{"ip":"104.22.101.150","data_as_of":"2026-10-20T15:59:51+00:00","observed":true,"total_events":3,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["3 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"3,786 bytes sent","bytes_sent":3786,"session_seconds":1,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-04T07:49:59","last_seen":"2026-10-04T07:50:00","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Ashburn","lat":39.0469,"lon":-77.4903,"asn":13335,"org":"Cloudflare, Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as13335","label":"Cloudflare","category":"cdn","url":"https://www.peeringdb.com/asn/13335"},"cve_matches":[{"cve_id":"CVE-2026-82329","title":"JFrog Artifactory Access Blank Join Key Authentication Bypass","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/access/api/v1/registry/join","kev_date_added":"2026-09-02"},{"cve_id":"CVE-2026-42018","title":"JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth Bypass","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/access/api/v1/aws/token","kev_date_added":"2026-09-11"}],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1312h2_a44d0ee8b3cc_e381dae6da6b"],"tls_client_hello":"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","tls_ja3":["67560f98d68783bd640246df3052c151"],"http_akin":["b11cuq167_8005081f_2349bed7_x379753ab60b695539f8fdafedf99","b11cun147_8004001f_2fc6c993_x379753ab60b695539f8fdafedf99"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13d1312h2_a44d0ee8b3cc_e381dae6da6b":402,"b11cuq167_8005081f_2349bed7_x379753ab60b695539f8fdafedf99":1,"b11cun147_8004001f_2fc6c993_x379753ab60b695539f8fdafedf99":4},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-04","count":3}],"recent_events":[{"timestamp":"2026-10-04T07:50:00","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip, br\",\"accept-language\":\"en-US,en;q=0.9\",\"cdn-loop\":\"cloudflare; loops=1; subreqs=1\",\"cf-connecting-ip\":\"20.55.50.69\",\"cf-ew-via\":\"15\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a45297dd7a97ecd2-IAD\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"2\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36\",\"x-forwarded-for\":\"20.55.50.69\",\"x-forwarded-proto\":\"https\"}","body":"{}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/access/api/v1/aws/token/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","ja3":"67560f98d68783bd640246df3052c151","session":"8f3843bf-34a3-4ded-9ce7-0110b00cb429","seq":2,"duration_ms":999,"bytes_in":1176,"bytes_out":158},{"timestamp":"2026-10-04T07:50:00","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip, br\",\"accept-language\":\"en-US,en;q=0.9\",\"cdn-loop\":\"cloudflare; loops=1; subreqs=1\",\"cf-connecting-ip\":\"20.55.50.69\",\"cf-ew-via\":\"15\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a45297deeca0ecd2-IAD\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"261\",\"content-type\":\"text/plain\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36\",\"x-forwarded-for\":\"20.55.50.69\",\"x-forwarded-proto\":\"https\"}","body":"eyJhbGciOiJIUzI1NiIsImtpZCI6ImUzYjBjNDQyOThmYzFjMTQ5YWZiZjRjODk5NmZiOTI0MjdhZTQxZTQ2NDliOTM0Y2E0OTU5OTFiNzg1MmI4NTUifQ.eyJzZXJ2aWNlX2lkIjoic3ZjNzg0MDk4Iiwic2tpcF9ub2RlX3JlZ2lzdHJhdGlvbiI6dHJ1ZSwiaWF0IjoxNzkxMTAwMjAwfQ.m45_rby6niNCIGu3Fpp4y-kAMhw-LFRojPUVS0OHs8M","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/access/api/v1/registry/join","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","ja3":"67560f98d68783bd640246df3052c151","session":"8f3843bf-34a3-4ded-9ce7-0110b00cb429","seq":3,"duration_ms":1226,"bytes_in":2061,"bytes_out":237},{"timestamp":"2026-10-04T07:49:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip, br\",\"accept-language\":\"en-US,en;q=0.9\",\"cdn-loop\":\"cloudflare; loops=1; subreqs=1\",\"cf-connecting-ip\":\"20.55.50.69\",\"cf-ew-via\":\"15\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a45297d5daddecd2-IAD\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36\",\"x-forwarded-for\":\"20.55.50.69\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","ja3":"67560f98d68783bd640246df3052c151","session":"8f3843bf-34a3-4ded-9ce7-0110b00cb429","seq":1,"duration_ms":100,"bytes_in":549,"bytes_out":79}],"http_methods":[{"method":"POST","count":2},{"method":"GET","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1},{"path":"/access/api/v1/registry/join","count":1,"ports":1},{"path":"/access/api/v1/aws/token/","count":1,"ports":1}],"distinct_paths_total":3,"top_snis":[{"value":"site.princhub.com","count":3}],"top_hosts":[{"value":"site.princhub.com","count":3}],"top_alpns":[{"value":"h2, http/1.1","count":3}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Cdn-Loop","Cf-Connecting-Ip","Cf-Ew-Via","Cf-Ipcountry","Cf-Ray","Cf-Visitor","Connection","Content-Length","Content-Type","Host","User-Agent","X-Forwarded-For","X-Forwarded-Proto"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip, br","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Cdn-Loop","value":"cloudflare; loops=1; subreqs=1","notable":false},{"name":"Cf-Connecting-Ip","value":"20.55.50.69","notable":false},{"name":"Cf-Ew-Via","value":"15","notable":false},{"name":"Cf-Ipcountry","value":"US","notable":false},{"name":"Cf-Ray","value":"a45297dd7a97ecd2-IAD","notable":false},{"name":"Cf-Visitor","value":"{\"scheme\":\"https\"}","notable":false},{"name":"Connection","value":"Keep-Alive","notable":false},{"name":"Content-Length","value":"2","notable":false},{"name":"Content-Type","value":"application/json","notable":true},{"name":"Host","value":"site.princhub.com","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","notable":false},{"name":"X-Forwarded-For","value":"20.55.50.69","notable":true},{"name":"X-Forwarded-Proto","value":"https","notable":true}],"distinct_sets":2,"events_with_headers":3},"tags":[{"tag_id":"CVE-2026-82329","tag_type":"cve","title":"JFrog Artifactory Access Blank Join Key Authentication Bypass","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/access/api/v1/registry/join","reference_urls":["https://jfrog.com/help/r/jfrog-release-information/artifactory-security-fixes","https://www.pruva.dev/reproductions/REPRO-2026-00341"],"kev_date_added":"2026-09-02"},{"tag_id":"CVE-2026-42018","tag_type":"cve","title":"JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth Bypass","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/access/api/v1/aws/token","reference_urls":["https://docs.jfrog.com/releases/docs/jfrog-security-advisories","https://www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-4201","https://github.com/BL0odz/JFrog_CVE-2026-65615-ByGLM","https://edrabb.fr/posts/full-chain-preauth-rce-jfrog-artifactory/","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42018"],"kev_date_added":"2026-09-11"}]}