{"ip":"172.71.182.244","data_as_of":"2026-10-20T14:15:49+00:00","observed":true,"total_events":11,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"3 exploit-path hits","confidence":"high","network_type":"CDN","why":["3 request(s) matched a known exploit path.","Requests with a body (POST, PUT, PATCH or DELETE) were seen, which carries a payload.","Under 5 hits, so confidence is medium.","Not in any known-scanner range.","Sent 21,604 bytes, which is sustained payload delivery."],"engagement":{"level":"payload","label":"Sustained payload","detail":"21,604 bytes sent","bytes_sent":21604,"session_seconds":1,"persistent":false},"basis":"first_contact"},"first_seen":"2026-09-30T20:15:58","last_seen":"2026-10-10T04:45:46","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Amsterdam","lat":52.3716,"lon":4.8883,"asn":13335,"org":"Cloudflare, Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as13335","label":"Cloudflare","category":"cdn","url":"https://www.peeringdb.com/asn/13335"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":11}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1312h2_a44d0ee8b3cc_e381dae6da6b"],"tls_client_hello":"1603010200010001fc03032477538d8dcbfd0217f188ccc09c1f83b9bdaee05b6e52aa5594f0e3acf5c9ca2041ae2bb5af2471f2f9140ff53b1241338621cd675c5dfe56140bb01810ed6fc2001a130113021303c02bc02cc02fc030c013009c009d002f0035000a01000199000000160014000011736974652e7072696e636875622e636f6d00170000ff01000100000a0010000e001d00170018001911ec6399fe32000b00020100002300000010000e000c02683208687474702f312e31000d0018001609040403080404010503080505010806060102010603003300260024001d002021b210d4523ad2a5b3dfb9bac286b5bcba1f609fc34c846f2828883c7554da53002d00020101002b0009080304030303020301001500e90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","tls_ja3":["67560f98d68783bd640246df3052c151"],"http_akin":["b11cun126_80040017_1b422348_x379753ab95539f8fdafedf99","b11cun116_80040013_c23366f5_x379753ab95539f8fdafedf99","b11cuq136_80040817_08be568a_x379753ab95539f8fdafedf99"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13d1312h2_a44d0ee8b3cc_e381dae6da6b":402,"b11cun126_80040017_1b422348_x379753ab95539f8fdafedf99":4,"b11cun116_80040013_c23366f5_x379753ab95539f8fdafedf99":24,"b11cuq136_80040817_08be568a_x379753ab95539f8fdafedf99":2},"akin_families":{"b11cun126_80040017_1b422348_x379753ab95539f8fdafedf99":{"head":"b11cun126_80040017_1b422348_x379753ab95539f8fdafedf99","shapes":2,"ips":4},"b11cun116_80040013_c23366f5_x379753ab95539f8fdafedf99":{"head":"b11cun116_80040013_c23366f5_x379753ab95539f8fdafedf99","shapes":2,"ips":24},"b11cuq136_80040817_08be568a_x379753ab95539f8fdafedf99":{"head":"b11cun126_80040017_1b422348_x379753ab95539f8fdafedf99","shapes":2,"ips":4}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","cve-2026-87902-poc/1.0"],"timeline":[{"date":"2026-09-30","count":10},{"date":"2026-10-10","count":1}],"recent_events":[{"timestamp":"2026-10-10T04:45:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"45.148.10.201\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a482fa3fbed093be-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\",\"x-forwarded-for\":\"45.148.10.201\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"48454144202f20485454502f312e310d0a782d666f727761726465642d666f723a2034352e3134382e31302e3230310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a63662d7261793a20613438326661336662656430393362652d414d530d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a2034352e3134382e31302e3230310d0a43462d4950436f756e7472793a204e4c0d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a486f73743a20736974652e7072696e636875622e636f6d0d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"HEAD","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"67560f98d68783bd640246df3052c151","session":"de6e911d-46b4-4100-bd7f-648c43c89a73","seq":1,"duration_ms":100,"bytes_in":371,"bytes_out":79},{"timestamp":"2026-09-30T20:15:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e71ae830d593-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/wp-sitemap-posts-page-1.xml","summary":"","payload_hex":"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","method":"GET","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"35f26117-a802-48de-b7aa-1d4f18866410","seq":4,"duration_ms":483,"bytes_in":1551,"bytes_out":316},{"timestamp":"2026-09-30T20:15:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e71bbb41d593-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"0\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/?page_id=906680","summary":"","payload_hex":"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","method":"POST","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"35f26117-a802-48de-b7aa-1d4f18866410","seq":5,"duration_ms":610,"bytes_in":1935,"bytes_out":395},{"timestamp":"2026-09-30T20:15:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e71c6e2cd593-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"35f26117-a802-48de-b7aa-1d4f18866410","seq":6,"duration_ms":728,"bytes_in":2284,"bytes_out":474},{"timestamp":"2026-09-30T20:15:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e71d28f1d593-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/index.php?rest_route=/wp/v2/pages&per_page=100&_fields=id,slug,template","summary":"","payload_hex":"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","method":"GET","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"35f26117-a802-48de-b7aa-1d4f18866410","seq":7,"duration_ms":846,"bytes_in":2704,"bytes_out":553},{"timestamp":"2026-09-30T20:15:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e71dec0dd593-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/wp-json/wp/v2/pages?per_page=100&_fields=id,slug,template","summary":"","payload_hex":"474554202f77702d6a736f6e2f77702f76322f70616765733f7065725f706167653d313030265f6669656c64733d69642c736c75672c74656d706c61746520485454502f312e310d0a782d666f727761726465642d666f723a203139352e3137382e3131302e3234370d0a557365722d4167656e743a206376652d323032362d38373930322d706f632f312e300d0a63662d7261793a20613433356537316465633064643539332d414d530d0a4163636570743a202a2f2a0d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a203139352e3137382e3131302e3234370d0a43462d4950436f756e7472793a204e4c0d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a486f73743a20736974652e7072696e636875622e636f6d0d0a636f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"35f26117-a802-48de-b7aa-1d4f18866410","seq":8,"duration_ms":963,"bytes_in":3110,"bytes_out":632},{"timestamp":"2026-09-30T20:15:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e71eaeadd593-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/wp-sitemap-posts-page-1.xml","summary":"","payload_hex":"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","method":"GET","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"35f26117-a802-48de-b7aa-1d4f18866410","seq":9,"duration_ms":1081,"bytes_in":3486,"bytes_out":711},{"timestamp":"2026-09-30T20:15:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e71f695fd593-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"0\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/?page_id=906613","summary":"","payload_hex":"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","method":"POST","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"35f26117-a802-48de-b7aa-1d4f18866410","seq":10,"duration_ms":1202,"bytes_in":3870,"bytes_out":790},{"timestamp":"2026-09-30T20:15:58","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e7181dc8d593-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a782d666f727761726465642d666f723a203139352e3137382e3131302e3234370d0a557365722d4167656e743a206376652d323032362d38373930322d706f632f312e300d0a63662d7261793a20613433356537313831646338643539332d414d530d0a4163636570743a202a2f2a0d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a203139352e3137382e3131302e3234370d0a43462d4950436f756e7472793a204e4c0d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a486f73743a20736974652e7072696e636875622e636f6d0d0a636f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"35f26117-a802-48de-b7aa-1d4f18866410","seq":1,"duration_ms":100,"bytes_in":349,"bytes_out":79},{"timestamp":"2026-09-30T20:15:58","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"195.178.110.247\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a435e7195a4ed593-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"host\":\"site.princhub.com\",\"user-agent\":\"cve-2026-87902-poc/1.0\",\"x-forwarded-for\":\"195.178.110.247\",\"x-forwarded-proto\":\"https\"}","body":"","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/index.php?rest_route=/wp/v2/pages&per_page=100&_fields=id,slug,template","summary":"","payload_hex":"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","method":"GET","user_agent":"cve-2026-87902-poc/1.0","ja3":"67560f98d68783bd640246df3052c151","session":"35f26117-a802-48de-b7aa-1d4f18866410","seq":2,"duration_ms":231,"bytes_in":769,"bytes_out":158}],"http_methods":[{"method":"GET","count":8},{"method":"POST","count":2},{"method":"HEAD","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":3,"ports":1},{"path":"/wp-json/wp/v2/pages?per_page=100&_fields=id,slug,template","count":2,"ports":1},{"path":"/index.php?rest_route=/wp/v2/pages&per_page=100&_fields=id,slug,template","count":2,"ports":1},{"path":"/wp-sitemap-posts-page-1.xml","count":2,"ports":1},{"path":"/?page_id=906680","count":1,"ports":1},{"path":"/?page_id=906613","count":1,"ports":1}],"distinct_paths_total":6,"top_snis":[{"value":"site.princhub.com","count":11}],"top_hosts":[{"value":"site.princhub.com","count":11}],"top_alpns":[{"value":"h2, http/1.1","count":11}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Cdn-Loop","Cf-Connecting-Ip","Cf-Ipcountry","Cf-Ray","Cf-Visitor","Connection","Content-Length","Host","User-Agent","X-Forwarded-For","X-Forwarded-Proto"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, br","notable":false},{"name":"Cdn-Loop","value":"cloudflare; loops=1","notable":false},{"name":"Cf-Connecting-Ip","value":"195.178.110.247","notable":false},{"name":"Cf-Ipcountry","value":"NL","notable":false},{"name":"Cf-Ray","value":"a435e71bbb41d593-AMS","notable":false},{"name":"Cf-Visitor","value":"{\"scheme\":\"https\"}","notable":false},{"name":"Connection","value":"Keep-Alive","notable":false},{"name":"Content-Length","value":"0","notable":false},{"name":"Host","value":"site.princhub.com","notable":false},{"name":"User-Agent","value":"cve-2026-87902-poc/1.0","notable":false},{"name":"X-Forwarded-For","value":"195.178.110.247","notable":true},{"name":"X-Forwarded-Proto","value":"https","notable":true}],"distinct_sets":3,"events_with_headers":10},"tags":[]}