add: bph report iocs and daily drop helper

1 files changed, 20 insertions, 0 deletions

diff --git a/kevlar/2026-08-23/sponge/session-stats-by-ip-AS138915.ndjson b/kevlar/2026-08-23/sponge/session-stats-by-ip-AS138915.ndjson
new file mode 100644
index 0000000..4b21d5a
--- /dev/null
+++ b/kevlar/2026-08-23/sponge/session-stats-by-ip-AS138915.ndjson
@@ -0,0 +1,20 @@
+{"doc_count":43196,"key":"38.54.2.209"}
+{"doc_count":13207,"key":"38.54.2.232"}
+{"doc_count":1022,"key":"38.54.2.13"}
+{"doc_count":849,"key":"38.54.2.152"}
+{"doc_count":847,"key":"38.54.2.75"}
+{"doc_count":698,"key":"38.54.2.221"}
+{"doc_count":678,"key":"38.54.2.148"}
+{"doc_count":675,"key":"38.54.2.170"}
+{"doc_count":672,"key":"38.54.2.168"}
+{"doc_count":82,"key":"211.155.100.9"}
+{"doc_count":73,"key":"38.54.2.203"}
+{"doc_count":58,"key":"38.54.2.135"}
+{"doc_count":48,"key":"154.90.37.55"}
+{"doc_count":24,"key":"38.54.2.235"}
+{"doc_count":23,"key":"38.54.2.4"}
+{"doc_count":15,"key":"38.54.2.20"}
+{"doc_count":15,"key":"38.54.2.204"}
+{"doc_count":12,"key":"38.54.2.91"}
+{"doc_count":11,"key":"38.54.2.195"}
+{"doc_count":11,"key":"38.54.37.119"}