{"cve_id":"CVE-2025-2129","title":"Mage AI - Insecure Default Authentication Setup","severity":"medium","actively_exploited":false,"patterns":["/api/kernels"],"events":8,"unique_ips":3,"actors":[{"ip":"104.248.117.79","events":4,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"18.153.39.100","events":2,"country_code":"DE","country":"Germany","org":"Amazon.com, Inc.","rdns":"ec2-18-153-39-100.eu-central-1.compute.amazonaws.com","scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"}},{"ip":"206.189.197.143","events":2,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null}],"top_asns":[{"asn":14061,"org":"DigitalOcean, LLC","events":6,"ips":2},{"asn":16509,"org":"Amazon.com, Inc.","events":2,"ips":1}],"fingerprints":{"ja4h":["ge11nn0400_88d30a62b7ad","ge10nn0200_3ed38b250d3d"],"ja4":[]},"sample_paths":["/api/kernels"],"timeline":[{"day":"2026-06-30","events":1,"ips":1},{"day":"2026-07-02","events":2,"ips":2},{"day":"2026-07-03","events":2,"ips":1},{"day":"2026-07-04","events":1,"ips":1},{"day":"2026-07-05","events":2,"ips":1}],"window_hours":168}