Congratulations,
Dumbass

> cat /var/log/your-failures.log_

A very special round of applause for 57.141.20.29 for their valiant — and entirely unsuccessful — attempt to compromise our systems. We truly couldn't have done it without you. Well, actually we could. We did. You failed.

We Might Not Know Where You Live, But...

Did you think you were anonymous? That's adorable. Here's what we know about you:

IP Address 57.141.20.29
Geolocation data unavailable — but don't worry, we're still watching.

Your Digital Fingerprint

Nice browser you've got there. It'd be a shame if someone… logged it.

meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))

Your Hall of Shame

Every single one of your pathetic attempts, lovingly preserved for posterity. Spoiler alert: they all failed.

Attack Breakdown

9
SQL Injection
84
LDAP Injection
93
Total Failed Attempts

Detailed Activity Log

# Timestamp Attack Type Method Target URI Detail
1 2026-06-13T04:23:36Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
2 2026-06-13T11:07:45Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
3 2026-06-14T07:31:32Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
4 2026-06-15T16:20:42Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
5 2026-06-15T19:54:41Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
6 2026-06-15T20:03:47Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
7 2026-06-15T21:38:15Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
8 2026-06-16T17:34:13Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
9 2026-06-17T02:07:40Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
10 2026-08-06T05:08:17Z LDAP Injection GET /blog/what-tools-do-professional-penetration-testers-typically-use ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
11 2026-08-06T13:49:37Z LDAP Injection GET /blog/how-do-testers-validate-whether-a-vulnerability-is-truly-exploitable-in-your-environment ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
12 2026-08-07T00:10:06Z LDAP Injection GET /index.php/blog/a-structured-approach-to-penetration-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
13 2026-08-07T00:59:32Z LDAP Injection GET /blog/anatomy-of-a-breach-eternalblue-released ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
14 2026-08-07T21:21:10Z LDAP Injection GET /blog/anatomy-of-a-breach-jlr-2025 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
15 2026-08-08T01:05:23Z LDAP Injection GET /blog/how-can-penetration-testing-support-iso-27001-compliance-rather-than-simply-tick-a-box ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
16 2026-08-08T02:35:59Z LDAP Injection GET /blog/apt41 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
17 2026-08-08T13:07:21Z LDAP Injection GET /blog/why-do-many-penetration-test-reports-fail-to-drive-meaningful-remediation ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
18 2026-08-08T23:02:26Z LDAP Injection GET /about ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
19 2026-08-09T06:18:42Z LDAP Injection GET /blog/business-guide-to-penetration-testing-choosing-a-provider ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
20 2026-08-09T11:28:58Z LDAP Injection GET /blog/anatomy-of-a-breach-sharepoint-zero-day ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
21 2026-08-09T20:01:53Z LDAP Injection GET /blog/how-to-prepare-for-a-penetration-test ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
22 2026-08-10T00:11:50Z LDAP Injection GET /blog/anatomy-of-a-breach-capital-one ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
23 2026-08-10T16:54:12Z LDAP Injection GET /blog/cve-2024-21410 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
24 2026-08-10T17:44:39Z LDAP Injection GET /blog/anatomy-of-a-breach-rbs-worldpay ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
25 2026-08-10T18:43:17Z LDAP Injection GET /blog/how-do-penetration-testers-protect-sensitive-information-discovered-during-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
26 2026-08-11T00:25:12Z LDAP Injection GET /blog/what-is-privilege-escalation-and-how-easily-can-it-occur-in-mature-organisations ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
27 2026-08-11T00:27:54Z LDAP Injection GET /blog/what-kpis-should-i-measure-to-assess-penetration-testing-effectiveness ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
28 2026-08-11T16:14:12Z LDAP Injection GET /blog/fixing-ssl-medium-strength-cipher-suites-supported/ ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
29 2026-08-11T16:54:26Z LDAP Injection GET /blog/anatomy-of-a-breach-norsk-hydro ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
30 2026-08-11T23:08:23Z LDAP Injection GET /blog/anatomy-of-a-breach-lastpass ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
31 2026-08-12T03:54:21Z LDAP Injection GET /blog/penetration-testing-relevant-despite-automation-ai ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
32 2026-08-12T06:27:57Z LDAP Injection GET /blog/penetration-testing-secure-architecture-design ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
33 2026-08-12T10:04:00Z LDAP Injection GET /blog/anatomy-of-a-breach-western-digital ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
34 2026-08-12T15:26:26Z LDAP Injection GET /blog/smart-slider-wordpress-supply-chain-attack-april-2026 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
35 2026-08-12T21:40:19Z LDAP Injection GET /blog/should-we-inform-staff-before-conducting-an-internal-penetration-test ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
36 2026-08-13T00:18:09Z LDAP Injection GET /blog/how-do-testers-adapt-methodology-when-targeting-operational-technology-or-iot-environments ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
37 2026-08-13T01:29:26Z LDAP Injection GET /blog/what-is-the-difference-between-black-box-grey-box-and-white-box-testing-and-which-should-i-choose ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
38 2026-08-13T03:49:44Z LDAP Injection GET /blog/anatomy-of-a-breach-royal-mail-lockbit ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
39 2026-08-13T18:42:00Z LDAP Injection GET /blog/anatomy-of-a-breach-2022-year-review ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
40 2026-08-13T21:10:08Z LDAP Injection GET /blog/anatomy-of-a-breach-operation-shady-rat ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
41 2026-08-13T21:54:06Z LDAP Injection GET /blog/how-do-i-ensure-the-penetration-test-aligns-with-our-specific-industry-risks ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
42 2026-08-13T22:34:04Z LDAP Injection GET /blog/anatomy-of-a-breach-lockheed-martin ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
43 2026-08-14T01:58:09Z LDAP Injection GET /sitemap.html ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
44 2026-08-14T04:06:22Z LDAP Injection GET /blog/what-questions-should-i-ask-before-signing-a-penetration-testing-contract ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
45 2026-08-14T13:06:14Z LDAP Injection GET /blog/snowden-nsa-leak-six-month-update ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
46 2026-08-15T00:03:09Z LDAP Injection GET /blog/sector-under-the-microscope-submersible-uav-security ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
47 2026-08-15T02:46:24Z LDAP Injection GET /blog/anatomy-of-a-breach-livingsocial ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
48 2026-08-15T07:23:49Z LDAP Injection GET /blog/sony-pictures-breach-six-month-update ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
49 2026-08-15T13:57:01Z LDAP Injection GET /blog/anatomy-of-a-breach-hollywood-presbyterian-ransomware ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
50 2026-08-15T19:56:50Z LDAP Injection GET /blog/anatomy-of-a-breach-ukraine-cyber-warfare ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
51 2026-08-15T21:32:29Z LDAP Injection GET /blog/anatomy-of-a-breach-sap-netweaver ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
52 2026-08-16T00:33:47Z LDAP Injection GET /blog/from-the-hacker-desk-smart-building-management-system ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
53 2026-08-16T08:48:55Z LDAP Injection GET /blog/how-can-penetration-testing-support-iso-27001-compliance-rather-than-simply-tick-a-box ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
54 2026-08-16T14:15:47Z LDAP Injection GET /blog/anatomy-of-a-breach-twitter-hack ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
55 2026-08-17T02:11:04Z LDAP Injection GET /blog/pen-test-reports-regulatory-legal-insurance ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
56 2026-08-17T08:51:11Z LDAP Injection GET /sitemap.html ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
57 2026-08-17T15:46:27Z LDAP Injection GET /blog/dora-requirements-penetration-testing-deep-dive ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
58 2026-08-17T16:15:50Z LDAP Injection GET /news-sitemap.xml ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
59 2026-08-18T03:10:31Z LDAP Injection GET /blog/anatomy-of-a-breach-national-public-data ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
60 2026-08-18T05:33:11Z LDAP Injection GET /blog/vulnerability-list-vs-narrative-report ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
61 2026-08-18T11:35:28Z LDAP Injection GET /blog/from-the-hacker-desk-guest-wifi-sensitive-data ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
62 2026-08-18T18:41:43Z LDAP Injection GET /blog/anatomy-of-a-breach-crowdstrike-outage ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
63 2026-08-19T00:53:36Z LDAP Injection GET /blog/anatomy-of-a-breach-global-payments ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
64 2026-08-19T05:31:57Z LDAP Injection GET /blog/how-confidential-is-the-penetration-testing-report ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
65 2026-08-19T06:03:58Z LDAP Injection GET /blog/anatomy-of-a-breach-flame-malware ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
66 2026-08-19T18:12:32Z LDAP Injection GET /blog/anatomy-of-a-breach-heartland-payment-systems ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
67 2026-08-19T22:24:17Z LDAP Injection GET /blog/anatomy-of-a-breach-rbs-worldpay ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
68 2026-08-20T02:40:58Z LDAP Injection GET /blog/can-penetration-testing-identify-insider-threats ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
69 2026-08-20T04:32:14Z LDAP Injection GET /blog/anatomy-of-a-breach-2013-year-review ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
70 2026-08-20T09:11:03Z LDAP Injection GET /blog/apt42 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
71 2026-08-20T23:16:22Z LDAP Injection GET /blog/from-the-hacker-desk-drone-to-network-pivot ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
72 2026-08-21T01:22:11Z LDAP Injection GET /blog/anatomy-of-a-breach-morrisons-insider ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
73 2026-08-22T00:01:54Z LDAP Injection GET /blog/how-can-businesses-ensure-their-remediation-actions-are-effective-after-a-test ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
74 2026-08-22T08:25:26Z LDAP Injection GET /blog/anatomy-of-a-breach-synnovis-nhs-london ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
75 2026-08-22T10:35:15Z LDAP Injection GET /blog/teamviewer-hack---what-you-need-to-know ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
76 2026-08-22T11:32:38Z LDAP Injection GET /blog/penetration-testing-secure-architecture-design ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
77 2026-08-22T17:00:04Z LDAP Injection GET /blog/anatomy-of-a-breach-whatsapp-nso-pegasus ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
78 2026-08-22T22:47:33Z LDAP Injection GET /blog/business-guide-to-penetration-testing-preparation ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
79 2026-08-23T14:43:27Z LDAP Injection GET /blog/from-the-hacker-desk-drone-hijack-construction ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
80 2026-08-24T00:22:14Z LDAP Injection GET /blog/anatomy-of-a-breach-microsoft-250m ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
81 2026-08-24T20:48:21Z LDAP Injection GET /blog/anatomy-of-a-breach-nhs-advanced-lastpass ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
82 2026-08-25T01:46:12Z LDAP Injection GET /blog/what-actually-happens-during-a-professional-penetration-test-from-day-one-to-final-report ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
83 2026-08-25T04:07:11Z LDAP Injection GET /blog/anatomy-of-a-breach-microsoft-250m ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
84 2026-08-25T04:31:49Z LDAP Injection GET /blog/penetration-testing-vs-red-teaming-differences ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
85 2026-09-01T15:31:00Z LDAP Injection GET /blog/anatomy-of-a-breach-twitter-54m-api ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
86 2026-09-01T18:01:32Z LDAP Injection GET /blog/anatomy-of-a-breach-credential-stuffing-epidemic ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
87 2026-09-01T19:34:16Z LDAP Injection GET /blog/apt33-the-aerospace-stalker ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
88 2026-09-01T19:50:07Z LDAP Injection GET /blog/privilege-escalation-explained ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
89 2026-09-01T19:50:13Z LDAP Injection GET /blog/anatomy-of-a-breach-blue-yonder ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
90 2026-09-01T22:46:06Z LDAP Injection GET /blog/how-do-testers-approach-api-security-assessments ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
91 2026-09-02T17:58:15Z LDAP Injection GET /blog/anatomy-of-a-breach-facebook-plaintext-passwords ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
92 2026-09-03T00:43:43Z LDAP Injection GET /blog/can-penetration-testing-disrupt-our-live-production-systems ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
93 2026-09-03T04:38:21Z LDAP Injection GET /blog/anatomy-of-a-breach-2023-year-review ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i

In Summary

You came. You saw. You got absolutely owned by a hedgehog.

Every request you made was detected, logged, and laughed at. Our WAF didn't even break a sweat. Maybe next time try something more challenging — like reading a book on operational security.

Pro tip: If you're going to hack a cybersecurity company, maybe don't use the same IP address for every single request. Just a thought.

Attack Leaderboard Back to Safety Hire Us Instead