1 files changed, 5 insertions, 0 deletions
diff --git a/kevlar/2026-08-23/censys/aggregations-AS51396.ndjson b/kevlar/2026-08-23/censys/aggregations-AS51396.ndjson
new file mode 100644
index 0000000..a52ea7d
--- /dev/null
+++ b/kevlar/2026-08-23/censys/aggregations-AS51396.ndjson
@@ -0,0 +1,5 @@
+{"field": "host.services.port", "buckets": [{"count": 833, "key": "22"}, {"count": 367, "key": "80"}, {"count": 288, "key": "443"}, {"count": 136, "key": "3389"}, {"count": 100, "key": "1407"}, {"count": 99, "key": "11407"}, {"count": 98, "key": "135"}, {"count": 98, "key": "445"}, {"count": 92, "key": "5985"}, {"count": 90, "key": "139"}, {"count": 81, "key": "53"}, {"count": 75, "key": "47001"}, {"count": 74, "key": "2096"}, {"count": 73, "key": "111"}, {"count": 68, "key": "8080"}], "total_count": 1856, "note": "prior week 1910 hosts; -2.9%"}
+{"field": "host.services.software.product", "buckets": [{"count": 744, "key": "openssh"}, {"count": 402, "key": "nginx"}, {"count": 199, "key": "http_server"}, {"count": 132, "key": "express"}, {"count": 130, "key": "http_api"}, {"count": 79, "key": "php"}, {"count": 61, "key": "pve"}, {"count": 61, "key": "virtual_environment"}, {"count": 54, "key": "jquery"}, {"count": 51, "key": "dovecot"}, {"count": 50, "key": "python"}, {"count": 35, "key": "node_exporter"}], "total_count": 1856}
+{"field": "host.labels.value", "buckets": [{"count": 1856, "key": "BULLETPROOF"}, {"count": 15, "key": "IPV6"}], "total_count": 1856}
+{"field": "host.services.cert.parsed.issuer.common_name", "buckets": [{"count": 116, "key": "YE1"}, {"count": 95, "key": "YE2"}, {"count": 51, "key": "YR2"}, {"count": 50, "key": "YR1"}, {"count": 28, "key": "Proxmox Virtual Environment"}, {"count": 26, "key": "WIN-9QL4SDRB93L"}, {"count": 21, "key": "TRAEFIK DEFAULT CERT"}, {"count": 21, "key": "WIN-IK7N6SD2UBU"}, {"count": 21, "key": "invalid2.invalid"}, {"count": 21, "key": "localhost"}, {"count": 14, "key": "Cloudbase-Init WinRM"}, {"count": 12, "key": "Plesk"}, {"count": 11, "key": "WIN-TVJFV24LUKT"}, {"count": 9, "key": "DigiCert Global G2 TLS RSA SHA256 2020 CA1"}, {"count": 9, "key": "WIN-OU0SUKQBJN2"}], "total_count": 1856, "note": "YE1 grew 101->116; YE2 93->95; YR1 61->50 declined"}
+{"field": "host.operating_system.product", "buckets": [{"count": 672, "key": "linux"}, {"count": 93, "key": "windows"}, {"count": 38, "key": "debian_linux"}, {"count": 28, "key": "proxmox"}, {"count": 14, "key": "ubuntu"}, {"count": 4, "key": "centos"}, {"count": 3, "key": "routeros"}, {"count": 2, "key": "windows_server"}], "total_count": 1856}