1 files changed, 75 insertions, 0 deletions
diff --git a/kevlar/2026-09-07/honeylabs/top-attackers-ip-AS198953.json b/kevlar/2026-09-07/honeylabs/top-attackers-ip-AS198953.json
new file mode 100644
index 0000000..fb76840
--- /dev/null
+++ b/kevlar/2026-09-07/honeylabs/top-attackers-ip-AS198953.json
@@ -0,0 +1,75 @@
+[
+ {
+  "value": "::ffff:176.120.22.61",
+  "event_count": 1597,
+  "unique_ips": 1,
+  "first_seen": "2026-08-31T09:44:36",
+  "last_seen": "2026-09-04T10:20:48",
+  "top_ports": [
+   11433,
+   14331,
+   14330,
+   35366,
+   37628
+  ],
+  "countries": [
+   "RU"
+  ],
+  "asn_org": "Proton66 OOO",
+  "asn_number": 198953,
+  "country_name": "Russia"
+ },
+ {
+  "value": "::ffff:176.120.22.240",
+  "event_count": 45,
+  "unique_ips": 1,
+  "first_seen": "2026-09-01T05:50:24",
+  "last_seen": "2026-09-06T14:40:21",
+  "top_ports": [
+   4443,
+   8443,
+   10443
+  ],
+  "countries": [
+   "RU"
+  ],
+  "asn_org": "Proton66 OOO",
+  "asn_number": 198953,
+  "country_name": "Russia"
+ },
+ {
+  "value": "::ffff:193.143.1.66",
+  "event_count": 24,
+  "unique_ips": 1,
+  "first_seen": "2026-08-31T18:27:14",
+  "last_seen": "2026-09-04T21:27:35",
+  "top_ports": [
+   3389,
+   3384,
+   3349,
+   33894
+  ],
+  "countries": [
+   "RU"
+  ],
+  "asn_org": "Proton66 OOO",
+  "asn_number": 198953,
+  "country_name": "Russia"
+ },
+ {
+  "value": "::ffff:176.120.22.147",
+  "event_count": 3,
+  "unique_ips": 1,
+  "first_seen": "2026-09-03T02:10:02",
+  "last_seen": "2026-09-03T02:11:21",
+  "top_ports": [
+   8006
+  ],
+  "countries": [
+   "RU"
+  ],
+  "asn_org": "Proton66 OOO",
+  "asn_number": 198953,
+  "country_name": "Russia"
+ }
+]
+\ No newline at end of file