From e93e7f67d4f70177c3ab5a34e8cc5b24fa2dde6d Mon Sep 17 00:00:00 2001 From: hrbrmstr Date: Mon, 31 Aug 2026 07:56:38 -0400 Subject: add: bph report iocs --- kevlar/2026-08-31/censys/aggregations-AS51396.ndjson | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 kevlar/2026-08-31/censys/aggregations-AS51396.ndjson (limited to 'kevlar/2026-08-31/censys/aggregations-AS51396.ndjson') diff --git a/kevlar/2026-08-31/censys/aggregations-AS51396.ndjson b/kevlar/2026-08-31/censys/aggregations-AS51396.ndjson new file mode 100644 index 0000000..47caf64 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS51396.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 838, "key": "22"}, {"count": 360, "key": "80"}, {"count": 281, "key": "443"}, {"count": 129, "key": "3389"}, {"count": 100, "key": "1407"}, {"count": 99, "key": "11407"}, {"count": 94, "key": "135"}, {"count": 93, "key": "445"}, {"count": 87, "key": "5985"}, {"count": 84, "key": "139"}], "is_more_than_total_hits": false, "other_count": 3342, "query_duration_millis": 457, "total_count": 1917}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 744, "key": "openssh"}, {"count": 398, "key": "nginx"}, {"count": 191, "key": "http_server"}, {"count": 129, "key": "http_api"}, {"count": 105, "key": "express"}, {"count": 69, "key": "php"}, {"count": 53, "key": "python"}, {"count": 48, "key": "jquery"}, {"count": 48, "key": "pve"}, {"count": 48, "key": "virtual_environment"}], "is_more_than_total_hits": false, "other_count": 801, "query_duration_millis": 1064, "total_count": 1917}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 1917, "key": "BULLETPROOF"}, {"count": 15, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 159, "total_count": 1917}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 110, "key": "YE1"}, {"count": 105, "key": "YE2"}, {"count": 45, "key": "YR2"}, {"count": 42, "key": "YR1"}, {"count": 27, "key": "WIN-9QL4SDRB93L"}, {"count": 24, "key": "localhost"}, {"count": 20, "key": "Proxmox Virtual Environment"}, {"count": 20, "key": "TRAEFIK DEFAULT CERT"}, {"count": 20, "key": "WIN-IK7N6SD2UBU"}, {"count": 17, "key": "invalid2.invalid"}], "is_more_than_total_hits": false, "other_count": 440, "query_duration_millis": 126, "total_count": 1917}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 668, "key": "linux"}, {"count": 85, "key": "windows"}, {"count": 39, "key": "debian_linux"}, {"count": 22, "key": "proxmox"}, {"count": 13, "key": "ubuntu"}, {"count": 3, "key": "centos"}, {"count": 3, "key": "routeros"}, {"count": 1, "key": "linux_kernel"}, {"count": 1, "key": "windows_server"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 72, "total_count": 1917}}} -- cgit v1.2.3