{"cve_id":"CVE-2020-26413","title":"Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure","severity":"medium","actively_exploited":false,"patterns":["/api/graphql"],"events":166,"unique_ips":72,"actors":[{"ip":"179.43.163.26","events":9,"country_code":"CH","country":"Switzerland","org":"Private Layer INC","rdns":"hosted-by.privatelayer.com","scanner_tag":null},{"ip":"207.154.197.113","events":5,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"bf57ea116e.scan.leakix.org","scanner_tag":null},{"ip":"167.172.158.128","events":5,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"d5904e1cdf.scan.leakix.org","scanner_tag":null},{"ip":"167.99.181.249","events":5,"country_code":"CA","country":"Canada","org":"DigitalOcean, LLC","rdns":"b781e0bb13.scan.leakix.org","scanner_tag":null},{"ip":"139.59.136.184","events":4,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"c3ee778768.scan.leakix.org","scanner_tag":null},{"ip":"167.172.232.142","events":4,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"cd1a65400e.scan.leakix.org","scanner_tag":null},{"ip":"209.38.208.202","events":4,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"ac09637315.scan.leakix.org","scanner_tag":null},{"ip":"46.101.1.225","events":4,"country_code":"GB","country":"United Kingdom","org":"DigitalOcean, LLC","rdns":"b812f4218d.scan.leakix.org","scanner_tag":null},{"ip":"64.226.65.160","events":4,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"a46db02ec6.scan.leakix.org","scanner_tag":null},{"ip":"38.127.60.25","events":4,"country_code":"US","country":"United States","org":"Enzu Inc","rdns":"25.60-127-38.rdns.scalabledns.com","scanner_tag":null},{"ip":"159.65.18.197","events":3,"country_code":"GB","country":"United Kingdom","org":"DigitalOcean, LLC","rdns":"a6efafe308.scan.leakix.org","scanner_tag":null},{"ip":"143.110.217.244","events":3,"country_code":"CA","country":"Canada","org":"DigitalOcean, LLC","rdns":"a1b2bc4e35.scan.leakix.org","scanner_tag":null},{"ip":"207.154.212.47","events":3,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"a4d39b522e.scan.leakix.org","scanner_tag":null},{"ip":"164.92.244.132","events":3,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"ffc5722872.scan.leakix.org","scanner_tag":null},{"ip":"206.81.12.187","events":3,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"bf99e5305e.scan.leakix.org","scanner_tag":null},{"ip":"157.245.105.107","events":3,"country_code":"IN","country":"India","org":"DigitalOcean, LLC","rdns":"f894f8ec11.scan.leakix.org","scanner_tag":null},{"ip":"68.183.9.16","events":3,"country_code":"NL","country":"The Netherlands","org":"DigitalOcean, LLC","rdns":"fafb352f31.scan.leakix.org","scanner_tag":null},{"ip":"139.59.132.8","events":3,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"a113ac0491.scan.leakix.org","scanner_tag":null},{"ip":"165.227.39.235","events":3,"country_code":"CA","country":"Canada","org":"DigitalOcean, LLC","rdns":"c53df711d7.scan.leakix.org","scanner_tag":null},{"ip":"206.81.24.227","events":3,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"b59bc1c6ef.scan.leakix.org","scanner_tag":null},{"ip":"206.189.233.36","events":3,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"a957d52272.scan.leakix.org","scanner_tag":null},{"ip":"64.225.75.246","events":3,"country_code":"NL","country":"The Netherlands","org":"DigitalOcean, LLC","rdns":"b32f2b056d.scan.leakix.org","scanner_tag":null},{"ip":"206.189.95.232","events":3,"country_code":"SG","country":"Singapore","org":"DigitalOcean, LLC","rdns":"e81def74b5.scan.leakix.org","scanner_tag":null},{"ip":"157.230.19.140","events":3,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"d9fc35a06b.scan.leakix.org","scanner_tag":null},{"ip":"64.23.218.208","events":3,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"ed93d36780.scan.leakix.org","scanner_tag":null},{"ip":"209.97.180.8","events":3,"country_code":"GB","country":"United Kingdom","org":"DigitalOcean, LLC","rdns":"a0d8574844.scan.leakix.org","scanner_tag":null},{"ip":"142.93.129.190","events":3,"country_code":"NL","country":"The Netherlands","org":"DigitalOcean, LLC","rdns":"f20a02ce01.scan.leakix.org","scanner_tag":null},{"ip":"138.68.82.23","events":2,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"e154df25ea.scan.leakix.org","scanner_tag":null},{"ip":"134.122.28.88","events":2,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"e9b8e372f1.scan.leakix.org","scanner_tag":null},{"ip":"146.190.63.248","events":2,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"aaedd5bcff.scan.leakix.org","scanner_tag":null},{"ip":"46.101.111.185","events":2,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"ffaffaab3a.scan.leakix.org","scanner_tag":null},{"ip":"165.22.235.3","events":2,"country_code":"CA","country":"Canada","org":"DigitalOcean, LLC","rdns":"d9b49875ee.scan.leakix.org","scanner_tag":null},{"ip":"163.7.5.166","events":2,"country_code":"ID","country":"Indonesia","org":"Byteplus Pte. Ltd.","rdns":"","scanner_tag":null},{"ip":"134.209.25.199","events":2,"country_code":"GB","country":"United Kingdom","org":"DigitalOcean, LLC","rdns":"f952b6ebb7.scan.leakix.org","scanner_tag":null},{"ip":"164.90.228.79","events":2,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"fee8d5bfdc.scan.leakix.org","scanner_tag":null},{"ip":"206.189.2.13","events":2,"country_code":"NL","country":"The Netherlands","org":"DigitalOcean, LLC","rdns":"fb65c10da2.scan.leakix.org","scanner_tag":null},{"ip":"164.92.107.174","events":2,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"dd761bf4f4.scan.leakix.org","scanner_tag":null},{"ip":"159.89.174.87","events":2,"country_code":"IN","country":"India","org":"DigitalOcean, LLC","rdns":"f8fb72f228.scan.leakix.org","scanner_tag":null},{"ip":"178.128.207.138","events":2,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"eab9c05722.scan.leakix.org","scanner_tag":null},{"ip":"165.22.34.189","events":2,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"a36d657dc7.scan.leakix.org","scanner_tag":null},{"ip":"146.190.242.161","events":2,"country_code":"CA","country":"Canada","org":"DigitalOcean, LLC","rdns":"a28759fb9c.scan.leakix.org","scanner_tag":null},{"ip":"167.99.182.39","events":2,"country_code":"CA","country":"Canada","org":"DigitalOcean, LLC","rdns":"c8e7cbf86a.scan.leakix.org","scanner_tag":null},{"ip":"206.189.19.19","events":2,"country_code":"GB","country":"United Kingdom","org":"DigitalOcean, LLC","rdns":"b37662257c.scan.leakix.org","scanner_tag":null},{"ip":"164.90.208.56","events":2,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"a6b22d76dd.scan.leakix.org","scanner_tag":null},{"ip":"157.245.113.227","events":2,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"dc16f0d67a.scan.leakix.org","scanner_tag":null},{"ip":"167.99.210.137","events":2,"country_code":"NL","country":"The Netherlands","org":"DigitalOcean, LLC","rdns":"b2dcc8edcd.scan.leakix.org","scanner_tag":null},{"ip":"159.89.12.166","events":2,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"c5d51acfea.scan.leakix.org","scanner_tag":null},{"ip":"165.227.173.41","events":2,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"d559d155e9.scan.leakix.org","scanner_tag":null},{"ip":"138.68.86.32","events":2,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"b69efeaf93.scan.leakix.org","scanner_tag":null},{"ip":"64.227.32.66","events":1,"country_code":"GB","country":"United Kingdom","org":"DigitalOcean, LLC","rdns":"d103188940.scan.leakix.org","scanner_tag":null}],"top_asns":[{"asn":14061,"org":"DigitalOcean, LLC","events":146,"ips":64},{"asn":51852,"org":"Private Layer INC","events":9,"ips":1},{"asn":18978,"org":"Enzu Inc","events":4,"ips":1},{"asn":150436,"org":"Byteplus Pte. Ltd.","events":2,"ips":1},{"asn":211590,"org":"Bucklog SARL","events":1,"ips":1},{"asn":200373,"org":"3xK Tech GmbH","events":1,"ips":1},{"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","events":1,"ips":1},{"asn":8075,"org":"Microsoft Corporation","events":1,"ips":1},{"asn":45102,"org":"Alibaba (US) Technology Co., Ltd.","events":1,"ips":1}],"fingerprints":{"ja4h":["po11nn0700_1cd7ee9bf867","po11nn0500_b4ba55311b46","he11nn0200_3ed38b250d3d","po11nn0600_36b368ee4bc7","po11nn07en_421b215d3788","ge11nn0300_042112399351"],"ja4":["t13i3111h2_e8f1e7e78f70_b26ce05bbdd6","t13i131300_f57a46bbacb6_47d1ff9c9a84","t13i3111h2_e8f1e7e78f70_8d633dac7124","t13i091000_f91f431d341e_ab7e3b40a677","t13i131000_f57a46bbacb6_ab7e3b40a677"]},"sample_paths":["/api/graphql"],"timeline":[{"day":"2026-04-30","events":39,"ips":31},{"day":"2026-05-01","events":49,"ips":37},{"day":"2026-05-02","events":4,"ips":4},{"day":"2026-05-08","events":52,"ips":39},{"day":"2026-05-15","events":1,"ips":1},{"day":"2026-06-02","events":2,"ips":1},{"day":"2026-06-10","events":2,"ips":2},{"day":"2026-06-11","events":7,"ips":1},{"day":"2026-06-14","events":1,"ips":1},{"day":"2026-06-15","events":2,"ips":1},{"day":"2026-07-06","events":1,"ips":1},{"day":"2026-07-08","events":2,"ips":1},{"day":"2026-07-09","events":2,"ips":1},{"day":"2026-07-15","events":1,"ips":1},{"day":"2026-07-26","events":1,"ips":1}],"window_hours":2160}