feat: update bph iocs

1 files changed, 5 insertions, 0 deletions

diff --git a/kevlar/2026-08-17/censys/aggregations-AS57043.ndjson b/kevlar/2026-08-17/censys/aggregations-AS57043.ndjson
new file mode 100644
index 0000000..ea26b05
--- /dev/null
+++ b/kevlar/2026-08-17/censys/aggregations-AS57043.ndjson
@@ -0,0 +1,5 @@
+{"field":"host.services.port","buckets":[{"count":76822,"key":"22"},{"count":50471,"key":"443"},{"count":31791,"key":"80"},{"count":15200,"key":"2096"},{"count":8565,"key":"8443"},{"count":4130,"key":"111"},{"count":3060,"key":"8080"},{"count":2647,"key":"2053"},{"count":2616,"key":"2222"},{"count":2446,"key":"53"},{"count":2131,"key":"9100"},{"count":1995,"key":"8000"},{"count":1904,"key":"21"},{"count":1748,"key":"3389"},{"count":1733,"key":"25"},{"count":1623,"key":"1881"},{"count":1565,"key":"2212"},{"count":1556,"key":"3000"},{"count":1543,"key":"6767"},{"count":1388,"key":"993"},{"count":1371,"key":"587"},{"count":1321,"key":"143"},{"count":1198,"key":"110"},{"count":1140,"key":"9443"},{"count":1058,"key":"9000"}],"total_count":101028}
+{"field":"host.services.software.product","buckets":[{"count":76505,"key":"openssh"},{"count":59487,"key":"nginx"},{"count":9590,"key":"google_web_services"},{"count":9590,"key":"web_server"},{"count":6807,"key":"ghost"},{"count":6803,"key":"app_and_api_protector"},{"count":5516,"key":"express"},{"count":4050,"key":"dovecot"},{"count":3613,"key":"caddy"},{"count":3566,"key":"waf"},{"count":3395,"key":"cloudflare_load_balancer"},{"count":3091,"key":"http_server"},{"count":2279,"key":"uvicorn"},{"count":2048,"key":"traefik_proxy"},{"count":2023,"key":"exim"},{"count":1682,"key":"fastpanel"},{"count":1524,"key":"python"},{"count":1475,"key":"next.js"},{"count":1439,"key":"traffic_server"},{"count":1185,"key":"portainer"},{"count":1058,"key":"openresty"}],"total_count":101028}
+{"field":"host.labels.value","buckets":[{"count":101028,"key":"BULLETPROOF"},{"count":9,"key":"IPV6"}],"total_count":101028}
+{"field":"host.services.cert.parsed.issuer.common_name","buckets":[{"count":13079,"key":"YE2"},{"count":13034,"key":"YE1"},{"count":9707,"key":"invalid2.invalid"},{"count":7371,"key":"YR1"},{"count":4434,"key":"YR2"},{"count":2433,"key":"WE1"},{"count":2369,"key":"GeoTrust TLS RSA CA G1"},{"count":2066,"key":"TRAEFIK DEFAULT CERT"},{"count":1790,"key":"Microsoft TLS G2 RSA CA OCSP 04"},{"count":1583,"key":"hypervisor.hv"},{"count":1530,"key":"GlobalSign RSA OV SSL CA 2018"},{"count":963,"key":"WR1"},{"count":662,"key":"E8"},{"count":647,"key":"E7"},{"count":514,"key":"MySQL_Server_8.0.43_Auto_Generated_CA_Certificate"}],"total_count":101028}
+{"field":"host.operating_system.product","buckets":[{"count":72467,"key":"linux"},{"count":787,"key":"ubuntu"},{"count":580,"key":"windows"},{"count":278,"key":"routeros"},{"count":262,"key":"debian_linux"},{"count":180,"key":"proxmox"},{"count":102,"key":"adaptive_security_appliance_software"},{"count":54,"key":"freebsd"},{"count":41,"key":"vmware_esxi_server"}],"total_count":101028}