "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36", + "event_count": 1, + "unique_ips": 1, + "first_seen": "2026-08-31T07:27:42", + "last_seen": "2026-08-31T07:27:42", + "top_ports": [ + 443 + ], + "countries": [ + "UA" + ] + }, + { + "value": "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36", + "event_count": 1, + "unique_ips": 1, + "first_seen": "2026-08-31T09:52:59", + "last_seen": "2026-08-31T09:52:59", + "top_ports": [ + 443 + ], + "countries": [ + "UA" + ] + }, + { + "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246", + "event_count": 1, + "unique_ips": 1, + "first_seen": "2026-09-03T10:27:07", + "last_seen": "2026-09-03T10:27:07", + "top_ports": [ + 8080 + ], + "countries": [ + "NL" + ] + }, + { + "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36", + "event_count": 1, + "unique_ips": 1, + "first_seen": "2026-08-31T18:59:50", + "last_seen": "2026-08-31T18:59:50", + "top_ports": [ + 443 + ], + "countries": [ + "UA" + ] + }, + { + "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0", + "event_count": 1, + "unique_ips": 1, + "first_seen": "2026-09-01T07:30:45", + "last_seen": "2026-09-01T07:30:45", + "top_ports": [ + 443 + ], + "countries": [ + "UA" + ] + }, + { + "value": "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/19.0 Safari/605.1.15", + "event_count": 1, + "unique_ips": 1, + "first_seen": "2026-08-31T07:08:42", + "last_seen": "2026-08-31T07:08:42", + "top_ports": [ + 443 + ], + "countries": [ + "UA" + ] + }, + { + "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15 AlohaBrowser/7.6.0", + "event_count": 1, + "unique_ips": 1, + "first_seen": "2026-08-31T19:29:52", + "last_seen": "2026-08-31T19:29:52", + "top_ports": [ + 443 + ], + "countries": [ + "UA" + ] + }, + { + "value": "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.17", + "event_count": 1, + "unique_ips": 1, + "first_seen": "2026-08-31T22:17:09", + "last_seen": "2026-08-31T22:17:09", + "top_ports": [ + 443 + ], + "countries": [ + "UA" + ] + } +] \ No newline at end of file -- cgit v1.2.3