add: bph report iocs

1 files changed, 5 insertions, 0 deletions

diff --git a/kevlar/2026-08-31/censys/aggregations-AS30823.ndjson b/kevlar/2026-08-31/censys/aggregations-AS30823.ndjson
new file mode 100644
index 0000000..55ac943
--- /dev/null
+++ b/kevlar/2026-08-31/censys/aggregations-AS30823.ndjson
@@ -0,0 +1,5 @@
+{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 1203, "key": "22"}, {"count": 808, "key": "443"}, {"count": 614, "key": "80"}, {"count": 457, "key": "53"}, {"count": 388, "key": "27015"}, {"count": 296, "key": "3389"}, {"count": 109, "key": "25"}, {"count": 109, "key": "8443"}, {"count": 95, "key": "2096"}, {"count": 84, "key": "8080"}], "is_more_than_total_hits": false, "other_count": 2409, "query_duration_millis": 98, "total_count": 2036}}}
+{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 1113, "key": "openssh"}, {"count": 776, "key": "nginx"}, {"count": 198, "key": "express"}, {"count": 137, "key": "http_server"}, {"count": 102, "key": "google_web_services"}, {"count": 102, "key": "web_server"}, {"count": 92, "key": "dovecot"}, {"count": 92, "key": "http_api"}, {"count": 69, "key": "caddy"}, {"count": 66, "key": "cloudflare_load_balancer"}], "is_more_than_total_hits": false, "other_count": 1549, "query_duration_millis": 144, "total_count": 2036}}}
+{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 2036, "key": "BULLETPROOF"}, {"count": 28, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 421, "total_count": 2036}}}
+{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 201, "key": "YE2"}, {"count": 198, "key": "YE1"}, {"count": 108, "key": "invalid2.invalid"}, {"count": 97, "key": "YR2"}, {"count": 92, "key": "YR1"}, {"count": 62, "key": "windows-DE-Fran"}, {"count": 58, "key": "172.86.93"}, {"count": 56, "key": "windows-Frankfu"}, {"count": 51, "key": "GoGetSSL RSA DV CA"}, {"count": 36, "key": "WE1"}], "is_more_than_total_hits": false, "other_count": 986, "query_duration_millis": 184, "total_count": 2036}}}
+{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 1025, "key": "linux"}, {"count": 162, "key": "windows"}, {"count": 21, "key": "proxmox"}, {"count": 17, "key": "routeros"}, {"count": 15, "key": "debian_linux"}, {"count": 11, "key": "ubuntu"}, {"count": 9, "key": "centos"}, {"count": 6, "key": "freebsd"}, {"count": 4, "key": "adaptive_security_appliance_software"}, {"count": 3, "key": "megarac_spx"}], "is_more_than_total_hits": false, "other_count": 6, "query_duration_millis": 338, "total_count": 2036}}}