1 files changed, 4 insertions, 0 deletions
diff --git a/kevlar/2026-08-23/censys/aggregations-AS200651.ndjson b/kevlar/2026-08-23/censys/aggregations-AS200651.ndjson
new file mode 100644
index 0000000..b936fa8
--- /dev/null
+++ b/kevlar/2026-08-23/censys/aggregations-AS200651.ndjson
@@ -0,0 +1,4 @@
+{"field": "host.services.port", "buckets": [{"count": 2821, "key": "22"}, {"count": 2116, "key": "443"}, {"count": 1915, "key": "80"}, {"count": 383, "key": "53"}, {"count": 287, "key": "25"}, {"count": 238, "key": "587"}, {"count": 225, "key": "993"}, {"count": 200, "key": "111"}, {"count": 189, "key": "143"}, {"count": 170, "key": "110"}, {"count": 152, "key": "2096"}, {"count": 151, "key": "8080"}, {"count": 136, "key": "8443"}, {"count": 135, "key": "21"}, {"count": 95, "key": "2087"}], "total_count": 3779}
+{"field": "host.services.software.product", "buckets": [{"count": 2797, "key": "nginx"}, {"count": 2558, "key": "openssh"}, {"count": 566, "key": "dovecot"}, {"count": 467, "key": "http_server"}, {"count": 381, "key": "cpanel"}, {"count": 315, "key": "express"}, {"count": 264, "key": "exim"}, {"count": 247, "key": "caddy"}, {"count": 240, "key": "openresty"}, {"count": 204, "key": "authoritative_server"}, {"count": 171, "key": "webmail"}, {"count": 166, "key": "jquery"}], "total_count": 3779}
+{"field": "host.labels.value", "buckets": [{"count": 3779, "key": "BULLETPROOF"}, {"count": 120, "key": "IPV6"}], "total_count": 3779}
+{"field": "host.services.cert.parsed.issuer.common_name", "buckets": [{"count": 651, "key": "YE1"}, {"count": 648, "key": "YR2"}, {"count": 594, "key": "YR1"}, {"count": 583, "key": "YE2"}, {"count": 138, "key": "TRAEFIK DEFAULT CERT"}, {"count": 95, "key": "invalid2.invalid"}, {"count": 66, "key": "www.example.com"}, {"count": 55, "key": "localhost"}, {"count": 42, "key": "GlobalSign Atlas R3 DV TLS CA 2025 Q3"}, {"count": 41, "key": "WE1"}], "total_count": 3779}