From e93e7f67d4f70177c3ab5a34e8cc5b24fa2dde6d Mon Sep 17 00:00:00 2001 From: hrbrmstr Date: Mon, 31 Aug 2026 07:56:38 -0400 Subject: add: bph report iocs --- kevlar/2026-08-31/censys/aggregations-AS57043.ndjson | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 kevlar/2026-08-31/censys/aggregations-AS57043.ndjson (limited to 'kevlar/2026-08-31/censys/aggregations-AS57043.ndjson') diff --git a/kevlar/2026-08-31/censys/aggregations-AS57043.ndjson b/kevlar/2026-08-31/censys/aggregations-AS57043.ndjson new file mode 100644 index 0000000..887eabe --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS57043.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 77135, "key": "22"}, {"count": 49750, "key": "443"}, {"count": 32331, "key": "80"}, {"count": 14629, "key": "2096"}, {"count": 8459, "key": "8443"}, {"count": 4010, "key": "111"}, {"count": 2912, "key": "8080"}, {"count": 2598, "key": "2222"}, {"count": 2515, "key": "2053"}, {"count": 2258, "key": "53"}], "is_more_than_total_hits": false, "other_count": 125759, "query_duration_millis": 220, "total_count": 101011}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 76785, "key": "openssh"}, {"count": 59721, "key": "nginx"}, {"count": 8938, "key": "google_web_services"}, {"count": 8936, "key": "web_server"}, {"count": 6500, "key": "ghost"}, {"count": 6499, "key": "app_and_api_protector"}, {"count": 5458, "key": "express"}, {"count": 3900, "key": "caddy"}, {"count": 3435, "key": "waf"}, {"count": 3313, "key": "cloudflare_load_balancer"}], "is_more_than_total_hits": false, "other_count": 57657, "query_duration_millis": 372, "total_count": 101011}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 101011, "key": "BULLETPROOF"}, {"count": 8, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 171, "total_count": 101011}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 13508, "key": "YE2"}, {"count": 13247, "key": "YE1"}, {"count": 9044, "key": "invalid2.invalid"}, {"count": 4967, "key": "YR1"}, {"count": 4513, "key": "YR2"}, {"count": 2378, "key": "GeoTrust TLS RSA CA G1"}, {"count": 2369, "key": "WE1"}, {"count": 2034, "key": "TRAEFIK DEFAULT CERT"}, {"count": 1748, "key": "DigiCert Global G2 TLS RSA SHA256 2020 CA1"}, {"count": 1538, "key": "Microsoft TLS G2 RSA CA OCSP 04"}], "is_more_than_total_hits": false, "other_count": 35502, "query_duration_millis": 171, "total_count": 101011}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 72754, "key": "linux"}, {"count": 800, "key": "ubuntu"}, {"count": 573, "key": "windows"}, {"count": 305, "key": "routeros"}, {"count": 273, "key": "debian_linux"}, {"count": 180, "key": "proxmox"}, {"count": 139, "key": "linux_kernel"}, {"count": 108, "key": "adaptive_security_appliance_software"}, {"count": 55, "key": "freebsd"}, {"count": 44, "key": "centos"}], "is_more_than_total_hits": false, "other_count": 132, "query_duration_millis": 61, "total_count": 101011}}} -- cgit v1.2.3