1 files changed, 55 insertions, 0 deletions
diff --git a/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS14956.json b/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS14956.json
new file mode 100644
index 0000000..70c1586
--- /dev/null
+++ b/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS14956.json
@@ -0,0 +1,55 @@
+[
+ {
+  "value": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0",
+  "event_count": 4,
+  "unique_ips": 1,
+  "first_seen": "2026-09-03T06:47:31",
+  "last_seen": "2026-09-04T19:38:08",
+  "top_ports": [
+   2095,
+   8008
+  ],
+  "countries": [
+   "US"
+  ]
+ },
+ {
+  "value": "Python-urllib/3.13",
+  "event_count": 1,
+  "unique_ips": 1,
+  "first_seen": "2026-09-06T15:51:16",
+  "last_seen": "2026-09-06T15:51:16",
+  "top_ports": [
+   443
+  ],
+  "countries": [
+   "US"
+  ]
+ },
+ {
+  "value": "Python/3.13 aiohttp/3.13.5",
+  "event_count": 1,
+  "unique_ips": 1,
+  "first_seen": "2026-09-03T17:01:38",
+  "last_seen": "2026-09-03T17:01:38",
+  "top_ports": [
+   7860
+  ],
+  "countries": [
+   "US"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36",
+  "event_count": 1,
+  "unique_ips": 1,
+  "first_seen": "2026-09-02T02:45:38",
+  "last_seen": "2026-09-02T02:45:38",
+  "top_ports": [
+   443
+  ],
+  "countries": [
+   "US"
+  ]
+ }
+]
+\ No newline at end of file