/login/?login_only=1  -- cPanel login probe, HOSTKEY, port 2086
/openid_connect/cpanelid  -- cPanel OpenID probe, HOSTKEY, port 2086
/api/client/update?arch=amd64&commit=08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17&os=windows  -- C2 beacon, FlokiNET, port 443
/images/json?  -- Docker API enumeration (go-dockerclient), KAOPU-HK, ports 2375/2376/4243
/debug/pprof  -- pprof endpoint exposed on riptide scanner, Pfcloud, port 666