From e93e7f67d4f70177c3ab5a34e8cc5b24fa2dde6d Mon Sep 17 00:00:00 2001 From: hrbrmstr Date: Mon, 31 Aug 2026 07:56:38 -0400 Subject: add: bph report iocs --- kevlar/2026-08-31/censys/aggregations-AS198953.ndjson | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 kevlar/2026-08-31/censys/aggregations-AS198953.ndjson (limited to 'kevlar/2026-08-31/censys/aggregations-AS198953.ndjson') diff --git a/kevlar/2026-08-31/censys/aggregations-AS198953.ndjson b/kevlar/2026-08-31/censys/aggregations-AS198953.ndjson new file mode 100644 index 0000000..b76afdb --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS198953.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 166, "key": "3389"}, {"count": 161, "key": "22"}, {"count": 89, "key": "80"}, {"count": 83, "key": "443"}, {"count": 52, "key": "135"}, {"count": 41, "key": "137"}, {"count": 39, "key": "53"}, {"count": 36, "key": "139"}, {"count": 35, "key": "5985"}, {"count": 25, "key": "21"}], "is_more_than_total_hits": false, "other_count": 374, "query_duration_millis": 185, "total_count": 360}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 128, "key": "nginx"}, {"count": 123, "key": "openssh"}, {"count": 63, "key": "dovecot"}, {"count": 44, "key": "http_api"}, {"count": 36, "key": "express"}, {"count": 31, "key": "http_server"}, {"count": 30, "key": "fastpanel"}, {"count": 24, "key": "exim"}, {"count": 22, "key": "requirejs"}, {"count": 19, "key": "parallels_plesk_panel"}], "is_more_than_total_hits": false, "other_count": 231, "query_duration_millis": 146, "total_count": 360}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 360, "key": "BULLETPROOF"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 923, "total_count": 360}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 23, "key": "Plesk"}, {"count": 19, "key": "YR1"}, {"count": 16, "key": "etc"}, {"count": 11, "key": "AnyDesk Client"}, {"count": 10, "key": "localhost"}, {"count": 9, "key": "R11"}, {"count": 9, "key": "parking"}, {"count": 8, "key": "R12"}, {"count": 8, "key": "YR2"}, {"count": 8, "key": "test"}], "is_more_than_total_hits": false, "other_count": 272, "query_duration_millis": 147, "total_count": 360}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 117, "key": "linux"}, {"count": 41, "key": "windows"}, {"count": 4, "key": "ubuntu"}, {"count": 3, "key": "debian_linux"}, {"count": 2, "key": "proxmox"}, {"count": 1, "key": "adaptive_security_appliance_software"}, {"count": 1, "key": "freenas_firmware"}, {"count": 1, "key": "ios"}, {"count": 1, "key": "linux_kernel"}, {"count": 1, "key": "routeros"}], "is_more_than_total_hits": false, "other_count": 2, "query_duration_millis": 25, "total_count": 360}}} -- cgit v1.2.3