{"ip":"147.182.149.75","total_events":206,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"leakix","confidence":"high","network_type":"CDN","why":["Source IP is in a known scanner range (leakix).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"payload","label":"Sustained payload","detail":"25,821 bytes sent","bytes_sent":25821,"session_seconds":0,"persistent":false}},"first_seen":"2026-03-09T15:12:00","last_seen":"2026-10-06T01:51:08","events_24h":0,"events_7d":62,"geo":{"country_code":"CA","country_name":"Canada","region":"Ontario","city":"Toronto","lat":43.709,"lon":-79.4057,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":"dec04dc34a.scan.leakix.org","known_scanners":["leakix","LeakIX"],"scanner_tag":{"key":"auto:leakix_org","label":"LeakIX","category":"commercial","url":"https://leakix.net"},"cve_matches":[{"cve_id":"CVE-2026-27771","title":"Gitea Container Registry - Unauthorized Private Image Access","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/v2/_catalog"},{"cve_id":"CVE-2007-4556","title":"OpenSymphony XWork/Apache Struts2 - Remote Code Execution","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/login.action"}],"malware":[],"udp":null,"top_ports":[{"port":9056,"proto":"tcp","label":"","count":41},{"port":8000,"proto":"tcp","label":"HTTP-alt","count":39},{"port":3307,"proto":"tcp","label":"","count":32},{"port":5018,"proto":"tcp","label":"","count":32},{"port":6638,"proto":"tcp","label":"","count":32},{"port":443,"proto":"tcp","label":"HTTPS","count":30}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131300_f57a46bbacb6_3b244d8fbcc8","t13i131200_f57a46bbacb6_fb48f8b98a29","t13i131000_f57a46bbacb6_e5728521abd4","t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["0d19b15a013ea9e1ae313614888f79f5","725543c78edf669194c11dc7a039b56e","37b3769f942aae0789e38e380a532088"],"http_akin":["b11cun030_00040011_c91eaf54","b11cuq070_00050817_ae8383eb","b11cun040_00040013_608dab68","b11cun050_00040017_e873236c"]},"fingerprint_peers":{"t13i131300_f57a46bbacb6_3b244d8fbcc8":72,"t13i131200_f57a46bbacb6_fb48f8b98a29":75,"t13i131000_f57a46bbacb6_e5728521abd4":66,"t13i131000_f57a46bbacb6_ab7e3b40a677":3047,"b11cun030_00040011_c91eaf54":713,"b11cuq070_00050817_ae8383eb":75,"b11cun040_00040013_608dab68":4459,"b11cun050_00040017_e873236c":754},"akin_families":{"b11cuq070_00050817_ae8383eb":{"head":"b11cuq070_00050817_ae8383eb","shapes":4,"ips":75},"b11cun050_00040017_e873236c":{"head":"b11cun050_00040017_e873236c","shapes":4,"ips":754}},"user_agents":["Mozilla/5.0 (l9scan/2.0.233313e2338313e2537313e253; +https://leakix.net)","Mozilla/5.0 (l9scan/2.0.634313e2831313e233e2239313; +https://leakix.net)","Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net)","Mozilla/5.0 (l9scan/2.0.134313e26333e24393e23323; +https://leakix.net)","Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)"],"timeline":[{"date":"2026-10-01","count":32},{"date":"2026-10-03","count":32},{"date":"2026-10-04","count":30},{"date":"2026-10-06","count":32}],"recent_events":[{"timestamp":"2026-10-06T01:51:08","port":6638,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6638\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/debug/default/view?panel=config","summary":"","payload_hex":"474554202f64656275672f64656661756c742f766965773f70616e656c3d636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a363633380d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e3733323332336532373333336532343339336532333332333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"1b293845-9754-4f5b-805e-3e69367a8d23","seq":1,"duration_ms":100,"bytes_in":200,"bytes_out":79},{"timestamp":"2026-10-06T01:51:07","port":6638,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6638\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/?rest_route=/wp/v2/users/","summary":"","payload_hex":"474554202f3f726573745f726f7574653d2f77702f76322f75736572732f20485454502f312e310d0a486f73743a20<HONEYPOT>3a363633380d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e3733323332336532373333336532343339336532333332333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"0e09115b-5829-4347-a4a5-e269cb1ac61e","seq":1,"duration_ms":103,"bytes_in":194,"bytes_out":79},{"timestamp":"2026-10-06T01:51:06","port":6638,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6638\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"4f5054494f4e53202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a363633380d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e3733323332336532373333336532343339336532333332333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"OPTIONS","user_agent":"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"02d9aa8b-0261-4a2f-8a3b-8a288c197d36","seq":1,"duration_ms":105,"bytes_in":173,"bytes_out":79},{"timestamp":"2026-10-06T01:51:05","port":6638,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6638\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.vscode/sftp.json","summary":"","payload_hex":"474554202f2e7673636f64652f736674702e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a363633380d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e3733323332336532373333336532343339336532333332333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"f461f435-345a-4262-a015-b1eef97dfb8b","seq":1,"duration_ms":100,"bytes_in":186,"bytes_out":79},{"timestamp":"2026-10-06T01:51:04","port":6638,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6638\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/@vite/env","summary":"","payload_hex":"474554202f40766974652f656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a363633380d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e3733323332336532373333336532343339336532333332333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"f6807e92-0ee6-4dbf-bd4b-d6c025b7d9e6","seq":1,"duration_ms":101,"bytes_in":178,"bytes_out":79},{"timestamp":"2026-10-06T01:51:03","port":6638,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6638\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/trace.axd","summary":"","payload_hex":"474554202f74726163652e61786420485454502f312e310d0a486f73743a20<HONEYPOT>3a363633380d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e3733323332336532373333336532343339336532333332333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"8a2ce8d9-f5c7-4ace-86d1-9a65a510a4d2","seq":1,"duration_ms":149,"bytes_in":178,"bytes_out":79},{"timestamp":"2026-10-06T01:51:02","port":6638,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6638\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/actuator/env","summary":"","payload_hex":"474554202f6163747561746f722f656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a363633380d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e3733323332336532373333336532343339336532333332333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"ce4ef1a4-8ad7-44ac-8a42-79e5954c42a7","seq":1,"duration_ms":158,"bytes_in":181,"bytes_out":79},{"timestamp":"2026-10-06T01:51:01","port":6638,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6638\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.well-known/security.txt","summary":"","payload_hex":"474554202f2e77656c6c2d6b6e6f776e2f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a363633380d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e3733323332336532373333336532343339336532333332333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"657aa2ad-87c3-42b0-a31e-974bdf425075","seq":1,"duration_ms":123,"bytes_in":193,"bytes_out":79},{"timestamp":"2026-10-06T01:51:00","port":6638,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6638\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/info.php","summary":"","payload_hex":"474554202f696e666f2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a363633380d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e3733323332336532373333336532343339336532333332333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"90aed715-4e34-483b-b606-7627246b0874","seq":1,"duration_ms":137,"bytes_in":177,"bytes_out":79},{"timestamp":"2026-10-06T01:50:59","port":6638,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6638\",\"user-agent\":\"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/telescope/requests","summary":"","payload_hex":"474554202f74656c6573636f70652f726571756573747320485454502f312e310d0a486f73743a20<HONEYPOT>3a363633380d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286c397363616e2f322e302e3733323332336532373333336532343339336532333332333b202b68747470733a2f2f6c65616b69782e6e6574290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)","ja3":"37b3769f942aae0789e38e380a532088","session":"e233ee1c-8c2c-4e89-9322-26b6bc4a8249","seq":1,"duration_ms":117,"bytes_in":187,"bytes_out":79}],"http_methods":[{"method":"GET","count":159},{"method":"POST","count":30},{"method":"OPTIONS","count":6}],"distinct_ports_total":6,"top_paths":[{"path":"/","count":16,"ports":6},{"path":"/.git/config","count":6,"ports":6},{"path":"/api/graphql","count":6,"ports":6},{"path":"/api","count":6,"ports":6},{"path":"/graphql","count":6,"ports":6},{"path":"/api/gql","count":6,"ports":6},{"path":"/about","count":6,"ports":6},{"path":"/debug/default/view?panel=config","count":6,"ports":6},{"path":"/@vite/env","count":6,"ports":6},{"path":"/console/","count":6,"ports":6},{"path":"/?rest_route=/wp/v2/users/","count":6,"ports":6},{"path":"/trace.axd","count":6,"ports":6},{"path":"/server","count":6,"ports":6},{"path":"/config.json","count":6,"ports":6},{"path":"/graphql/api","count":6,"ports":6}],"distinct_paths_total":44,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:6638","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2026-27771","tag_type":"cve","title":"Gitea Container Registry - Unauthorized Private Image Access","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/v2/_catalog","reference_urls":["https://blog.gitea.com/release-of-1.26.2/","https://github.com/go-gitea/gitea/pull/37290","https://github.com/go-gitea/gitea/pull/37610","https://orca.security/resources/blog/gitea-container-registry-vulnerability/"]},{"tag_id":"CVE-2007-4556","tag_type":"cve","title":"OpenSymphony XWork/Apache Struts2 - Remote Code Execution","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/login.action","reference_urls":["https://www.guildhab.top/?p=2326","https://nvd.nist.gov/vuln/detail/CVE-2007-4556","https://cwiki.apache.org/confluence/display/WW/S2-001","http://forums.opensymphony.com/ann.jspa?annID=54","http://issues.apache.org/struts/browse/WW-2030"]}],"data_as_of":"2026-10-10T05:33:53.212910+00:00"}