{"ip":"104.23.166.43","data_as_of":"2026-10-20T14:15:01+00:00","observed":true,"total_events":11,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"3 exploit-path hits","confidence":"high","network_type":"CDN","why":["3 request(s) matched a known exploit path.","Requests with a body (POST, PUT, PATCH or DELETE) were seen, which carries a payload.","Under 5 hits, so confidence is medium.","Not in any known-scanner range.","Sent 21,753 bytes, which is sustained payload delivery."],"engagement":{"level":"payload","label":"Sustained payload","detail":"21,753 bytes sent","bytes_sent":21753,"session_seconds":1,"persistent":false},"basis":"first_contact"},"first_seen":"2026-09-30T20:15:58","last_seen":"2026-10-10T05:05:41","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Amsterdam","lat":52.3716,"lon":4.8883,"asn":13335,"org":"Cloudflare, Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as13335","label":"Cloudflare","category":"cdn","url":"https://www.peeringdb.com/asn/13335"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":11}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1312h2_a44d0ee8b3cc_e381dae6da6b"],"tls_client_hello":"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","tls_ja3":["67560f98d68783bd640246df3052c151"],"http_akin":["b11cun126_80040017_1b422348_x379753ab95539f8fdafedf99","b11cun137_80040017_6bc41f41_x379753ab60b695539f8fdafedf99","b11cuq136_80040817_08be568a_x379753ab95539f8fdafedf99"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"b11cun126_80040017_1b422348_x379753ab95539f8fdafedf99":4,"b11cun137_80040017_6bc41f41_x379753ab60b695539f8fdafedf99":8,"b11cuq136_80040817_08be568a_x379753ab95539f8fdafedf99":2,"t13d1312h2_a44d0ee8b3cc_e381dae6da6b":402},"akin_families":{"b11cun126_80040017_1b422348_x379753ab95539f8fdafedf99":{"head":"b11cun126_80040017_1b422348_x379753ab95539f8fdafedf99","shapes":2,"ips":4},"b11cun137_80040017_6bc41f41_x379753ab60b695539f8fdafedf99":{"head":"b11cun116_80040013_c23366f5_x379753ab95539f8fdafedf99","shapes":2,"ips":24},"b11cuq136_80040817_08be568a_x379753ab95539f8fdafedf99":{"head":"b11cun126_80040017_1b422348_x379753ab95539f8fdafedf99","shapes":2,"ips":4}},"user_agents":["cve-2026-87902-poc/1.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-30","count":10},{"date":"2026-10-10","count":1}],"recent_events":[{"timestamp":"2026-10-10T05:05:41","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1; subreqs=1\",\"cf-connecting-ip\":\"45.148.10.201\",\"cf-ew-via\":\"15\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a483176e4c47d919-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\",\"x-forwarded-for\":\"45.148.10.201\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"67560f98d68783bd640246df3052c151","session":"5ba2685f-54c8-4f74-bbf4-15c773788de9","seq":1,"duration_ms":100,"bytes_in":520,"bytes_out":78},{"timestamp":"2026-09-30T20:15:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e71abaf311ed-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/wp-sitemap-posts-page-1.xml","summary":"","payload_hex":"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","method":"GET","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"f10e86c7-6c62-4db4-82ec-b15c63387bc2","seq":4,"duration_ms":490,"bytes_in":1551,"bytes_out":312},{"timestamp":"2026-09-30T20:15:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e71b8e1e11ed-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"0\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/?page_id=907068","summary":"","payload_hex":"504f5354202f3f706167655f69643d39303730363820485454502f312e310d0a782d666f727761726465642d666f723a203139352e3137382e3131302e3234370d0a63662d7261793a20613433356537316238653165313165642d414d530d0a436f6e74656e742d4c656e6774683a20300d0a4163636570743a202a2f2a0d0a557365722d4167656e743a206376652d323032362d38373930322d706f632f312e300d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a203139352e3137382e3131302e3234370d0a43462d4950436f756e7472793a204e4c0d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a486f73743a20736974652e7072696e636875622e636f6d0d0a636f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"POST","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"f10e86c7-6c62-4db4-82ec-b15c63387bc2","seq":5,"duration_ms":619,"bytes_in":1935,"bytes_out":390},{"timestamp":"2026-09-30T20:15:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e71c497f11ed-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a782d666f727761726465642d666f723a203139352e3137382e3131302e3234370d0a557365722d4167656e743a206376652d323032362d38373930322d706f632f312e300d0a63662d7261793a20613433356537316334393766313165642d414d530d0a4163636570743a202a2f2a0d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a203139352e3137382e3131302e3234370d0a43462d4950436f756e7472793a204e4c0d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a486f73743a20736974652e7072696e636875622e636f6d0d0a636f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"f10e86c7-6c62-4db4-82ec-b15c63387bc2","seq":6,"duration_ms":740,"bytes_in":2284,"bytes_out":468},{"timestamp":"2026-09-30T20:15:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e71d1cbf11ed-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/index.php?rest_route=/wp/v2/pages&per_page=100&_fields=id,slug,template","summary":"","payload_hex":"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","method":"GET","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"f10e86c7-6c62-4db4-82ec-b15c63387bc2","seq":7,"duration_ms":861,"bytes_in":2704,"bytes_out":546},{"timestamp":"2026-09-30T20:15:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e71dd83d11ed-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/wp-json/wp/v2/pages?per_page=100&_fields=id,slug,template","summary":"","payload_hex":"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","method":"GET","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"f10e86c7-6c62-4db4-82ec-b15c63387bc2","seq":8,"duration_ms":983,"bytes_in":3110,"bytes_out":624},{"timestamp":"2026-09-30T20:15:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e71e9b2b11ed-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/wp-sitemap-posts-page-1.xml","summary":"","payload_hex":"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","method":"GET","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"f10e86c7-6c62-4db4-82ec-b15c63387bc2","seq":9,"duration_ms":1102,"bytes_in":3486,"bytes_out":702},{"timestamp":"2026-09-30T20:15:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e71f5e5611ed-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"0\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/?page_id=906358","summary":"","payload_hex":"504f5354202f3f706167655f69643d39303633353820485454502f312e310d0a782d666f727761726465642d666f723a203139352e3137382e3131302e3234370d0a63662d7261793a20613433356537316635653536313165642d414d530d0a436f6e74656e742d4c656e6774683a20300d0a4163636570743a202a2f2a0d0a557365722d4167656e743a206376652d323032362d38373930322d706f632f312e300d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a203139352e3137382e3131302e3234370d0a43462d4950436f756e7472793a204e4c0d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a486f73743a20736974652e7072696e636875622e636f6d0d0a636f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"POST","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"f10e86c7-6c62-4db4-82ec-b15c63387bc2","seq":10,"duration_ms":1221,"bytes_in":3870,"bytes_out":780},{"timestamp":"2026-09-30T20:15:58","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e717ff8411ed-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"f10e86c7-6c62-4db4-82ec-b15c63387bc2","seq":1,"duration_ms":100,"bytes_in":349,"bytes_out":78},{"timestamp":"2026-09-30T20:15:58","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e7191c1711ed-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/index.php?rest_route=/wp/v2/pages&per_page=100&_fields=id,slug,template","summary":"","payload_hex":"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","method":"GET","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"f10e86c7-6c62-4db4-82ec-b15c63387bc2","seq":2,"duration_ms":227,"bytes_in":769,"bytes_out":156}],"http_methods":[{"method":"GET","count":9},{"method":"POST","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":3,"ports":1},{"path":"/wp-json/wp/v2/pages?per_page=100&_fields=id,slug,template","count":2,"ports":1},{"path":"/index.php?rest_route=/wp/v2/pages&per_page=100&_fields=id,slug,template","count":2,"ports":1},{"path":"/wp-sitemap-posts-page-1.xml","count":2,"ports":1},{"path":"/?page_id=906358","count":1,"ports":1},{"path":"/?page_id=907068","count":1,"ports":1}],"distinct_paths_total":6,"top_snis":[{"value":"site.princhub.com","count":11}],"top_hosts":[{"value":"site.princhub.com","count":11}],"top_alpns":[{"value":"h2, http/1.1","count":11}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Cdn-Loop","Cf-Connecting-Ip","Cf-Ew-Via","Cf-Ipcountry","Cf-Ray","Cf-Visitor","Connection","Host","User-Agent","X-Forwarded-For","X-Forwarded-Proto"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip, br","notable":false},{"name":"Cdn-Loop","value":"cloudflare; loops=1; subreqs=1","notable":false},{"name":"Cf-Connecting-Ip","value":"45.148.10.201","notable":false},{"name":"Cf-Ew-Via","value":"15","notable":false},{"name":"Cf-Ipcountry","value":"NL","notable":false},{"name":"Cf-Ray","value":"a483176e4c47d919-AMS","notable":false},{"name":"Cf-Visitor","value":"{\"scheme\":\"https\"}","notable":false},{"name":"Connection","value":"Keep-Alive","notable":false},{"name":"Host","value":"site.princhub.com","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","notable":false},{"name":"X-Forwarded-For","value":"45.148.10.201","notable":true},{"name":"X-Forwarded-Proto","value":"https","notable":true}],"distinct_sets":3,"events_with_headers":10},"tags":[]}