Congratulations,
Dumbass

> cat /var/log/your-failures.log_

A very special round of applause for 57.141.20.26 for their valiant — and entirely unsuccessful — attempt to compromise our systems. We truly couldn't have done it without you. Well, actually we could. We did. You failed.

We Might Not Know Where You Live, But...

Did you think you were anonymous? That's adorable. Here's what we know about you:

IP Address 57.141.20.26
Country United States
Region New York
City New York
ISP / Org Unknown
Timezone Unknown
Coordinates 40.7126, -74.0066

Your Digital Fingerprint

Nice browser you've got there. It'd be a shame if someone… logged it.

meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))

Your Hall of Shame

Every single one of your pathetic attempts, lovingly preserved for posterity. Spoiler alert: they all failed.

Attack Breakdown

1
General Fuzzing / Forced Browsing
8
SQL Injection
61
LDAP Injection
70
Total Failed Attempts

Detailed Activity Log

# Timestamp Attack Type Method Target URI Detail
1 2026-03-15T02:53:56Z General Fuzzing / Forced Browsing GET /uploads/iso-logo.avif Forced browsing attempt: /uploads/iso-logo.avif
2 2026-06-13T04:24:11Z SQL Injection GET /null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
3 2026-06-14T04:38:25Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
4 2026-06-14T06:07:13Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
5 2026-06-16T05:32:15Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
6 2026-06-16T15:56:24Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
7 2026-06-16T21:05:46Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
8 2026-06-17T05:52:02Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
9 2026-06-24T19:32:26Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
10 2026-08-05T20:20:53Z LDAP Injection GET /blog/apt3 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
11 2026-08-05T21:37:07Z LDAP Injection GET /blog/anatomy-of-a-breach-bybit ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
12 2026-08-06T06:45:08Z LDAP Injection GET /blog/how-does-penetration-testing-fit-into-a-broader-detect-defend-and-disrupt-cyber-strategy ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
13 2026-08-06T08:19:28Z LDAP Injection GET /blog/from-the-hacker-desk-mfa-not-multi-factor ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
14 2026-08-06T18:12:50Z LDAP Injection GET /blog/anatomy-of-a-breach-marriott-starwood ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
15 2026-08-07T06:08:33Z LDAP Injection GET /blog/from-the-hacker-desk-cloud-permissions-escalation ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
16 2026-08-07T08:18:25Z LDAP Injection GET / ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
17 2026-08-07T14:39:12Z LDAP Injection GET /blog/anatomy-of-a-breach-capital-one ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
18 2026-08-07T14:48:28Z LDAP Injection GET /blog/from-the-hacker-desk-drone-airborne-recon ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
19 2026-08-07T20:49:19Z LDAP Injection GET /blog/anatomy-of-a-breach-news-of-the-world ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
20 2026-08-07T21:31:25Z LDAP Injection GET /blog/reconnaissance-and-osint-in-penetration-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
21 2026-08-08T02:30:33Z LDAP Injection GET /blog/anatomy-of-a-breach-uber-2022 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
22 2026-08-08T03:00:01Z LDAP Injection GET /blog/how-do-testers-validate-whether-a-vulnerability-is-truly-exploitable-in-your-environment ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
23 2026-08-08T12:55:33Z LDAP Injection GET /blog/anatomy-of-a-breach-eternalblue-released ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
24 2026-08-08T18:09:48Z LDAP Injection GET /blog/business-guide-to-penetration-testing-types-of-test ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
25 2026-08-09T10:44:41Z LDAP Injection GET /blog/penetration-testing-relevant-despite-automation-ai ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
26 2026-08-09T19:28:23Z LDAP Injection GET /blog/anatomy-of-a-breach-norsk-hydro ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
27 2026-08-09T22:15:50Z LDAP Injection GET /blog/choosing-penetration-testing-provider-methodology-quality-expertise ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
28 2026-08-10T11:19:41Z LDAP Injection GET /blog/how-does-physical-penetration-testing-differ-from-digital-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
29 2026-08-10T13:23:50Z LDAP Injection GET /blog/can-penetration-testing-identify-insider-threats ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
30 2026-08-11T10:27:14Z LDAP Injection GET /blog/anatomy-of-a-breach-zappos ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
31 2026-08-11T12:01:49Z LDAP Injection GET /blog/muddywater ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
32 2026-08-12T00:20:48Z LDAP Injection GET /blog/anatomy-of-a-breach-morrisons-insider ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
33 2026-08-12T01:10:09Z LDAP Injection GET /blog/apt27 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
34 2026-08-12T19:36:10Z LDAP Injection GET /blog/anatomy-of-a-breach-flame-malware ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
35 2026-08-12T22:48:29Z LDAP Injection GET /blog/what-differentiates-a-high-assurance-testing-firm-from-a-commodity-provider ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
36 2026-08-13T01:19:16Z LDAP Injection GET /blog/how-do-penetration-testers-prioritise-findings-based-on-real-world-exploitability-rather-than-theoretical-risk ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
37 2026-08-13T04:18:48Z LDAP Injection GET /blog/anatomy-of-a-breach-virginia-prescription-ransom ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
38 2026-08-13T14:48:08Z LDAP Injection GET /blog/measuring-real-value-penetration-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
39 2026-08-13T19:54:41Z LDAP Injection GET /blog/from-the-hacker-desk-drone-controller-firmware ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
40 2026-08-14T23:42:28Z LDAP Injection GET /blog/anatomy-of-a-breach-microsoft-midnight-blizzard ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
41 2026-08-15T04:17:37Z LDAP Injection GET /blog/penetration-testing-business-risk ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
42 2026-08-15T06:42:53Z LDAP Injection GET /blog/business-guide-to-penetration-testing-types-of-test ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
43 2026-08-15T07:40:06Z LDAP Injection GET /blog/anatomy-of-a-breach-cambridge-analytica ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
44 2026-08-15T17:00:17Z LDAP Injection GET /blog/privilege-escalation-explained ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
45 2026-08-15T20:10:04Z LDAP Injection GET /blog/what-actually-happens-during-a-professional-penetration-test-from-day-one-to-final-report ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
46 2026-08-16T07:08:03Z LDAP Injection GET /blog/cyber-security-resilience-bill-what-uk-businesses-need-to-know ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
47 2026-08-16T07:14:44Z LDAP Injection GET /blog/what-factors-influence-the-price-of-a-penetration-test ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
48 2026-08-16T07:57:18Z LDAP Injection GET /blog/anatomy-of-a-breach-royal-mail-lockbit ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
49 2026-08-16T09:58:40Z LDAP Injection GET /blog/apt12-the-prcs-cyber-operative ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
50 2026-08-16T20:22:27Z LDAP Injection GET /blog/anatomy-of-a-breach-powerschool ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
51 2026-08-16T20:25:42Z LDAP Injection GET /blog/anatomy-of-a-breach-2011-year-review ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
52 2026-08-16T23:01:57Z LDAP Injection GET /blog/anatomy-of-a-breach-philippines-comelec ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
53 2026-08-18T16:43:19Z LDAP Injection GET /blog/chaining-low-risk-findings ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
54 2026-08-18T19:04:41Z LDAP Injection GET /blog/anatomy-of-a-breach-rbs-worldpay ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
55 2026-08-18T21:16:40Z LDAP Injection GET /blog/anatomy-of-a-breach-2024-year-review ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
56 2026-08-18T23:56:59Z LDAP Injection GET /blog/can-penetration-testing-be-done-remotely ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
57 2026-08-19T01:02:12Z LDAP Injection GET /blog/anatomy-of-a-breach-bridgepay-healthcare ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
58 2026-08-19T07:06:18Z LDAP Injection GET /blog/how-do-i-ensure-the-penetration-test-aligns-with-our-specific-industry-risks ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
59 2026-08-19T07:21:45Z LDAP Injection GET /blog/can-a-penetration-test-measure-business-impact-not-just-technical-weakness ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
60 2026-08-19T09:40:31Z LDAP Injection GET /blog/netntlmv2-hash-cracking-and-legacy-authentication ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
61 2026-08-19T12:52:54Z LDAP Injection GET /blog/anatomy-of-a-breach-tfl ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
62 2026-08-19T13:12:53Z LDAP Injection GET /blog/anatomy-of-a-breach-oracle-cloud-nyu ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
63 2026-08-19T17:16:28Z LDAP Injection GET /blog/anatomy-of-a-breach-talktalk ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
64 2026-08-19T19:26:51Z LDAP Injection GET /blog/anatomy-of-a-breach-manchester-united ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
65 2026-08-20T02:24:03Z LDAP Injection GET /blog/anatomy-of-a-breach-facebook-access-tokens ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
66 2026-08-20T03:39:01Z LDAP Injection GET /blog/anatomy-of-a-breach-korea-credit-bureau ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
67 2026-08-20T04:48:29Z LDAP Injection GET /blog/anatomy-of-a-breach-network-solutions ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
68 2026-08-20T21:45:49Z LDAP Injection GET /blog/anatomy-of-a-breach-yahoo-500m ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
69 2026-08-21T15:54:52Z LDAP Injection GET /blog/what-is-a-threat-led-penetration-test-tlpt ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
70 2026-08-21T21:48:25Z LDAP Injection GET /blog/are-penetration-tests-covered-under-gdpr-processing-agreements ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i

In Summary

You came. You saw. You got absolutely owned by a hedgehog.

Every request you made was detected, logged, and laughed at. Our WAF didn't even break a sweat. Maybe next time try something more challenging — like reading a book on operational security.

Pro tip: If you're going to hack a cybersecurity company, maybe don't use the same IP address for every single request. Just a thought.

Attack Leaderboard Back to Safety Hire Us Instead