From b6f4f2af55e81a459cb126da5ef972b9305cf67d Mon Sep 17 00:00:00 2001 From: hrbrmstr Date: Mon, 24 Aug 2026 00:26:19 -0400 Subject: add: bph report iocs and daily drop helper --- kevlar/2026-08-23/censys/aggregations-AS200651.ndjson | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 kevlar/2026-08-23/censys/aggregations-AS200651.ndjson (limited to 'kevlar/2026-08-23/censys/aggregations-AS200651.ndjson') diff --git a/kevlar/2026-08-23/censys/aggregations-AS200651.ndjson b/kevlar/2026-08-23/censys/aggregations-AS200651.ndjson new file mode 100644 index 0000000..b936fa8 --- /dev/null +++ b/kevlar/2026-08-23/censys/aggregations-AS200651.ndjson @@ -0,0 +1,4 @@ +{"field": "host.services.port", "buckets": [{"count": 2821, "key": "22"}, {"count": 2116, "key": "443"}, {"count": 1915, "key": "80"}, {"count": 383, "key": "53"}, {"count": 287, "key": "25"}, {"count": 238, "key": "587"}, {"count": 225, "key": "993"}, {"count": 200, "key": "111"}, {"count": 189, "key": "143"}, {"count": 170, "key": "110"}, {"count": 152, "key": "2096"}, {"count": 151, "key": "8080"}, {"count": 136, "key": "8443"}, {"count": 135, "key": "21"}, {"count": 95, "key": "2087"}], "total_count": 3779} +{"field": "host.services.software.product", "buckets": [{"count": 2797, "key": "nginx"}, {"count": 2558, "key": "openssh"}, {"count": 566, "key": "dovecot"}, {"count": 467, "key": "http_server"}, {"count": 381, "key": "cpanel"}, {"count": 315, "key": "express"}, {"count": 264, "key": "exim"}, {"count": 247, "key": "caddy"}, {"count": 240, "key": "openresty"}, {"count": 204, "key": "authoritative_server"}, {"count": 171, "key": "webmail"}, {"count": 166, "key": "jquery"}], "total_count": 3779} +{"field": "host.labels.value", "buckets": [{"count": 3779, "key": "BULLETPROOF"}, {"count": 120, "key": "IPV6"}], "total_count": 3779} +{"field": "host.services.cert.parsed.issuer.common_name", "buckets": [{"count": 651, "key": "YE1"}, {"count": 648, "key": "YR2"}, {"count": 594, "key": "YR1"}, {"count": 583, "key": "YE2"}, {"count": 138, "key": "TRAEFIK DEFAULT CERT"}, {"count": 95, "key": "invalid2.invalid"}, {"count": 66, "key": "www.example.com"}, {"count": 55, "key": "localhost"}, {"count": 42, "key": "GlobalSign Atlas R3 DV TLS CA 2025 Q3"}, {"count": 41, "key": "WE1"}], "total_count": 3779} -- cgit v1.2.3