{"field": "host.services.port", "buckets": [{"count": 7338, "key": "22"}, {"count": 2700, "key": "443"}, {"count": 2507, "key": "80"}, {"count": 2482, "key": "32080"}, {"count": 2428, "key": "43080"}, {"count": 2300, "key": "40003"}, {"count": 2285, "key": "40801"}, {"count": 2284, "key": "40804"}, {"count": 2281, "key": "40803"}, {"count": 2275, "key": "40810"}, {"count": 887, "key": "123"}, {"count": 612, "key": "8080"}, {"count": 591, "key": "3389"}, {"count": 550, "key": "135"}, {"count": 528, "key": "139"}], "total_count": 13631, "note": "high-port proxy pool 32080/43080/40003/408xx ~2.3k each"}
{"field": "host.services.software.product", "buckets": [{"count": 7688, "key": "openssh"}, {"count": 6325, "key": "openresty"}, {"count": 4776, "key": "tengine"}, {"count": 3348, "key": "nginx"}, {"count": 1025, "key": "http_api"}, {"count": 529, "key": "http_server"}, {"count": 450, "key": "jquery"}, {"count": 432, "key": "express"}, {"count": 326, "key": "bootstrap"}, {"count": 302, "key": "openvpn_access_server"}, {"count": 220, "key": "python"}, {"count": 217, "key": "squid"}], "total_count": 13631}
{"field": "host.labels.value", "buckets": [{"count": 13631, "key": "BULLETPROOF"}, {"count": 99, "key": "IPV6"}], "total_count": 13631}
{"field": "host.services.cert.parsed.issuer.common_name", "buckets": [{"count": 4652, "key": "GlobalSign GCC R3 OV TLS CA 2024"}, {"count": 2439, "key": "localhost"}, {"count": 2367, "key": "prod-vpn.example.com"}, {"count": 2249, "key": "GlobalSign RSA OV SSL CA 2018"}, {"count": 2209, "key": "GlobalSign GCC R46 OV TLS CA 2025"}, {"count": 1208, "key": "Sectigo Public Server Authentication CA DV R36"}, {"count": 542, "key": "WoTrus RSA DV SSL CA 2"}, {"count": 426, "key": "NONE"}, {"count": 350, "key": "YR1"}, {"count": 339, "key": "WIN-9QFKHJ39QE9"}, {"count": 273, "key": "YR2"}, {"count": 247, "key": "QY"}, {"count": 211, "key": "YE1"}, {"count": 209, "key": "YE2"}, {"count": 180, "key": "tls.internal.ypc.org"}], "total_count": 13631}
{"field": "host.operating_system.product", "buckets": [{"count": 6128, "key": "linux"}, {"count": 610, "key": "windows"}, {"count": 68, "key": "routeros"}, {"count": 34, "key": "debian_linux"}, {"count": 33, "key": "ubuntu"}, {"count": 32, "key": "centos"}, {"count": 11, "key": "proxmox"}, {"count": 10, "key": "adaptive_security_appliance_software"}], "total_count": 13631}