artemtarasov
modsec-d909a0759d | GET | / | path | 920210 | malicious | real | ModSecurity 30-day |
modsec-b8a128cb52 | GET | /%5BDOMAIN%5D/.env | path | 930130 | malicious | real | ModSecurity 30-day |
modsec-645ce9a3a8 | GET | /%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini | path | 920440 | malicious | real | ModSecurity 30-day |
modsec-b68ab4caa7 | GET | /*.backup | path | 920440 | malicious | real | ModSecurity 30-day |
modsec-44e1d51fe9 | GET | /*.bak | path | 920440 | malicious | real | ModSecurity 30-day |
modsec-0d2346b503 | GET | /*.old | path | 920440 | malicious | real | ModSecurity 30-day |
modsec-f5e9f61c7f | GET | /...%5C...%5C...%5C...%5C...%5C...%5C...%5C...%5C...%5Cwindows%5Cwin.ini | path | 920440 | malicious | real | ModSecurity 30-day |
modsec-a16dd5a4f5 | GET | /....%5C....%5C....%5C....%5C....%5C....%5C....%5C....%5C....%5Cwindows%5Cwin.ini | path | 920440 | malicious | real | ModSecurity 30-day |
modsec-eb809cbbf6 | GET | /.DS_Store | path | 930130 | malicious | real | ModSecurity 30-day |
modsec-eed7d5d561 | GET | /.DS_Store/ | path | 930130 | malicious | real | ModSecurity 30-day |
modsec-e942b00d3a | GET | /.ENV | path | 920350 | malicious | real | ModSecurity 30-day |
modsec-1540575c38 | POST | /.antproxy.php | path | 932150 | malicious | real | ModSecurity 30-day |
modsec-0d5ad5d4eb | GET | /.api/.env | path | 930130 | malicious | real | ModSecurity 30-day |
modsec-d7a293b0ed | GET | /.aws/config | path | 930130 | malicious | real | ModSecurity 30-day |
modsec-189d1f1cf7 | GET | /.aws/config/ | path | 930130 | malicious | real | ModSecurity 30-day |
modsec-98f5012a0c | GET | /.aws/credentials | path | 930130 | malicious | real | ModSecurity 30-day |
modsec-8f6220b0ca | GET | /.aws/credentials.bak | path | 920440 | malicious | real | ModSecurity 30-day |
modsec-3b45912b00 | GET | /.aws/credentials.json | path | 920350 | malicious | real | ModSecurity 30-day |
modsec-23b42d2050 | GET | /.aws/credentials.yaml | path | 920350 | malicious | real | ModSecurity 30-day |
modsec-a13d4e5afe | GET | /.aws/credentials.yml | path | 920350 | malicious | real | ModSecurity 30-day |
modsec-33641700ee | GET | /.aws/credentials/ | path | 930130 | malicious | real | ModSecurity 30-day |
modsec-3ac1c95b36 | GET | /.aws/credentials/admin/.env | path | 930130 | malicious | real | ModSecurity 30-day |
modsec-47d6e627e3 | GET | /.aws/credentials/uploads/ | path | 930130 | malicious | real | ModSecurity 30-day |
modsec-90f1e0b434 | GET | /.aws_config.js | path | 920350 | malicious | real | ModSecurity 30-day |
modsec-09a02678cf | GET | /.aws_creds.json | path | 920350 | malicious | real | ModSecurity 30-day |
modsec-c3cd9f70ba | GET | /.aws_keys.json | path | 920350 | malicious | real | ModSecurity 30-day |
modsec-5a49cc8037 | GET | /.aws_secrets.js | path | 920350 | malicious | real | ModSecurity 30-day |
modsec-613d1efedf | GET | /.aws_secrets.json | path | 920350 | malicious | real | ModSecurity 30-day |
modsec-b33425c1ac | GET | /.backup.sql | path | 920440 | malicious | real | ModSecurity 30-day |
modsec-5ef270dbdd | GET | /.backup.tar | path | 920350 | malicious | real | ModSecurity 30-day |
modsec-b92a42465f | GET | /.backup.tar.gz | path | 920350 | malicious | real | ModSecurity 30-day |
modsec-c4de7dc5a9 | GET | /.backup.zip | path | 920350 | malicious | real | ModSecurity 30-day |
modsec-c315293c57 | GET | /.bash_history | path | 930130 | malicious | real | ModSecurity 30-day |
modsec-c68cef016d | GET | /.bash_history/ | path | 930130 | malicious | real | ModSecurity 30-day |
modsec-47e6d19ec8 | GET | /.bash_profile | path | 930130 | malicious | real | ModSecurity 30-day |
srbh-353323 | GET | /%00/wp-admin/load-styles.php?c=0&dir=ltr&load%5B%5D=dashicons,buttons,forms,l10n,login&ver=4.9.5 | url_param | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-227968 | GET | /%22 | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-509946 | GET | /%22%27 | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-509957 | GET | /%22%27/index.php | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-509960 | GET | /%22%27/index.php/2020 | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-505932 | GET | /%22%27/index.php/2020/03 | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-509977 | GET | /%22%27/index.php/2020/03/22 | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-505947 | GET | /%22%27/index.php/2020/03/22/quidem-rerum-sit-doloribus-quia-eum | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-505962 | GET | /%22%27/index.php/2020/03/22/quidem-rerum-sit-doloribus-quia-eum/embed | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-510007 | GET | /%22%27/index.php/2020/03/22/quidem-rerum-sit-doloribus-quia-eum/feed | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-506019 | GET | /%22%27/index.php/2020/03/23 | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-510041 | GET | /%22%27/index.php/2020/03/23/fuga-aut-recusandae-sed-dolor-quia | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-505994 | GET | /%22%27/index.php/2020/03/23/fuga-aut-recusandae-sed-dolor-quia/embed | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-510035 | GET | /%22%27/index.php/2020/03/23/fuga-aut-recusandae-sed-dolor-quia/feed | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-506063 | GET | /%22%27/index.php/2020/03/27 | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-510065 | GET | /%22%27/index.php/2020/03/27/qui-ratione-maxime-dolores-consequatur | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-506048 | GET | /%22%27/index.php/2020/03/27/qui-ratione-maxime-dolores-consequatur/embed | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-510078 | GET | /%22%27/index.php/2020/03/27/qui-ratione-maxime-dolores-consequatur/feed | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-506107 | GET | /%22%27/index.php/2020/03/29 | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-510096 | GET | /%22%27/index.php/2020/03/29/distinctio-sequi-officiis-occaecati | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-506080 | GET | /%22%27/index.php/2020/03/29/distinctio-sequi-officiis-occaecati/embed | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-510109 | GET | /%22%27/index.php/2020/03/29/distinctio-sequi-officiis-occaecati/feed | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-506122 | GET | /%22%27/index.php/2020/04 | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-510139 | GET | /%22%27/index.php/2020/04/04 | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-506157 | GET | /%22%27/index.php/2020/04/04/animi-sint-ut-sed-commodi | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-510153 | GET | /%22%27/index.php/2020/04/04/animi-sint-ut-sed-commodi/embed | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-506150 | GET | /%22%27/index.php/2020/04/04/animi-sint-ut-sed-commodi/feed | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-510195 | GET | /%22%27/index.php/2020/04/04/consequatur-ad-error-quidem | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-506171 | GET | /%22%27/index.php/2020/04/04/consequatur-ad-error-quidem/embed | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-510182 | GET | /%22%27/index.php/2020/04/04/consequatur-ad-error-quidem/feed | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-506192 | GET | /%22%27/index.php/2020/04/04/explicabo-qui-fuga-distinctio-dolores-voluptatibus-sit | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-510208 | GET | /%22%27/index.php/2020/04/04/explicabo-qui-fuga-distinctio-dolores-voluptatibus-sit/embed | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-506206 | GET | /%22%27/index.php/2020/04/04/explicabo-qui-fuga-distinctio-dolores-voluptatibus-sit/feed | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-510236 | GET | /%22%27/index.php/2020/04/04/hic-porro-nihil-non-rerum | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
srbh-510243 | GET | /%22%27/index.php/2020/04/04/hic-porro-nihil-non-rerum/embed | path | 66 - SQL Injection | malicious | real | SR-BH 2020 |
oas-mal-SQLi-175 | GET | /?p=%%27%20AND%208310%3D8311%20AND%20%27%%27%3D%27 | url_param | malicious | synthetic | OpenAppSec | |
oas-mal-SQLi-1 | GET | /?p=%00%27%20UNION%20SELECT%20password%20FROM%20Users%20WHERE%20username-%27tom%27-- | url_param | malicious | synthetic | OpenAppSec | |
oas-mal-SQLi-0 | GET | /?p=%00%27%27%20UNION%20SELECT%20password%20FROM%20Users%20WHERE%20username-%27%27foobar%27%27-- | url_param | malicious | synthetic | OpenAppSec | |
oas-mal-Path Traversal-381 | GET | /?p=%00../../../../../../etc/passwd | url_param | malicious | synthetic | OpenAppSec | |
oas-mal-Path Traversal-384 | GET | /?p=%00../../../../../../etc/shadow | url_param | malicious | synthetic | OpenAppSec | |
oas-mal-XSS-3 | GET | /?p=%0A%0D%0A%3Cscript%3Ealert%281%29%3C/script%3E | url_param | malicious | synthetic | OpenAppSec | |
oas-mal-XSS-4 | GET | /?p=%0A%0D%0A%3Cscript%3Econfirm%281%29%3C/script%3E | url_param | malicious | synthetic | OpenAppSec | |
oas-mal-XSS-5 | GET | /?p=%0A%0D%0A%3Cscript%3Eprompt%281%29%3C/script%3E | url_param | malicious | synthetic | OpenAppSec | |
oas-mal-SQLi-2 | GET | /?p=%0A%0d%2Bselect%2Buser%2Bfrom%2Bdual%2B%0A%0D | url_param | malicious | synthetic | OpenAppSec | |
oas-mal-Command Injection-335 | GET | /?p=%0A%20str%3D%24%28echo%20NNEAQO%29%0A%20str1%3D%24%7B%23str%7D%0A%20if%20%5B%201%20-ne%20%24%7Bstr1%7D%20%5D%0A%20then%20sleep%200%0A%20else%20sleep%201%0A%20fi%20%23 | url_param | malicious | synthetic | OpenAppSec | |
oas-mal-Command Injection-338 | GET | /?p=%0A%20str%3D%24%28echo%20PSDLXW%29%0A%20str1%3D%24%7B%23str%7D%0A%20if%20%5B%201%20-ne%20%24%7Bstr1%7D%20%5D%0A%20then%20sleep%200%0A%20else%20sleep%201%0A%20fi%20%7C | url_param | malicious | synthetic | OpenAppSec | |
oas-mal-Command Injection-341 | GET | /?p=%0A%20str%3D%24%28echo%20SFURKW%29%0A%20str1%3D%24%7B%23str%7D%0A%20if%20%5B%201%20-ne%20%24%7Bstr1%7D%20%5D%0A%20then%20sleep%200%0A%20else%20sleep%201%0A%20fi%20%26 | url_param | malicious | synthetic | OpenAppSec | |
oas-mal-Command Injection-344 | GET | /?p=%0A%20str%3D%24%28echo%20SYNSAC%29%0A%20str1%3D%24%7B%23str%7D%0A%20if%20%5B%201%20-ne%20%24%7Bstr1%7D%20%5D%0A%20then%20sleep%200%0A%20else%20sleep%201%0A%20fi%20%27 | url_param | malicious | synthetic | OpenAppSec | |
oas-mal-Command Injection-347 | GET | /?p=%0A%20str%3D%24%28echo%20TNOFGN%29%0A%20str1%3D%24%7B%23str%7D%0A%20if%20%5B%201%20-ne%20%24%7Bstr1%7D%20%5D%0A%20then%20sleep%200%0A%20else%20sleep%201%0A%20fi%20 | url_param | malicious | synthetic | OpenAppSec | |
oas-mal-Command Injection-350 | GET | /?p=%0A%20str%3D%24%28echo%20VDEVWJ%29%0A%20str1%3D%24%7B%23str%7D%0A%20if%20%5B%201%20-ne%20%24%7Bstr1%7D%20%5D%0A%20then%20sleep%200%0A%20else%20sleep%201%0A%20fi%20// | url_param | malicious | synthetic | OpenAppSec | |
crs-920100-3-0 | OPTIONS | * | path | 920100 | malicious | synthetic | ModSecurity CRS |
crs-920610-2-0 | GET | /#fragment | path | 920610 | malicious | synthetic | ModSecurity CRS |
crs-920271-5-0 | GET | /%20index.html?test=test1 | url_param | 920271 | malicious | synthetic | ModSecurity CRS |
crs-920610-1-0 | GET | /%23fragment | path | 920610 | malicious | synthetic | ModSecurity CRS |
crs-920271-6-0 | GET | /%FFindex.html?test=test1 | url_param | 920271 | malicious | synthetic | ModSecurity CRS |
crs-930140-13-0 | GET | /.a0proj/secrets.env | path | 930140 | malicious | synthetic | ModSecurity CRS |
crs-930140-4-0 | GET | /.aider/chat.aider | path | 930140 | malicious | synthetic | ModSecurity CRS |
crs-930130-12-0 | GET | /.aiignore | path | 930130 | malicious | synthetic | ModSecurity CRS |
crs-930140-1-0 | GET | /.claude/settings.json | path | 930140 | malicious | synthetic | ModSecurity CRS |
crs-930140-7-0 | GET | /.cline/rules.md | path | 930140 | malicious | synthetic | ModSecurity CRS |
crs-930140-11-0 | GET | /.codex/config.toml | path | 930140 | malicious | synthetic | ModSecurity CRS |
crs-930140-3-0 | GET | /.continue/config.yaml | path | 930140 | malicious | synthetic | ModSecurity CRS |
crs-930140-2-0 | GET | /.cursor/mcp.json | path | 930140 | malicious | synthetic | ModSecurity CRS |
crs-930130-13-0 | GET | /.cursorignore | path | 930130 | malicious | synthetic | ModSecurity CRS |
crs-930140-15-0 | GET | /.fabric/fabric.env | path | 930140 | malicious | synthetic | ModSecurity CRS |