PDH
PDHPI
CONSOLE
Live
Events
25
Blocked
7
Cleared
10
Wrapper
A
0×
Predicts
6
0%
Threat
100%
/100%
⬇ Export
Printable report
Opens in a new tab.
CSV · event log
Every event as a spreadsheet.
JSON · full state
Events, wrapper, predictions, morph log.
Email the report
Send
Sent from
[email protected]
Threat threshold exceeded — auto-response engaging.
→
Inbound event stream
06:48:00
FR
GET
/api/v1/registry/1
Walking through record IDs to enumerate the registry.
156.146.45.91
+5
06:48:00
IE
GET
/api/v1/registry/128
A legitimate record fetch.
3.120.44.18
—
06:48:00
IE
GET
/api/v1/registry/128
A legitimate record fetch.
3.120.44.18
—
06:48:00
IE
GET
/api/v1/registry/128
A legitimate record fetch.
3.120.44.18
—
06:48:00
IE
GET
/api/v1/registry/128
A legitimate record fetch.
3.120.44.18
—
06:48:00
CA
POST
/register
Bulk account creation, often a precursor to abuse.
198.98.51.189
+4
06:48:00
SE
GET
/backup.zip
Looking for a forgotten backup archive that would leak the whole database.
141.98.10.110
+11
06:48:00
IR
POST
/login
Hundreds of password guesses per minute against one account.
185.7.214.7
+10
06:48:00
IE
GET
/api/v1/registry/128
A legitimate record fetch.
3.120.44.18
—
06:48:00
SE
GET
/backup.zip
Looking for a forgotten backup archive that would leak the whole database.
141.98.10.110
+11
06:48:00
DE
GET
/.env
Looking for a leaked environment file with API keys and passwords.
194.26.135.87
+9
06:48:00
US
GET
/api/search?q=coffee
A legitimate search request.
172.104.11.99
—
06:48:00
RU
POST
/login
Reusing leaked username/password pairs against the login form.
185.220.101.42
+5
06:48:00
SG
GET
/wp-admin
Automated tool checking for admin panels that should not exist.
103.145.13.11
+7
06:48:00
FR
GET
/api/v1/registry/1
Walking through record IDs to enumerate the registry.
156.146.45.91
+5
06:48:00
IR
POST
/login
Hundreds of password guesses per minute against one account.
185.7.214.7
+10
06:48:00
RU
POST
/login
Reusing leaked username/password pairs against the login form.
185.220.101.42
+5
06:48:00
CA
POST
/register
Bulk account creation, often a precursor to abuse.
198.98.51.189
+4
06:48:00
US
GET
/api/search?q=coffee
A legitimate search request.
172.104.11.99
—
06:48:00
US
GET
/api/search?q=coffee
A legitimate search request.
172.104.11.99
—
06:48:00
IE
GET
/api/v1/registry/128
A legitimate record fetch.
3.120.44.18
—
06:48:00
NL
GET
/api/v1/registry
Mapping which API paths exist by trying them in sequence.
89.248.165.74
+3
06:48:00
IE
GET
/api/v1/registry/128
A legitimate record fetch.
3.120.44.18
—
06:48:00
CA
POST
/register
Bulk account creation, often a precursor to abuse.
198.98.51.189
+4
06:48:00
IR
POST
/login
Hundreds of password guesses per minute against one account.
185.7.214.7
+10
▦
Session summary
Total events
25
Blocked
7
Cleared
10
Countries
10
Rotations
0
Predictions
6
⌘
Rules fired
auth.brute
3×
auth.automated
3×
auth.repeat
2×
auth.enum
2×
scan.backup
2×
◈
Rolling threat
Current · last 25 events
100%
Predicted · armed
100%
current
predicted
◉
Wrapper state
Envelope
A
Padding
512 B
Framing
length-prefix
Header order
canonical
Rotations
0
Last rotate
06:48:00
↻
Morph log
06:48:00
PREDICT
/db.sql
conf=0.72 · ladder from /backup.zip
06:48:00
PREDICT
/api/v1/registry/129
conf=0.74 · sequential walk detected
06:48:00
PREDICT
escalation from 156.146.45.91
conf=0.75 · 2 recon probes, no exploit yet
06:48:00
PREDICT
/.git/config
conf=0.82 · ladder from /.env
06:48:00
PREDICT
coordinated multi-region sweep
conf=0.85 · 7 active source regions in window
06:48:00
PREDICT
burst on /login
conf=0.92 · 5 POST attempts across 2 sources
◆
Top sources
185.7.214.7
30
141.98.10.110
22
198.98.51.189
12
185.220.101.42
10
156.146.45.91
10
◇
Prediction queue
6
standing ·
0
hits of
6
made ·
0%
hit rate
burst on /login
path
5 POST attempts across 2 sources
0.92
coordinated multi-region sweep
region
7 active source regions in window
0.85
/.git/config
path
ladder from /.env
0.82
escalation from 156.146.45.91
source
2 recon probes, no exploit yet
0.75
/api/v1/registry/129
path
sequential walk detected
0.74
/db.sql
path
ladder from /backup.zip
0.72
⚠
Latest attacker move
Sequential ID probe
GET
/api/v1/registry/1
Walking through record IDs to enumerate the registry.
FR
auth.enum
+5
airegistry.demo
/login
Sign in
Every request you make appears in the stream.
Email
Password
Sign In
Register
Registry search
Search
Try a common attack
Cross-tenant
Upload
Probe /.env
PDHPI — Polymorphic Dual Hyper-Predictive Infrastructure ·
Reset
·
Architecture
·
Integration
·
Polymorphic
·
Prediction
·
Beanstalk
Morph Engine
env A
−
// wrapper + prediction runtime
// dual-stream · behavior preserved
Swaps
0
Predicts
6
Hits
0
✕
INFO
Title
Tagline