PDHPI CONSOLE
Live
Events25
Blocked12
Cleared9
WrapperA0×
Predicts60%
Threat100%/100%
Threat threshold exceeded — auto-response engaging.

→Inbound event stream

07:30:42 US GET
/api/search?q=coffee
A legitimate search request.
172.104.11.99
 —
07:30:42 SE GET
/backup.zip
Looking for a forgotten backup archive that would leak the whole database.
141.98.10.110
 +11
07:30:42 IE GET
/api/v1/registry/128
A legitimate record fetch.
3.120.44.18
 —
07:30:42 IR POST
/login
Hundreds of password guesses per minute against one account.
185.7.214.7
 +10
07:30:42 IR POST
/login
Hundreds of password guesses per minute against one account.
185.7.214.7
 +10
07:30:42 US GET
/api/search?q=coffee
A legitimate search request.
172.104.11.99
 —
07:30:42 CA POST
/register
Bulk account creation, often a precursor to abuse.
198.98.51.189
 +4
07:30:42 BR GET
/api/v1/registry/42
Requesting a record that belongs to another account.
200.68.14.55
 +6
07:30:42 IE GET
/api/v1/registry/128
A legitimate record fetch.
3.120.44.18
 —
07:30:42 IR POST
/login
Hundreds of password guesses per minute against one account.
185.7.214.7
 +10
07:30:42 US GET
/api/search?q=coffee
A legitimate search request.
172.104.11.99
 —
07:30:42 IE GET
/api/v1/registry/128
A legitimate record fetch.
3.120.44.18
 —
07:30:42 CA POST
/register
Bulk account creation, often a precursor to abuse.
198.98.51.189
 +4
07:30:42 US GET
/api/search?q=coffee
A legitimate search request.
172.104.11.99
 —
07:30:42 UA POST
/upload
Uploading an executable file that would run on the server.
91.240.118.168
 +12
07:30:42 IR POST
/login
Hundreds of password guesses per minute against one account.
185.7.214.7
 +10
07:30:42 IE GET
/api/v1/registry/128
A legitimate record fetch.
3.120.44.18
 —
07:30:42 IE GET
/api/v1/registry/128
A legitimate record fetch.
3.120.44.18
 —
07:30:42 RU GET
/admin
Checking for a management interface exposed by mistake.
5.188.206.14
 +6
07:30:42 CA POST
/register
Bulk account creation, often a precursor to abuse.
198.98.51.189
 +4
07:30:42 BR GET
/api/v1/registry/42
Requesting a record that belongs to another account.
200.68.14.55
 +6
07:30:42 UA POST
/upload
Uploading an executable file that would run on the server.
91.240.118.168
 +12
07:30:42 SG GET
/wp-admin
Automated tool checking for admin panels that should not exist.
103.145.13.11
 +7
07:30:42 RU POST
/login
Reusing leaked username/password pairs against the login form.
185.220.101.42
 +5
07:30:42 SE GET
/backup.zip
Looking for a forgotten backup archive that would leak the whole database.
141.98.10.110
 +11

▦Session summary

Total events
25
Blocked
12
Cleared
9
Countries
9
Rotations
0
Predictions
6

⌘Rules fired

auth.brute4×
auth.automated3×
scan.backup2×
upload.webshell2×
auth.cross2×

◈Rolling threat

Current · last 25 events 100%
Predicted · armed 100%
current predicted

◉Wrapper state

Envelope
A
Padding
512 B
Framing
length-prefix
Header order
canonical
Rotations
0
Last rotate
07:30:42

↻Morph log

07:30:42 PREDICT
/api/v1/registry/130
conf=0.61 · sequential walk detected
07:30:42 PREDICT
/db.sql
conf=0.72 · ladder from /backup.zip
07:30:42 PREDICT
/api/v1/registry/129
conf=0.74 · sequential walk detected
07:30:42 PREDICT
escalation from 198.98.51.189
conf=0.75 · 2 recon probes, no exploit yet
07:30:42 PREDICT
coordinated multi-region sweep
conf=0.85 · 6 active source regions in window
07:30:42 PREDICT
burst on /login
conf=0.92 · 5 POST attempts across 2 sources

◆Top sources

185.7.214.7
40
91.240.118.168
24
141.98.10.110
22
200.68.14.55
12
198.98.51.189
12

◇Prediction queue

6 standing · 0 hits of 6 made · 0% hit rate
burst on /loginpath
5 POST attempts across 2 sources
0.92
coordinated multi-region sweepregion
6 active source regions in window
0.85
escalation from 198.98.51.189source
2 recon probes, no exploit yet
0.75
/api/v1/registry/129path
sequential walk detected
0.74
/db.sqlpath
ladder from /backup.zip
0.72
/api/v1/registry/130path
sequential walk detected
0.61

⚠Latest attacker move

Backup file probe
GET/backup.zip
Looking for a forgotten backup archive that would leak the whole database.
SE scan.backup +11
airegistry.demo/login

Sign in

Every request you make appears in the stream.
Registry search
Try a common attack
PDHPI — Polymorphic Dual Hyper-Predictive Infrastructure · Reset · Architecture · Integration · Polymorphic · Prediction · Beanstalk
Morph Engine env A −
// wrapper + prediction runtime
// dual-stream · behavior preserved
Swaps0
Predicts6
Hits0