{"cve_id":"CVE-2020-13937","title":"Apache Kylin - Exposed Configuration File","severity":"medium","actively_exploited":false,"patterns":["/kylin/api/admin/config"],"events":31,"unique_ips":3,"actors":[{"ip":"130.12.180.77","events":24,"country_code":"NL","country":"The Netherlands","org":"Omegatech LTD","rdns":"","scanner_tag":null},{"ip":"130.12.180.111","events":6,"country_code":"US","country":"United States","org":"Omegatech LTD","rdns":"","scanner_tag":null},{"ip":"101.36.125.58","events":1,"country_code":"HK","country":"Hong Kong","org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","rdns":"","scanner_tag":null}],"top_asns":[{"asn":202412,"org":"Omegatech LTD","events":30,"ips":2},{"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","events":1,"ips":1}],"fingerprints":{"ja4h":["ge11nn0200_fdb5000be5f4","ge11nn0300_0db47b7d240d"],"ja4":["t13i190800_9dc949149365_97f8aa674fd9","t13i131200_f57a46bbacb6_1bd98dace775"]},"sample_paths":["/kylin/api/admin/config"],"timeline":[{"day":"2026-05-15","events":1,"ips":1},{"day":"2026-05-19","events":2,"ips":1},{"day":"2026-05-20","events":4,"ips":1},{"day":"2026-06-27","events":2,"ips":1},{"day":"2026-06-29","events":2,"ips":1},{"day":"2026-06-30","events":3,"ips":1},{"day":"2026-07-01","events":4,"ips":1},{"day":"2026-07-02","events":2,"ips":1},{"day":"2026-07-03","events":5,"ips":1},{"day":"2026-07-04","events":2,"ips":1},{"day":"2026-07-08","events":2,"ips":1},{"day":"2026-07-10","events":2,"ips":1}],"window_hours":2160}