From de4c2e99a969eb10708b02d8f2b6f31495eacce8 Mon Sep 17 00:00:00 2001
From: hrbrmstr <bob@rud.is>
Date: Mon, 7 Sep 2026 06:03:32 -0400
Subject: chore: weekly BPH update

---
 .../honeylabs/top-attackers-ua-AS200651.json       | 67 ++++++++++++++++++++++
 1 file changed, 67 insertions(+)
 create mode 100644 kevlar/2026-09-07/honeylabs/top-attackers-ua-AS200651.json

(limited to 'kevlar/2026-09-07/honeylabs/top-attackers-ua-AS200651.json')

diff --git a/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS200651.json b/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS200651.json
new file mode 100644
index 0000000..d10948d
--- /dev/null
+++ b/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS200651.json
@@ -0,0 +1,67 @@
+[
+ {
+  "value": "SPARK COMMIT: 08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17",
+  "event_count": 3,
+  "unique_ips": 1,
+  "first_seen": "2026-09-03T20:46:54",
+  "last_seen": "2026-09-03T23:55:20",
+  "top_ports": [
+   443
+  ],
+  "countries": [
+   "RO"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:104.71.6212.24) Gecko/25.2.4212.671 Firefox/2.0",
+  "event_count": 3,
+  "unique_ips": 1,
+  "first_seen": "2026-09-03T20:46:53",
+  "last_seen": "2026-09-03T23:55:19",
+  "top_ports": [
+   443
+  ],
+  "countries": [
+   "RO"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Android 12; Mobile; rv:117.0) Gecko/117.0 Focus/117.0",
+  "event_count": 3,
+  "unique_ips": 1,
+  "first_seen": "2026-09-06T20:33:31",
+  "last_seen": "2026-09-06T22:18:29",
+  "top_ports": [
+   443
+  ],
+  "countries": [
+   "RO"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)",
+  "event_count": 3,
+  "unique_ips": 1,
+  "first_seen": "2026-09-01T12:25:00",
+  "last_seen": "2026-09-01T14:07:55",
+  "top_ports": [
+   8443
+  ],
+  "countries": [
+   "RO"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3 rv:3.0; eu-FR) AppleWebKit/533.4.2 (KHTML, like Gecko) Version/5.0.1 Safari/533.4.2",
+  "event_count": 3,
+  "unique_ips": 1,
+  "first_seen": "2026-08-31T01:12:02",
+  "last_seen": "2026-08-31T06:06:56",
+  "top_ports": [
+   443
+  ],
+  "countries": [
+   "RO"
+  ]
+ }
+]
\ No newline at end of file
-- 
cgit v1.2.3