feat: update bph iocs

1 files changed, 4 insertions, 0 deletions

diff --git a/kevlar/2026-08-17/censys/aggregations-AS138915.ndjson b/kevlar/2026-08-17/censys/aggregations-AS138915.ndjson
new file mode 100644
index 0000000..bbd1f15
--- /dev/null
+++ b/kevlar/2026-08-17/censys/aggregations-AS138915.ndjson
@@ -0,0 +1,4 @@
+{"field":"host.services.port","buckets":[{"count":6947,"key":"22"},{"count":2655,"key":"443"},{"count":2544,"key":"32080"},{"count":2488,"key":"43080"},{"count":2362,"key":"40003"},{"count":2355,"key":"40801"},{"count":2346,"key":"40803"},{"count":2345,"key":"40804"},{"count":2333,"key":"40810"},{"count":2314,"key":"80"},{"count":913,"key":"123"},{"count":698,"key":"8080"},{"count":563,"key":"3389"},{"count":524,"key":"135"},{"count":518,"key":"139"},{"count":516,"key":"445"}],"total_count":12717}
+{"field":"host.services.software.product","buckets":[{"count":7386,"key":"openssh"},{"count":6291,"key":"openresty"},{"count":4824,"key":"tengine"},{"count":3093,"key":"nginx"},{"count":920,"key":"http_api"},{"count":208,"key":"openvpn_access_server"},{"count":189,"key":"squid"},{"count":126,"key":"wordpress"}],"total_count":12717}
+{"field":"host.labels.value","buckets":[{"count":12717,"key":"BULLETPROOF"},{"count":99,"key":"IPV6"}],"total_count":12717}
+{"field":"host.services.cert.parsed.issuer.common_name","buckets":[{"count":4711,"key":"GlobalSign GCC R3 OV TLS CA 2024"},{"count":2434,"key":"localhost"},{"count":2393,"key":"prod-vpn.example.com"},{"count":2292,"key":"GlobalSign RSA OV SSL CA 2018"},{"count":2281,"key":"GlobalSign GCC R46 OV TLS CA 2025"},{"count":1206,"key":"Sectigo Public Server Authentication CA DV R36"},{"count":589,"key":"WoTrus RSA DV SSL CA 2"},{"count":322,"key":"YR1"},{"count":292,"key":"WIN-9QFKHJ39QE9"},{"count":243,"key":"YR2"},{"count":242,"key":"QY"},{"count":182,"key":"YE1"},{"count":174,"key":"YE2"},{"count":171,"key":"tls.internal.ypc.org"},{"count":146,"key":"tudog_node_agent._reserved.bytefcdn.com"}],"total_count":12717}