{"ip":"146.190.103.103","total_events":201,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"leakix","confidence":"high","network_type":"CDN","why":["Source IP is in a known scanner range (leakix).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"payload","label":"Sustained payload","detail":"33,404 bytes sent","bytes_sent":33404,"session_seconds":1,"persistent":false}},"first_seen":"2026-04-22T08:08:23","last_seen":"2026-10-04T00:47:10","events_24h":33,"events_7d":129,"geo":{"country_code":"SG","country_name":"Singapore","region":"","city":"Singapore","lat":1.314,"lon":103.6839,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":"d3ecc9518c.scan.leakix.org","known_scanners":["leakix","LeakIX"],"scanner_tag":{"key":"auto:leakix_org","label":"LeakIX","category":"commercial","url":"https://leakix.net"},"cve_matches":[{"cve_id":"CVE-2026-27771","title":"Gitea Container Registry - Unauthorized Private Image Access","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/v2/_catalog"},{"cve_id":"CVE-2007-4556","title":"OpenSymphony XWork/Apache Struts2 - Remote Code Execution","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/login.action"}],"malware":[],"top_ports":[{"port":9591,"proto":"tcp","label":"","count":39},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":33},{"port":80,"proto":"tcp","label":"HTTP","count":33},{"port":8983,"proto":"tcp","label":"Solr","count":32},{"port":10443,"proto":"tcp","label":"","count":32},{"port":2023,"proto":"tcp","label":"","count":32}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131200_f57a46bbacb6_1bd98dace775","t13i131300_f57a46bbacb6_47d1ff9c9a84","t13i131200_f57a46bbacb6_fb48f8b98a29","t13i131000_f57a46bbacb6_e5728521abd4"],"tls_client_hello":"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","tls_ja3":["0d19b15a013ea9e1ae313614888f79f5","14208605ee8a4027cfaf811c4f9b9879","1bc20275bb75de617c2c3628366e80fd","2196848d251b217de8b2c037e356c11d"],"http_akin":["b11cun030_00040011_c91eaf54","b11cuq070_00050817_ae8383eb","b11cun040_00040013_608dab68","b11cun050_00040017_e873236c"]},"fingerprint_peers":{"t13i131200_f57a46bbacb6_1bd98dace775":13,"t13i131300_f57a46bbacb6_47d1ff9c9a84":0,"t13i131200_f57a46bbacb6_fb48f8b98a29":69,"t13i131000_f57a46bbacb6_e5728521abd4":56,"b11cun030_00040011_c91eaf54":625,"b11cuq070_00050817_ae8383eb":69,"b11cun040_00040013_608dab68":4397,"b11cun050_00040017_e873236c":743},"akin_families":{"b11cuq070_00050817_ae8383eb":{"head":"b11cuq070_00050817_ae8383eb","shapes":4,"ips":69},"b11cun050_00040017_e873236c":{"head":"b11cun050_00040017_e873236c","shapes":4,"ips":743}},"user_agents":["Mozilla/5.0 (l9scan/2.0.233313e2338313e2537313e253; +https://leakix.net)","Mozilla/5.0 (l9scan/2.0.435323e21383e2832323e2538313; +https://leakix.net)","Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)","Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)"],"timeline":[{"date":"2026-10-02","count":64},{"date":"2026-10-03","count":32},{"date":"2026-10-04","count":33}],"recent_events":[{"timestamp":"2026-10-04T00:47:10","port":80,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/debug/default/view?panel=config","summary":"","payload_hex":"474554202f64656275672f64656661756c742f766965773f70616e656c3d636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e313330333233653231333833653238333233323365323533383331333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"6af2e500-1d87-4c2b-ac60-97a9d0786ce2","seq":1,"duration_ms":100,"bytes_in":204,"bytes_out":80},{"timestamp":"2026-10-04T00:47:09","port":80,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/?rest_route=/wp/v2/users/","summary":"","payload_hex":"474554202f3f726573745f726f7574653d2f77702f76322f75736572732f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e313330333233653231333833653238333233323365323533383331333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"a34afbdd-8ca6-4356-b1c0-dd437c1bffa5","seq":1,"duration_ms":100,"bytes_in":198,"bytes_out":80},{"timestamp":"2026-10-04T00:47:08","port":80,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"4f5054494f4e53202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e313330333233653231333833653238333233323365323533383331333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"OPTIONS","user_agent":"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"50dc93ba-0e34-446a-96c3-31bdfae9aaad","seq":1,"duration_ms":100,"bytes_in":177,"bytes_out":80},{"timestamp":"2026-10-04T00:47:07","port":80,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.vscode/sftp.json","summary":"","payload_hex":"474554202f2e7673636f64652f736674702e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e313330333233653231333833653238333233323365323533383331333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"3836d70c-3ee7-4b2c-a7af-fbbf9c362acf","seq":1,"duration_ms":100,"bytes_in":190,"bytes_out":80},{"timestamp":"2026-10-04T00:47:06","port":80,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/@vite/env","summary":"","payload_hex":"474554202f40766974652f656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e313330333233653231333833653238333233323365323533383331333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"22d3e5db-f57b-4498-9545-a8137f9cf348","seq":1,"duration_ms":100,"bytes_in":182,"bytes_out":80},{"timestamp":"2026-10-04T00:47:05","port":80,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/trace.axd","summary":"","payload_hex":"474554202f74726163652e61786420485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e313330333233653231333833653238333233323365323533383331333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"e7667eca-ec4c-4519-8fa4-df0fab2f1189","seq":1,"duration_ms":102,"bytes_in":182,"bytes_out":80},{"timestamp":"2026-10-04T00:47:04","port":80,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/actuator/env","summary":"","payload_hex":"474554202f6163747561746f722f656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e313330333233653231333833653238333233323365323533383331333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"050828e6-9442-4865-9501-28e7528ff6ab","seq":1,"duration_ms":100,"bytes_in":185,"bytes_out":80},{"timestamp":"2026-10-04T00:47:03","port":80,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.well-known/security.txt","summary":"","payload_hex":"474554202f2e77656c6c2d6b6e6f776e2f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e313330333233653231333833653238333233323365323533383331333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"a201f94c-da07-47cc-9b96-bac85bf014a9","seq":1,"duration_ms":102,"bytes_in":197,"bytes_out":80},{"timestamp":"2026-10-04T00:47:02","port":80,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/info.php","summary":"","payload_hex":"474554202f696e666f2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e313330333233653231333833653238333233323365323533383331333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"83e9a29e-5089-4c6f-800b-412d3bc99b09","seq":1,"duration_ms":100,"bytes_in":181,"bytes_out":80},{"timestamp":"2026-10-04T00:47:01","port":80,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/telescope/requests","summary":"","payload_hex":"474554202f74656c6573636f70652f726571756573747320485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e313330333233653231333833653238333233323365323533383331333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"2168f8d2-16d6-46e0-a6a5-20db5e967b81","seq":1,"duration_ms":101,"bytes_in":191,"bytes_out":80}],"http_methods":[{"method":"GET","count":153},{"method":"POST","count":30},{"method":"OPTIONS","count":6}],"distinct_ports_total":6,"top_paths":[{"path":"/","count":17,"ports":6},{"path":"/v2/_catalog","count":6,"ports":6},{"path":"/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application","count":6,"ports":6},{"path":"/api","count":6,"ports":6},{"path":"/graphql","count":6,"ports":6},{"path":"/api/gql","count":6,"ports":6},{"path":"/about","count":6,"ports":6},{"path":"/.well-known/security.txt","count":6,"ports":6},{"path":"/@vite/env","count":6,"ports":6},{"path":"/console/","count":6,"ports":6},{"path":"/telescope/requests","count":6,"ports":6},{"path":"/trace.axd","count":6,"ports":6},{"path":"/server","count":6,"ports":6},{"path":"/config.json","count":6,"ports":6},{"path":"/graphql/api","count":6,"ports":6}],"distinct_paths_total":42,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:80","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2026-27771","tag_type":"cve","title":"Gitea Container Registry - Unauthorized Private Image Access","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/v2/_catalog","reference_urls":["https://blog.gitea.com/release-of-1.26.2/","https://github.com/go-gitea/gitea/pull/37290","https://github.com/go-gitea/gitea/pull/37610","https://orca.security/resources/blog/gitea-container-registry-vulnerability/"]},{"tag_id":"CVE-2007-4556","tag_type":"cve","title":"OpenSymphony XWork/Apache Struts2 - Remote Code Execution","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/login.action","reference_urls":["https://www.guildhab.top/?p=2326","https://nvd.nist.gov/vuln/detail/CVE-2007-4556","https://cwiki.apache.org/confluence/display/WW/S2-001","http://forums.opensymphony.com/ann.jspa?annID=54","http://issues.apache.org/struts/browse/WW-2030"]}],"data_as_of":"2026-10-04T15:23:50.131320+00:00"}