64898b2c79
Some checks failed
Code scanning / CodeQL (push) Failing after 15s
Zulip production suite / Ubuntu 22.04 production build (push) Failing after 26s
Zulip production suite / Debian 12 production install with custom db name and user (push) Has been skipped
Zulip production suite / Ubuntu 22.04 production install and PostgreSQL upgrade with pgroonga (push) Has been skipped
Zulip production suite / Ubuntu 24.04 production install (push) Has been skipped
Zulip production suite / Ubuntu 26.04 production install (push) Has been skipped
Zulip production suite / Debian 13 production install (push) Has been skipped
Zulip production suite / 7.0 Version Upgrade (push) Has been skipped
Zulip production suite / 8.0 Version Upgrade (push) Has been skipped
Zulip production suite / 6.0 Version Upgrade (push) Has been skipped
Zulip production suite / 10.0 Version Upgrade (push) Has been skipped
Zulip production suite / 9.0 Version Upgrade (push) Has been skipped
Zulip production suite / 12.0 Version Upgrade (push) Has been skipped
Zulip production suite / 11.0 Version Upgrade (push) Has been skipped
GitHub Actions Security Analysis with zizmor / zizmor (push) Failing after 3s
Zulip CI / Debian 12 (Python 3.11, backend + documentation) (push) Failing after 26s
Zulip CI / Ubuntu 22.04 (Python 3.10, backend + frontend) (push) Failing after 3s
Zulip CI / Ubuntu 24.04 (Python 3.12, backend) (push) Failing after 25s
Zulip CI / Ubuntu 26.04 (Python 3.14, backend) (push) Failing after 25s
Zulip CI / Debian 13 (Python 3.13, backend) (push) Failing after 28s
Zulip production suite / Required jobs (push) Has been cancelled
Zulip CI / Required jobs (push) Has been cancelled
API Documentation Update Check / check-feature-level-updated (push) Has been cancelled
API Documentation Update Check / notify-if-api-docs-changed (push) Has been cancelled
49 lines
962 B
JSON
49 lines
962 B
JSON
{
|
|
"Token": "ew5n8gqtb82m4uegrttarn2zu",
|
|
"Intro": "A Remote Web Image Canarytoken has been triggered over web-image by the source IP 1.1.1.1.",
|
|
"Description": "Remote Web Image",
|
|
"Triggered": 37,
|
|
"AdditionalDetails": [
|
|
[
|
|
"Accept",
|
|
"image/webp,*/*"
|
|
],
|
|
[
|
|
"Accept-Encoding",
|
|
"gzip, deflate"
|
|
],
|
|
[
|
|
"Accept-Language",
|
|
"en-US,en;q=0.5"
|
|
],
|
|
[
|
|
"Background Context",
|
|
"You have had 12 incidents from 1.1.1.1 previously."
|
|
],
|
|
[
|
|
"Cache-Control",
|
|
"max-age=0"
|
|
],
|
|
[
|
|
"Connection",
|
|
"keep-alive"
|
|
],
|
|
[
|
|
"Dnt",
|
|
"1"
|
|
],
|
|
[
|
|
"Dst Port",
|
|
80
|
|
],
|
|
[
|
|
"User-Agent",
|
|
"Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0"
|
|
]
|
|
],
|
|
"Timestamp": "2020-07-20 16:33:12 (UTC)",
|
|
"Reminder": "test image",
|
|
"IncidentHash": "533395067f6d655cd19384bc6991cc0f",
|
|
"AlertType": "CanarytokenIncident"
|
|
}
|