Scans for Solana (Surfpool?) Endpoints, (Mon, Aug 10th)

Observed automated scanner activity (User-Agent: HelloScan/1.0) probing web servers for Solana JSON-RPC endpoints by sending POST requests such as `{"jsonrpc":"2.0","id":1,"method":"getHealth"}` to paths like `/solana`, `/jsonrpc`, `/rpc`, `/v1` and enumerating potential credential files (e.g., `/.env`, `/.env.bak`, `/.env.local`). Responses from Surfpool-like development backends return `{"jsonrpc":"2.0","result":"ok","id":1}`; the traffic appears to be reconnaissance/fingerprinting on port 80 (likely assuming a proxy to backend port 8899) rather than active exploitation.