Congratulations,
Dumbass

> cat /var/log/your-failures.log_

A very special round of applause for 57.141.0.20 for their valiant — and entirely unsuccessful — attempt to compromise our systems. We truly couldn't have done it without you. Well, actually we could. We did. You failed.

We Might Not Know Where You Live, But...

Did you think you were anonymous? That's adorable. Here's what we know about you:

IP Address 57.141.0.20
Country United States
Region Virginia
City Ashburn
ISP / Org Unknown
Timezone Unknown
Coordinates 39.0469, -77.4903

Your Digital Fingerprint

Nice browser you've got there. It'd be a shame if someone… logged it.

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))

Your Hall of Shame

Every single one of your pathetic attempts, lovingly preserved for posterity. Spoiler alert: they all failed.

Attack Breakdown

53
LDAP Injection
53
Total Failed Attempts

Detailed Activity Log

# Timestamp Attack Type Method Target URI Detail
1 2026-07-16T08:52:33Z LDAP Injection GET /blog/can-penetration-testing-identify-insider-threats ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
2 2026-07-16T10:22:20Z LDAP Injection GET /cyber-essentials ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
3 2026-07-17T06:08:00Z LDAP Injection GET /blog/anatomy-of-a-breach-hollywood-presbyterian-ransomware ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
4 2026-07-17T06:19:27Z LDAP Injection GET /blog/anatomy-of-a-breach-nhs-advanced-lastpass ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
5 2026-07-17T07:30:25Z LDAP Injection GET /blog/evidence-screenshots-and-reproduction-steps ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
6 2026-07-17T11:02:51Z LDAP Injection GET /blog/anatomy-of-a-breach-watering-hole-silicon-valley ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
7 2026-07-17T14:11:47Z LDAP Injection GET /blog/anatomy-of-a-breach-snowden-nsa ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
8 2026-07-17T15:25:10Z LDAP Injection GET /blog/how-does-physical-penetration-testing-differ-from-digital-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
9 2026-07-18T04:13:18Z LDAP Injection GET /blog/companies-house-webfiling-flaw-directors-exposed ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
10 2026-07-18T18:15:42Z LDAP Injection GET /blog/anatomy-of-a-breach-lockbit-takedown ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
11 2026-07-19T00:33:19Z LDAP Injection GET /airspace-security ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
12 2026-07-19T06:20:00Z LDAP Injection GET /blog/openvas-deep-dive-vulnerability-scanning ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
13 2026-07-19T13:41:31Z LDAP Injection GET /blog/anatomy-of-a-breach-gonzalez-indictment ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
14 2026-07-19T18:39:06Z LDAP Injection GET /blog/anatomy-of-a-breach-epik ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
15 2026-07-19T19:54:35Z LDAP Injection GET /blog/nmap-deep-dive-vulnerability-scanning-and-penetration-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
16 2026-07-20T02:57:29Z LDAP Injection GET /blog/apt1-the-persistent-data-hoarder ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
17 2026-07-20T08:40:17Z LDAP Injection GET /blog/what-happens-before-a-penetration-test ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
18 2026-07-20T10:26:40Z LDAP Injection GET /blog/common-mistakes-interpreting-pen-test-reports ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
19 2026-07-20T14:56:41Z LDAP Injection GET /blog/anatomy-of-a-breach-mod-laptop-theft ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
20 2026-07-20T17:16:59Z LDAP Injection GET /blog/annual-penetration-testing-requirements-uk-gdpr ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
21 2026-07-21T03:30:12Z LDAP Injection GET /blog/anatomy-of-a-breach-uk-parliament-email ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
22 2026-07-21T04:53:41Z LDAP Injection GET /blog/anatomy-of-a-breach-marriott-starwood ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
23 2026-07-21T12:50:32Z LDAP Injection GET /blog/from-the-hacker-desk-exploiting-trust-between-offices ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
24 2026-07-21T15:04:55Z LDAP Injection GET /blog/cyber-essentials-demystified-ce-vs-ce-plus ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
25 2026-07-21T16:51:33Z LDAP Injection GET /blog/cloud-penetration-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
26 2026-07-23T13:42:05Z LDAP Injection GET /blog/anatomy-of-a-breach-att-73m ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
27 2026-07-23T16:07:16Z LDAP Injection GET /blog/sector-under-the-microscope-professional-services ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
28 2026-07-23T16:19:08Z LDAP Injection GET /blog/metasploit-deep-dive-exploitation-framework ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
29 2026-07-23T17:00:49Z LDAP Injection GET /blog/how-confidential-is-the-penetration-testing-report ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
30 2026-07-24T04:34:33Z LDAP Injection GET /blog/anatomy-of-a-breach-news-of-the-world ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
31 2026-07-24T05:05:10Z LDAP Injection GET /blog/anatomy-of-a-breach-2009-year-in-review ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
32 2026-07-24T14:15:31Z LDAP Injection GET /blog/from-the-hacker-desk-social-engineering-reception ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
33 2026-07-24T19:38:38Z LDAP Injection GET /blog/custom-payloads-encoding-evasion-metasploit ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
34 2026-07-24T22:32:12Z LDAP Injection GET /blog/penetration-testing-and-defensive-security ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
35 2026-07-24T23:03:31Z LDAP Injection GET /blog/anatomy-of-a-breach-mega-breach-dumps ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
36 2026-07-25T09:47:10Z LDAP Injection GET /blog/anatomy-of-a-breach-collection-1 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
37 2026-07-25T16:55:25Z LDAP Injection GET /blog/what-is-a-penetration-test-and-do-i-need-one ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
38 2026-07-25T19:59:31Z LDAP Injection GET /blog/anatomy-of-a-breach-uber ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
39 2026-07-26T01:57:33Z LDAP Injection GET /blog/nmap-deep-dive-vulnerability-scanning-and-penetration-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
40 2026-07-26T07:05:19Z LDAP Injection GET /blog/anatomy-of-a-breach-twitter-hack ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
41 2026-07-26T14:07:48Z LDAP Injection GET /blog/anatomy-of-a-breach-credential-stuffing-epidemic ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
42 2026-07-26T14:55:46Z LDAP Injection GET /blog/penetration-testing-for-small-business-uk ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
43 2026-07-26T17:48:23Z LDAP Injection GET /blog/anatomy-of-a-breach-16-billion-credentials ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
44 2026-07-26T19:04:35Z LDAP Injection GET /blog/anatomy-of-a-breach-uk-parliament-email ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
45 2026-07-27T13:14:15Z LDAP Injection GET /blog/anatomy-of-a-breach-opm ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
46 2026-07-27T13:24:05Z LDAP Injection GET /blog/sector-under-the-microscope-financial-services ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
47 2026-07-27T14:04:43Z LDAP Injection GET /blog/anatomy-of-a-breach-global-payments ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
48 2026-07-27T18:31:56Z LDAP Injection GET /blog/anatomy-of-a-breach-microsoft-250m ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
49 2026-07-27T22:59:27Z LDAP Injection GET /blog/apt27 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
50 2026-07-28T01:14:31Z LDAP Injection GET /blog/anatomy-of-a-breach-change-healthcare ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
51 2026-07-28T09:12:52Z LDAP Injection GET /blog/anatomy-of-a-breach-tesco-bank ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
52 2026-07-28T17:50:51Z LDAP Injection GET /blog/anatomy-of-a-breach-talktalk ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
53 2026-07-28T19:59:16Z LDAP Injection GET /blog/cyber-essentials-demystified-ce-vs-ce-plus ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i

In Summary

You came. You saw. You got absolutely owned by a hedgehog.

Every request you made was detected, logged, and laughed at. Our WAF didn't even break a sweat. Maybe next time try something more challenging — like reading a book on operational security.

Pro tip: If you're going to hack a cybersecurity company, maybe don't use the same IP address for every single request. Just a thought.

Attack Leaderboard Back to Safety Hire Us Instead