1 files changed, 5 insertions, 0 deletions
diff --git a/kevlar/2026-08-31/censys/aggregations-AS400992.ndjson b/kevlar/2026-08-31/censys/aggregations-AS400992.ndjson
new file mode 100644
index 0000000..e355479
--- /dev/null
+++ b/kevlar/2026-08-31/censys/aggregations-AS400992.ndjson
@@ -0,0 +1,5 @@
+{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 6669, "key": "22"}, {"count": 3214, "key": "443"}, {"count": 1298, "key": "80"}, {"count": 1045, "key": "2096"}, {"count": 494, "key": "8443"}, {"count": 193, "key": "2222"}, {"count": 192, "key": "8080"}, {"count": 183, "key": "3389"}, {"count": 174, "key": "2053"}, {"count": 121, "key": "25"}], "is_more_than_total_hits": false, "other_count": 4258, "query_duration_millis": 61, "total_count": 7781}}}
+{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 5750, "key": "openssh"}, {"count": 1959, "key": "nginx"}, {"count": 909, "key": "google_web_services"}, {"count": 906, "key": "web_server"}, {"count": 434, "key": "app_and_api_protector"}, {"count": 434, "key": "ghost"}, {"count": 321, "key": "waf"}, {"count": 306, "key": "cloudflare_load_balancer"}, {"count": 266, "key": "caddy"}, {"count": 237, "key": "express"}], "is_more_than_total_hits": false, "other_count": 2595, "query_duration_millis": 179, "total_count": 7781}}}
+{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 7781, "key": "BULLETPROOF"}, {"count": 41, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 41, "total_count": 7781}}}
+{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 998, "key": "YE2"}, {"count": 908, "key": "invalid2.invalid"}, {"count": 877, "key": "YE1"}, {"count": 253, "key": "DigiCert Global G2 TLS RSA SHA256 2020 CA1"}, {"count": 244, "key": "YR2"}, {"count": 198, "key": "WE1"}, {"count": 191, "key": "YR1"}, {"count": 136, "key": "GeoTrust TLS RSA CA G1"}, {"count": 105, "key": "GlobalSign ECC OV SSL CA 2018"}, {"count": 100, "key": "Sectigo Public Server Authentication CA DV E36"}], "is_more_than_total_hits": false, "other_count": 2008, "query_duration_millis": 122, "total_count": 7781}}}
+{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 5522, "key": "linux"}, {"count": 63, "key": "ubuntu"}, {"count": 44, "key": "windows"}, {"count": 26, "key": "debian_linux"}, {"count": 17, "key": "routeros"}, {"count": 9, "key": "adaptive_security_appliance_software"}, {"count": 5, "key": "linux_kernel"}, {"count": 2, "key": "centos"}, {"count": 2, "key": "freebsd"}, {"count": 1, "key": "linux_ami"}], "is_more_than_total_hits": false, "other_count": 1, "query_duration_millis": 28, "total_count": 7781}}}