From de4c2e99a969eb10708b02d8f2b6f31495eacce8 Mon Sep 17 00:00:00 2001
From: hrbrmstr <bob@rud.is>
Date: Mon, 7 Sep 2026 06:03:32 -0400
Subject: chore: weekly BPH update

---
 .../honeylabs/top-attackers-ua-AS51852.json        | 57 ++++++++++++++++++++++
 1 file changed, 57 insertions(+)
 create mode 100644 kevlar/2026-09-07/honeylabs/top-attackers-ua-AS51852.json

(limited to 'kevlar/2026-09-07/honeylabs/top-attackers-ua-AS51852.json')

diff --git a/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS51852.json b/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS51852.json
new file mode 100644
index 0000000..28cef53
--- /dev/null
+++ b/kevlar/2026-09-07/honeylabs/top-attackers-ua-AS51852.json
@@ -0,0 +1,57 @@
+[
+ {
+  "value": "Mozilla/5.0",
+  "event_count": 19,
+  "unique_ips": 2,
+  "first_seen": "2026-08-31T15:32:52",
+  "last_seen": "2026-09-04T19:27:10",
+  "top_ports": [
+   8443,
+   2087
+  ],
+  "countries": [
+   "CH"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/125 Safari/537.36",
+  "event_count": 3,
+  "unique_ips": 1,
+  "first_seen": "2026-09-01T12:06:48",
+  "last_seen": "2026-09-01T12:06:54",
+  "top_ports": [
+   80,
+   443
+  ],
+  "countries": [
+   "CH"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)",
+  "event_count": 3,
+  "unique_ips": 1,
+  "first_seen": "2026-09-04T18:34:20",
+  "last_seen": "2026-09-04T19:27:10",
+  "top_ports": [
+   2087
+  ],
+  "countries": [
+   "CH"
+  ]
+ },
+ {
+  "value": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0",
+  "event_count": 2,
+  "unique_ips": 1,
+  "first_seen": "2026-09-01T07:55:46",
+  "last_seen": "2026-09-02T18:13:22",
+  "top_ports": [
+   32400,
+   8085
+  ],
+  "countries": [
+   "CH"
+  ]
+ }
+]
\ No newline at end of file
-- 
cgit v1.2.3