1 files changed, 57 insertions, 0 deletions
diff --git a/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS51852.json b/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS51852.json
new file mode 100644
index 0000000..28cef53
--- /dev/null
+++ b/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS51852.json
@@ -0,0 +1,57 @@
+[
+ {
+  "value": "Mozilla/5.0",
+  "event_count": 19,
+  "unique_ips": 2,
+  "first_seen": "2026-08-31T15:32:52",
+  "last_seen": "2026-09-04T19:27:10",
+  "top_ports": [
+   8443,
+   2087
+  ],
+  "countries": [
+   "CH"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/125 Safari/537.36",
+  "event_count": 3,
+  "unique_ips": 1,
+  "first_seen": "2026-09-01T12:06:48",
+  "last_seen": "2026-09-01T12:06:54",
+  "top_ports": [
+   80,
+   443
+  ],
+  "countries": [
+   "CH"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)",
+  "event_count": 3,
+  "unique_ips": 1,
+  "first_seen": "2026-09-04T18:34:20",
+  "last_seen": "2026-09-04T19:27:10",
+  "top_ports": [
+   2087
+  ],
+  "countries": [
+   "CH"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0",
+  "event_count": 2,
+  "unique_ips": 1,
+  "first_seen": "2026-09-01T07:55:46",
+  "last_seen": "2026-09-02T18:13:22",
+  "top_ports": [
+   32400,
+   8085
+  ],
+  "countries": [
+   "CH"
+  ]
+ }
+]
+\ No newline at end of file