feat: update bph iocs

1 files changed, 3 insertions, 0 deletions

diff --git a/kevlar/2026-08-17/censys/aggregations-AS198953.ndjson b/kevlar/2026-08-17/censys/aggregations-AS198953.ndjson
new file mode 100644
index 0000000..6a84713
--- /dev/null
+++ b/kevlar/2026-08-17/censys/aggregations-AS198953.ndjson
@@ -0,0 +1,3 @@
+{"field":"host.services.port","buckets":[{"count":171,"key":"22"},{"count":169,"key":"3389"},{"count":91,"key":"80"},{"count":85,"key":"443"},{"count":52,"key":"135"},{"count":41,"key":"137"},{"count":38,"key":"53"},{"count":36,"key":"139"},{"count":36,"key":"5985"},{"count":26,"key":"47001"},{"count":24,"key":"21"},{"count":24,"key":"123"},{"count":21,"key":"25"},{"count":20,"key":"143"},{"count":20,"key":"993"},{"count":19,"key":"110"},{"count":14,"key":"587"},{"count":14,"key":"3000"},{"count":11,"key":"7070"},{"count":11,"key":"8443"},{"count":10,"key":"111"},{"count":10,"key":"8888"},{"count":9,"key":"445"},{"count":8,"key":"7777"},{"count":7,"key":"465"}],"total_count":368}
+{"field":"host.services.software.product","buckets":[{"count":138,"key":"openssh"},{"count":130,"key":"nginx"},{"count":63,"key":"dovecot"},{"count":41,"key":"http_api"},{"count":39,"key":"express"},{"count":34,"key":"http_server"},{"count":32,"key":"fastpanel"},{"count":25,"key":"exim"},{"count":22,"key":"requirejs"},{"count":21,"key":"parallels_plesk_panel"},{"count":21,"key":"prototype"},{"count":17,"key":"proftpd"},{"count":14,"key":"bind"},{"count":14,"key":"plesk"},{"count":12,"key":"postfix"},{"count":12,"key":"pve"},{"count":12,"key":"virtual_environment"},{"count":11,"key":"anydesk"},{"count":6,"key":"internet_information_services"},{"count":6,"key":"php"},{"count":5,"key":"mysql"},{"count":5,"key":"next.js"}],"total_count":368}
+{"field":"host.labels.value","buckets":[{"count":368,"key":"BULLETPROOF"}],"total_count":368}