Incident Report — PDHPI

Generated 2026-09-28 06:47:40 · 8 events · Polymorphic Dual Hyper-Predictive Infrastructure

Summary

Total
8
Blocked
6
Cleared
1
Countries
6

Active wrapper

Envelope
B
Padding
1024 B
Framing
delimiter
Rotations
4

Prediction engine

Made
23
Hits
1
Standing
2
Hit rate
4.3%

Event log

TimeSourceCCMethodPathRuleScore
06:01:3489.248.165.74NLGET/api/v1/registryscan.enum+3
06:01:34200.68.14.55BRGET/api/v1/registry/42auth.cross+6
06:01:345.188.206.14RUGET/adminscan.admin+6
06:01:34172.104.11.99USGET/api/search?q=coffee——
06:01:34200.68.14.55BRGET/api/v1/registry/42auth.cross+6
06:01:34103.145.13.11SGGET/wp-adminscan.legacy+7
06:01:3445.155.205.233NLGET/api/search?q=' OR 1=1--sql.tautology+8
06:01:3491.240.118.168UAPOST/uploadupload.webshell+12

Morph log

TimeKindLabelDetail
06:01:34PREDICTescalation from 200.68.14.55conf=0.75 · 2 recon probes, no exploit yet
06:01:34PREDICTcoordinated multi-region sweepconf=0.80 · 5 active source regions in window
06:01:34WRAPPERenv C → Bpad=1024 · framing=delimiter · hdr=shuffled
05:46:16PREDICT/db.sqlconf=0.72 · ladder from /backup.zip
05:46:16PREDICT/api/v1/registry/129conf=0.74 · sequential walk detected
05:46:16PREDICTescalation from 156.146.45.91conf=0.75 · 2 recon probes, no exploit yet
05:46:16PREDICTburst on /loginconf=0.80 · 3 POST attempts across 2 sources
05:46:16PREDICT/.git/configconf=0.82 · ladder from /.env
05:46:16PREDICTcoordinated multi-region sweepconf=0.85 · 9 active source regions in window
05:46:16HITburst on /loginprediction confirmed · conf was 0.90
05:46:16WRAPPERenv D → Cpad=1500 · framing=chunked · hdr=lexical
02:35:54PREDICT/db.sqlconf=0.72 · ladder from /backup.zip
02:35:54PREDICT/api/v1/registry/129conf=0.74 · sequential walk detected
02:35:54PREDICTescalation from 89.248.165.74conf=0.75 · 2 recon probes, no exploit yet
02:35:54PREDICT/.git/configconf=0.82 · ladder from /.env
02:35:54PREDICTcoordinated multi-region sweepconf=0.85 · 7 active source regions in window
02:35:54PREDICTburst on /loginconf=0.90 · 4 POST attempts across 1 sources
02:35:54WRAPPERenv E → Dpad=2048 · framing=length-prefix · hdr=reverse
02:34:49PREDICT/.git/configconf=0.58 · ladder from /backup.zip
02:34:49PREDICT/db.sqlconf=0.72 · ladder from /backup.zip
02:34:49PREDICTcoordinated multi-region sweepconf=0.80 · 5 active source regions in window
02:34:49WRAPPERenv A → Epad=768 · framing=delimiter · hdr=shuffled
02:30:39PREDICT/db.sqlconf=0.72 · ladder from /backup.zip
02:30:39PREDICT/api/v1/registry/129conf=0.74 · sequential walk detected
02:30:39PREDICTescalation from 156.146.45.91conf=0.75 · 2 recon probes, no exploit yet
02:30:39PREDICT/.git/configconf=0.82 · ladder from /.env
02:30:39PREDICTcoordinated multi-region sweepconf=0.85 · 9 active source regions in window
02:30:39PREDICTescalation from 198.98.51.189conf=0.90 · 4 recon probes, no exploit yet

Standing predictions

TargetConfidenceReasonKind
coordinated multi-region sweep0.805 active source regions in windowregion
escalation from 200.68.14.550.752 recon probes, no exploit yetsource