Congratulations,
Dumbass

> cat /var/log/your-failures.log_

A very special round of applause for 57.141.0.9 for their valiant — and entirely unsuccessful — attempt to compromise our systems. We truly couldn't have done it without you. Well, actually we could. We did. You failed.

We Might Not Know Where You Live, But...

Did you think you were anonymous? That's adorable. Here's what we know about you:

IP Address 57.141.0.9
Country United States
Region Virginia
City Ashburn
ISP / Org Unknown
Timezone Unknown
Coordinates 39.0469, -77.4903

Your Digital Fingerprint

Nice browser you've got there. It'd be a shame if someone… logged it.

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))

Your Hall of Shame

Every single one of your pathetic attempts, lovingly preserved for posterity. Spoiler alert: they all failed.

Attack Breakdown

43
LDAP Injection
43
Total Failed Attempts

Detailed Activity Log

# Timestamp Attack Type Method Target URI Detail
1 2026-07-04T09:37:59Z LDAP Injection GET /blog/what-differentiates-a-high-assurance-testing-firm-from-a-commodity-provider ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
2 2026-07-04T19:49:22Z LDAP Injection GET /blog/anatomy-of-a-breach-medibank ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
3 2026-07-06T03:17:01Z LDAP Injection GET /blog/anatomy-of-a-breach-lulzsec ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
4 2026-07-07T03:31:21Z LDAP Injection GET /blog/how-can-businesses-ensure-their-remediation-actions-are-effective-after-a-test ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
5 2026-07-07T10:22:09Z LDAP Injection GET /blog/anatomy-of-a-breach-microsoft-midnight-blizzard ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
6 2026-07-07T14:45:41Z LDAP Injection GET /blog/anatomy-of-a-breach-adobe ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
7 2026-07-10T19:18:02Z LDAP Injection GET /blog/anatomy-of-a-breach-heartbleed ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
8 2026-07-10T21:22:51Z LDAP Injection GET /blog/penetration-testing-risk-management-governance ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
9 2026-07-11T02:55:37Z LDAP Injection GET /blog/how-much-does-a-penetration-test-cost-uk ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
10 2026-07-11T06:27:02Z LDAP Injection GET /blog/anatomy-of-a-breach-mod-laptop-theft ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
11 2026-07-11T08:34:05Z LDAP Injection GET /blog/anatomy-of-a-breach-t-mobile-us-2018 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
12 2026-07-11T16:25:58Z LDAP Injection GET /blog/anatomy-of-a-breach-covid-remote-working ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
13 2026-07-11T18:59:56Z LDAP Injection GET /blog/from-the-hacker-desk-drone-to-network-pivot ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
14 2026-07-11T22:17:58Z LDAP Injection GET /responsible-disclosure ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
15 2026-07-11T22:59:17Z LDAP Injection GET /blog/what-are-the-early-warning-signs-that-your-organisation-is-ready-for-a-red-team-simulation ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
16 2026-07-12T04:09:52Z LDAP Injection GET /blog/anatomy-of-a-breach-nhs-hard-drives-ebay ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
17 2026-07-12T06:58:03Z LDAP Injection GET /blog/anatomy-of-a-breach-epik ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
18 2026-07-12T10:15:18Z LDAP Injection GET /blog/privilege-escalation-explained ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
19 2026-07-12T18:00:45Z LDAP Injection GET /blog/what-is-spear-phishing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
20 2026-07-12T22:04:50Z LDAP Injection GET /blog/anatomy-of-a-breach-2011-year-review ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
21 2026-07-12T23:34:26Z LDAP Injection GET /blog/responsible-proof-of-concept ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
22 2026-07-13T00:01:51Z LDAP Injection GET /blog/translating-technical-findings-into-business-risk ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
23 2026-07-13T09:02:24Z LDAP Injection GET /blog/anatomy-of-a-breach-zappos ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
24 2026-07-13T18:13:50Z LDAP Injection GET /blog/sector-under-the-microscope-submersible-uav-security ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
25 2026-07-14T05:37:07Z LDAP Injection GET /blog/anatomy-of-a-breach-credential-stuffing-epidemic ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
26 2026-07-14T12:25:41Z LDAP Injection GET /blog/what-happens-before-a-penetration-test ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
27 2026-07-14T21:51:46Z LDAP Injection GET /blog/anatomy-of-a-breach-western-digital ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
28 2026-07-14T21:57:08Z LDAP Injection GET /blog/from-the-hacker-desk-cloud-permissions-escalation ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
29 2026-07-14T22:05:38Z LDAP Injection GET /blog/anatomy-of-a-breach-2010-year-review ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
30 2026-07-15T00:10:52Z LDAP Injection GET /blog/should-penetration-testing-be-combined-with-a-vulnerability-management-programme ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
31 2026-07-15T02:56:46Z LDAP Injection GET /blog/difference-between-a-penetration-test-and-a-vulnerability-scan ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
32 2026-07-15T04:18:00Z LDAP Injection GET /blog/anatomy-of-a-breach-baltimore-ransomware ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
33 2026-07-15T12:03:39Z LDAP Injection GET /blog/ashley-madison-breach-deep-dive ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
34 2026-07-15T12:23:00Z LDAP Injection GET /blog/anatomy-of-a-breach-tesco-bank ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
35 2026-07-15T14:05:35Z LDAP Injection GET /blog/anatomy-of-a-breach-target ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
36 2026-07-15T14:11:24Z LDAP Injection GET /blog/how-do-testers-assess-authentication-and-session-management-weaknesses ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
37 2026-07-15T21:43:36Z LDAP Injection GET /blog/the-human-element-of-penetration-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
38 2026-07-16T05:21:23Z LDAP Injection GET /blog/from-the-hacker-desk-social-engineering-reception ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
39 2026-07-16T10:13:36Z LDAP Injection GET /blog/anatomy-of-a-breach-atlanta-samsam ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
40 2026-07-16T12:06:18Z LDAP Injection GET /blog/anatomy-of-a-breach-sharepoint-zero-day ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
41 2026-07-16T14:12:58Z LDAP Injection GET /blog/how-do-testers-assess-authentication-and-session-management-weaknesses ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
42 2026-07-16T19:46:46Z LDAP Injection GET /blog/anatomy-of-a-breach-2014-year-review ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
43 2026-07-16T20:49:06Z LDAP Injection GET /blog/anatomy-of-a-breach-godaddy ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i

In Summary

You came. You saw. You got absolutely owned by a hedgehog.

Every request you made was detected, logged, and laughed at. Our WAF didn't even break a sweat. Maybe next time try something more challenging — like reading a book on operational security.

Pro tip: If you're going to hack a cybersecurity company, maybe don't use the same IP address for every single request. Just a thought.

Attack Leaderboard Back to Safety Hire Us Instead