Congratulations,
Dumbass

> cat /var/log/your-failures.log_

A very special round of applause for 34.59.243.149 for their valiant — and entirely unsuccessful — attempt to compromise our systems. We truly couldn't have done it without you. Well, actually we could. We did. You failed.

We Might Not Know Where You Live, But...

Did you think you were anonymous? That's adorable. Here's what we know about you:

IP Address 34.59.243.149
Geolocation data unavailable — but don't worry, we're still watching.

Your Digital Fingerprint

Nice browser you've got there. It'd be a shame if someone… logged it.

Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36 EdgA/148.0.0.0

Your Hall of Shame

Every single one of your pathetic attempts, lovingly preserved for posterity. Spoiler alert: they all failed.

Attack Breakdown

26
General Fuzzing / Forced Browsing
9
Path Traversal
35
Total Failed Attempts

Detailed Activity Log

# Timestamp Attack Type Method Target URI Detail
1 2026-09-06T09:57:58Z General Fuzzing / Forced Browsing POST /graphql Forced browsing attempt: /graphql
2 2026-09-06T09:58:00Z Path Traversal GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc path_traversal [GET][filename] matched /(?:\/|\\)(?:boot|root|home)(?:\/|\\)/i
3 2026-09-06T09:58:01Z Path Traversal GET /__vite_rsc_findSourceMapURL?filename=file:///proc/self/environ&environmentName=rsc path_traversal [GET][filename] matched /(?:\/|\\)proc(?:\/|\\)self(?:\/|\\)/i
4 2026-09-06T09:58:01Z Path Traversal GET /__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc path_traversal [GET][filename] matched /(?:\/|\\)(?:boot|root|home)(?:\/|\\)/i
5 2026-09-06T09:58:01Z Path Traversal GET /@fs/proc/self/cmdline?raw?? path_traversal [URI][REQUEST_URI] matched /(?:\/|\\)proc(?:\/|\\)self(?:\/|\\)/i
6 2026-09-06T09:58:01Z Path Traversal GET /api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ path_traversal [URI][REQUEST_URI] matched /(?:\.\.\/){2,}/i
7 2026-09-06T09:58:01Z Path Traversal GET /api/w/default/jobs_u/get_log_file/../../../../proc/self/environ path_traversal [URI][REQUEST_URI] matched /(?:\.\.\/){2,}/i
8 2026-09-06T09:58:01Z Path Traversal GET /api/fs/read?path=/proc/self/environ&allowOutsideWorkspace=true path_traversal [GET][path] matched /(?:\/|\\)proc(?:\/|\\)self(?:\/|\\)/i
9 2026-09-06T09:58:01Z Path Traversal GET /api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ path_traversal [URI][REQUEST_URI] matched /(?:\.\.\/){2,}/i
10 2026-09-06T09:58:02Z Path Traversal GET /proc/self/cmdline path_traversal [URI][REQUEST_URI] matched /(?:\/|\\)proc(?:\/|\\)self(?:\/|\\)/i
11 2026-09-06T09:58:02Z General Fuzzing / Forced Browsing GET /proc/self/cgroup BANNED (repeat offender)
12 2026-09-06T09:58:04Z General Fuzzing / Forced Browsing GET /_astro/pages/index.astro.mjs.map BANNED (repeat offender)
13 2026-09-06T09:58:05Z General Fuzzing / Forced Browsing GET /userfiles?path=../../.env BANNED (repeat offender)
14 2026-09-06T09:58:05Z General Fuzzing / Forced Browsing GET /userfiles?path=../../../../.env BANNED (repeat offender)
15 2026-09-06T09:58:05Z General Fuzzing / Forced Browsing GET /wp-config.php.old BANNED (repeat offender)
16 2026-09-06T09:58:05Z General Fuzzing / Forced Browsing GET /userfiles?path=../../../.env BANNED (repeat offender)
17 2026-09-06T09:58:05Z General Fuzzing / Forced Browsing GET /userfiles?path=../../../../proc/self/environ BANNED (repeat offender)
18 2026-09-06T09:58:05Z General Fuzzing / Forced Browsing GET /storage/logs/laravel.log BANNED (repeat offender)
19 2026-09-06T09:58:06Z General Fuzzing / Forced Browsing GET /wp-config.php~ BANNED (repeat offender)
20 2026-09-06T09:58:06Z General Fuzzing / Forced Browsing GET /wp-config.old BANNED (repeat offender)
21 2026-09-06T09:58:06Z General Fuzzing / Forced Browsing GET /application.properties BANNED (repeat offender)
22 2026-09-06T09:58:06Z General Fuzzing / Forced Browsing GET /actuator/env BANNED (repeat offender)
23 2026-09-06T09:58:06Z General Fuzzing / Forced Browsing GET /actuator/configprops BANNED (repeat offender)
24 2026-09-06T09:58:07Z General Fuzzing / Forced Browsing GET /bootstrap.properties BANNED (repeat offender)
25 2026-09-06T09:58:07Z General Fuzzing / Forced Browsing GET /actuator/threaddump BANNED (repeat offender)
26 2026-09-06T09:58:07Z General Fuzzing / Forced Browsing GET /gradle.properties BANNED (repeat offender)
27 2026-09-06T09:58:07Z General Fuzzing / Forced Browsing GET /web.config BANNED (repeat offender)
28 2026-09-06T09:58:07Z General Fuzzing / Forced Browsing GET /settings.py BANNED (repeat offender)
29 2026-09-06T09:58:08Z General Fuzzing / Forced Browsing GET /core/settings.py BANNED (repeat offender)
30 2026-09-06T09:58:08Z General Fuzzing / Forced Browsing GET /app/settings.py BANNED (repeat offender)
31 2026-09-06T09:58:08Z General Fuzzing / Forced Browsing GET /backend/settings.py BANNED (repeat offender)
32 2026-09-06T09:58:08Z General Fuzzing / Forced Browsing GET /instance/config.py BANNED (repeat offender)
33 2026-09-06T09:58:09Z General Fuzzing / Forced Browsing GET /config.py BANNED (repeat offender)
34 2026-09-06T09:58:09Z General Fuzzing / Forced Browsing GET /api/config BANNED (repeat offender)
35 2026-09-06T09:58:09Z General Fuzzing / Forced Browsing GET /__/firebase/init.json BANNED (repeat offender)

In Summary

You came. You saw. You got absolutely owned by a hedgehog.

Every request you made was detected, logged, and laughed at. Our WAF didn't even break a sweat. Maybe next time try something more challenging — like reading a book on operational security.

Pro tip: If you're going to hack a cybersecurity company, maybe don't use the same IP address for every single request. Just a thought.

Attack Leaderboard Back to Safety Hire Us Instead