{"cve_id":"CVE-2026-27771","title":"Gitea Container Registry - Unauthorized Private Image Access","severity":"high","actively_exploited":false,"patterns":["/v2/_catalog"],"events":3622,"unique_ips":307,"actors":[{"ip":"147.182.213.43","events":70,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"159.89.236.29","events":61,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"95.215.0.144","events":52,"country_code":"RU","country":"Russia","org":"Petersburg Internet Network ltd.","rdns":"scan.f6.security","scanner_tag":{"key":"f6-security","label":"F6 Security","category":"commercial","url":"https://f6.security/"}},{"ip":"167.172.158.249","events":43,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"161.35.113.47","events":42,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"157.230.10.16","events":42,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"146.190.70.246","events":41,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"206.189.197.33","events":41,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"137.184.31.121","events":40,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"134.122.112.94","events":40,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"146.190.209.46","events":40,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"64.227.21.125","events":40,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"tournament.commemorate.dependence.co.nz","scanner_tag":null},{"ip":"204.48.19.79","events":39,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"198.211.106.32","events":39,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"68.183.111.245","events":39,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"147.182.185.175","events":39,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"206.189.230.61","events":39,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"67.205.130.205","events":38,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"206.189.193.127","events":38,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"192.241.143.35","events":37,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"142.93.55.208","events":37,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"165.227.196.13","events":37,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"165.227.200.41","events":36,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"143.198.164.235","events":36,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"scale-test-1779871031033-b7767c5f.mongo.ondigitalocean.com","scanner_tag":{"key":"digitalocean","label":"DigitalOcean","category":"hosting_provider","url":"https://www.digitalocean.com/"}},{"ip":"24.199.82.210","events":36,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"198.199.121.134","events":35,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"146.190.64.87","events":35,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"167.99.151.225","events":34,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"147.182.178.36","events":34,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"159.223.165.107","events":34,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"134.122.21.36","events":34,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"143.198.165.117","events":34,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"198.199.89.181","events":34,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"161.35.5.183","events":34,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"64.227.8.212","events":33,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"165.227.201.85","events":33,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"161.35.124.252","events":33,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"167.99.234.27","events":33,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"167.99.224.66","events":33,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"198.211.110.41","events":32,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"157.245.247.139","events":32,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"143.198.163.156","events":31,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"206.189.229.60","events":31,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"104.248.48.57","events":31,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"157.230.191.30","events":31,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"159.89.51.95","events":31,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"167.71.31.227","events":31,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"157.230.187.192","events":31,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"157.230.7.215","events":31,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"167.99.229.116","events":30,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null}],"top_asns":[{"asn":14061,"org":"DigitalOcean, LLC","events":3497,"ips":296},{"asn":34665,"org":"Petersburg Internet Network ltd.","events":42,"ips":1},{"asn":202425,"org":"IP Volume inc","events":16,"ips":1},{"asn":214664,"org":"JSC Buduschee","events":13,"ips":2},{"asn":44050,"org":"Petersburg Internet Network ltd.","events":10,"ips":1},{"asn":212477,"org":"RoyaleHosting BV","events":4,"ips":1},{"asn":37963,"org":"Hangzhou Alibaba Advertising Co.,Ltd.","events":4,"ips":2},{"asn":31898,"org":"Oracle Corporation","events":1,"ips":1}],"fingerprints":{"ja4h":["ge11nn0300_86b6b04cb9cc","ge11nn0500_2d30dc89d981","ge11nn0400_cf1edba2959c","ge11nn06en_e4773a62bf4c","ge11nn0400_9c3956fad5da","ge11nn0500_cac2c496544b"],"ja4":["t13i131300_f57a46bbacb6_47d1ff9c9a84","t13i130900_f57a46bbacb6_e7c285222651","t13i251000_b78ed14e2fd0_ab7e3b40a677","t13i1010h1_61a7ad8aa9b6_3a8073edd8ef","t13i3012h1_1d37bd780c83_8537cf56674e"]},"sample_paths":["/v2/_catalog"],"timeline":[{"day":"2026-04-29","events":5,"ips":1},{"day":"2026-04-30","events":44,"ips":32},{"day":"2026-05-01","events":49,"ips":37},{"day":"2026-05-02","events":4,"ips":4},{"day":"2026-05-03","events":5,"ips":1},{"day":"2026-05-04","events":9,"ips":5},{"day":"2026-05-05","events":5,"ips":3},{"day":"2026-05-06","events":14,"ips":5},{"day":"2026-05-07","events":27,"ips":6},{"day":"2026-05-08","events":120,"ips":49},{"day":"2026-05-09","events":73,"ips":31},{"day":"2026-05-10","events":71,"ips":17},{"day":"2026-05-11","events":62,"ips":18},{"day":"2026-05-12","events":74,"ips":17},{"day":"2026-05-13","events":61,"ips":7},{"day":"2026-05-14","events":28,"ips":8},{"day":"2026-05-15","events":66,"ips":9},{"day":"2026-05-16","events":46,"ips":8},{"day":"2026-05-17","events":30,"ips":8},{"day":"2026-05-18","events":31,"ips":3},{"day":"2026-05-19","events":51,"ips":16},{"day":"2026-05-20","events":48,"ips":18},{"day":"2026-05-21","events":68,"ips":18},{"day":"2026-05-22","events":42,"ips":16},{"day":"2026-05-23","events":48,"ips":12},{"day":"2026-05-24","events":31,"ips":5},{"day":"2026-05-25","events":62,"ips":14},{"day":"2026-05-26","events":51,"ips":15},{"day":"2026-05-27","events":49,"ips":16},{"day":"2026-05-28","events":52,"ips":11},{"day":"2026-05-29","events":24,"ips":6},{"day":"2026-05-30","events":63,"ips":4},{"day":"2026-05-31","events":44,"ips":7},{"day":"2026-06-01","events":49,"ips":6},{"day":"2026-06-02","events":56,"ips":18},{"day":"2026-06-03","events":76,"ips":20},{"day":"2026-06-04","events":74,"ips":17},{"day":"2026-06-05","events":48,"ips":4},{"day":"2026-06-06","events":23,"ips":9},{"day":"2026-06-07","events":46,"ips":10},{"day":"2026-06-08","events":50,"ips":16},{"day":"2026-06-09","events":36,"ips":7},{"day":"2026-06-10","events":40,"ips":7},{"day":"2026-06-11","events":21,"ips":6},{"day":"2026-06-12","events":43,"ips":5},{"day":"2026-06-13","events":37,"ips":3},{"day":"2026-06-14","events":47,"ips":9},{"day":"2026-06-15","events":37,"ips":12},{"day":"2026-06-16","events":61,"ips":18},{"day":"2026-06-17","events":44,"ips":10},{"day":"2026-06-18","events":57,"ips":4},{"day":"2026-06-19","events":33,"ips":6},{"day":"2026-06-20","events":73,"ips":17},{"day":"2026-06-21","events":44,"ips":16},{"day":"2026-06-22","events":47,"ips":11},{"day":"2026-06-23","events":40,"ips":3},{"day":"2026-06-24","events":27,"ips":10},{"day":"2026-06-25","events":47,"ips":6},{"day":"2026-06-26","events":46,"ips":8},{"day":"2026-06-27","events":31,"ips":12},{"day":"2026-06-28","events":14,"ips":9},{"day":"2026-06-29","events":35,"ips":14},{"day":"2026-06-30","events":41,"ips":6},{"day":"2026-07-01","events":7,"ips":5},{"day":"2026-07-02","events":10,"ips":8},{"day":"2026-07-03","events":31,"ips":14},{"day":"2026-07-04","events":16,"ips":10},{"day":"2026-07-05","events":7,"ips":5},{"day":"2026-07-06","events":4,"ips":2},{"day":"2026-07-07","events":1,"ips":1},{"day":"2026-07-08","events":4,"ips":3},{"day":"2026-07-09","events":10,"ips":7},{"day":"2026-07-10","events":19,"ips":10},{"day":"2026-07-11","events":20,"ips":11},{"day":"2026-07-12","events":5,"ips":5},{"day":"2026-07-13","events":25,"ips":3},{"day":"2026-07-14","events":47,"ips":11},{"day":"2026-07-15","events":38,"ips":17},{"day":"2026-07-16","events":54,"ips":16},{"day":"2026-07-17","events":56,"ips":19},{"day":"2026-07-18","events":50,"ips":5},{"day":"2026-07-19","events":25,"ips":6},{"day":"2026-07-20","events":57,"ips":19},{"day":"2026-07-21","events":69,"ips":21},{"day":"2026-07-22","events":45,"ips":15},{"day":"2026-07-23","events":65,"ips":15},{"day":"2026-07-24","events":45,"ips":5},{"day":"2026-07-25","events":28,"ips":11},{"day":"2026-07-26","events":52,"ips":11},{"day":"2026-07-27","events":52,"ips":12}],"window_hours":2160}