add: bph report iocs

1 files changed, 5 insertions, 0 deletions

diff --git a/kevlar/2026-08-31/censys/aggregations-AS213702.ndjson b/kevlar/2026-08-31/censys/aggregations-AS213702.ndjson
new file mode 100644
index 0000000..1345dd5
--- /dev/null
+++ b/kevlar/2026-08-31/censys/aggregations-AS213702.ndjson
@@ -0,0 +1,5 @@
+{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 6376, "key": "22"}, {"count": 4393, "key": "443"}, {"count": 2150, "key": "80"}, {"count": 2020, "key": "2222"}, {"count": 820, "key": "8443"}, {"count": 671, "key": "2096"}, {"count": 404, "key": "3389"}, {"count": 242, "key": "8080"}, {"count": 193, "key": "2053"}, {"count": 160, "key": "9443"}], "is_more_than_total_hits": false, "other_count": 4685, "query_duration_millis": 3206, "total_count": 7381}}}
+{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 6147, "key": "openssh"}, {"count": 3386, "key": "nginx"}, {"count": 621, "key": "caddy"}, {"count": 522, "key": "google_web_services"}, {"count": 521, "key": "web_server"}, {"count": 472, "key": "app_and_api_protector"}, {"count": 472, "key": "ghost"}, {"count": 333, "key": "express"}, {"count": 266, "key": "waf"}, {"count": 254, "key": "cloudflare_load_balancer"}], "is_more_than_total_hits": false, "other_count": 2854, "query_duration_millis": 37, "total_count": 7381}}}
+{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 7381, "key": "BULLETPROOF"}, {"count": 16, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 27, "total_count": 7381}}}
+{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 1187, "key": "YE2"}, {"count": 1098, "key": "YE1"}, {"count": 768, "key": "2LqvyXLUXjAf2MoZx6VEPgJuz1349naDyLo"}, {"count": 524, "key": "invalid2.invalid"}, {"count": 331, "key": "YR2"}, {"count": 234, "key": "YR1"}, {"count": 217, "key": "GeoTrust TLS RSA CA G1"}, {"count": 193, "key": "zAqJHcz8C2V0TC9uVVmwYr8jbL2sjgaT_5"}, {"count": 185, "key": "NvJhHp68p5mjSuW_EK9Lab6bH9"}, {"count": 169, "key": "WE1"}], "is_more_than_total_hits": false, "other_count": 3494, "query_duration_millis": 144, "total_count": 7381}}}
+{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 6029, "key": "linux"}, {"count": 98, "key": "windows"}, {"count": 63, "key": "ubuntu"}, {"count": 14, "key": "debian_linux"}, {"count": 10, "key": "linux_kernel"}, {"count": 1, "key": "enterprise_linux"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 49, "total_count": 7381}}}