Congratulations,
Dumbass

> cat /var/log/your-failures.log_

A very special round of applause for 57.141.20.54 for their valiant — and entirely unsuccessful — attempt to compromise our systems. We truly couldn't have done it without you. Well, actually we could. We did. You failed.

We Might Not Know Where You Live, But...

Did you think you were anonymous? That's adorable. Here's what we know about you:

IP Address 57.141.20.54
Country United States
Region New York
City New York
ISP / Org Unknown
Timezone Unknown
Coordinates 40.7126, -74.0066

Your Digital Fingerprint

Nice browser you've got there. It'd be a shame if someone… logged it.

meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))

Your Hall of Shame

Every single one of your pathetic attempts, lovingly preserved for posterity. Spoiler alert: they all failed.

Attack Breakdown

12
SQL Injection
61
LDAP Injection
73
Total Failed Attempts

Detailed Activity Log

# Timestamp Attack Type Method Target URI Detail
1 2026-06-13T15:38:55Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
2 2026-06-14T05:30:04Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
3 2026-06-14T07:29:16Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
4 2026-06-14T08:09:50Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
5 2026-06-14T14:26:14Z SQL Injection GET /wp-content/uploads/2020/03/NGINX-Plus_product-page-hero.png sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
6 2026-06-15T13:58:11Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
7 2026-06-15T14:40:03Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
8 2026-06-15T16:39:55Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
9 2026-06-15T21:46:39Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
10 2026-06-16T02:15:44Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
11 2026-06-17T01:30:50Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
12 2026-06-17T04:11:21Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
13 2026-08-05T22:05:35Z LDAP Injection GET /blog/penetration-testing-checklist-for-business-owners ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
14 2026-08-06T02:49:39Z LDAP Injection GET /blog/internal-vs-external-penetration-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
15 2026-08-06T03:58:39Z LDAP Injection GET /blog/anatomy-of-a-breach-singhealth ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
16 2026-08-06T17:49:02Z LDAP Injection GET /blog/can-penetration-testing-simulate-ransomware-deployment-safely ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
17 2026-08-07T01:04:18Z LDAP Injection GET /blog/anatomy-of-a-breach-att-73m ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
18 2026-08-07T11:05:11Z LDAP Injection GET /blog/anatomy-of-a-breach-cloudbleed ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
19 2026-08-07T15:05:30Z LDAP Injection GET /blog/how-do-i-ensure-the-penetration-test-aligns-with-our-specific-industry-risks ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
20 2026-08-07T22:15:56Z LDAP Injection GET /blog/anatomy-of-a-breach-moveit-clop ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
21 2026-08-07T23:04:17Z LDAP Injection GET /blog/anatomy-of-a-breach-rsa-securid ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
22 2026-08-08T00:27:06Z LDAP Injection GET /blog/anatomy-of-a-breach-facebook-533m-leak ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
23 2026-08-08T01:01:08Z LDAP Injection GET /blog/identity-authentication-access-control ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
24 2026-08-08T06:46:30Z LDAP Injection GET /blog/penetration-testing-relevant-despite-automation-ai ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
25 2026-08-08T08:51:20Z LDAP Injection GET /blog/teamviewer-hack---what-you-need-to-know ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
26 2026-08-08T11:05:33Z LDAP Injection GET /blog/how-do-testers-measure-attack-surface-exposure-from-publicly-available-information ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
27 2026-08-08T13:56:14Z LDAP Injection GET /blog/responsible-proof-of-concept ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
28 2026-08-08T15:10:16Z LDAP Injection GET /blog/anatomy-of-a-breach-sidekick-cloud-data-loss ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
29 2026-08-08T20:53:32Z LDAP Injection GET /blog/penetration-testing-vs-red-teaming-differences ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
30 2026-08-09T09:37:48Z LDAP Injection GET /blog/anatomy-of-a-breach-oracle-cloud-nyu ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
31 2026-08-09T14:12:38Z LDAP Injection GET /blog/anatomy-of-a-breach-hafnium-exchange ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
32 2026-08-10T05:00:44Z LDAP Injection GET /blog/testing-saas-and-shared-responsibility ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
33 2026-08-10T11:37:31Z LDAP Injection GET /blog/what-happens-if-critical-vulnerabilities-are-found-during-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
34 2026-08-10T18:54:05Z LDAP Injection GET /blog/reconnaissance-and-osint-in-penetration-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
35 2026-08-10T19:33:41Z LDAP Injection GET /blog/from-the-hacker-desk-mfa-not-multi-factor ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
36 2026-08-11T06:12:37Z LDAP Injection GET /blog/volt-typhoon ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
37 2026-08-11T17:41:27Z LDAP Injection GET /blog/how-do-we-prepare-our-incident-response-team-for-a-live-test ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
38 2026-08-11T20:10:45Z LDAP Injection GET /wp-content/uploads/2020/03/NGINX-Plus_product-page-hero.png ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
39 2026-08-12T00:10:22Z LDAP Injection GET /blog/anatomy-of-a-breach-snowflake-campaign ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
40 2026-08-12T00:46:48Z LDAP Injection GET /blog/is-it-better-to-use-the-same-provider-each-year-or-rotate-suppliers ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
41 2026-08-12T09:25:03Z LDAP Injection GET /blog/uk-government-breaches-2026-update ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
42 2026-08-12T10:09:04Z LDAP Injection GET /blog/from-the-hacker-desk-phishing-finance-director ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
43 2026-08-12T10:49:35Z LDAP Injection GET /blog/anatomy-of-a-breach-mod-laptop-theft ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
44 2026-08-12T10:53:16Z LDAP Injection GET /blog/anatomy-of-a-breach-uber ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
45 2026-08-12T16:16:55Z LDAP Injection GET /blog/anatomy-of-a-breach-synnovis-nhs-london ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
46 2026-08-12T21:02:08Z LDAP Injection GET /blog/what-credentials-should-a-penetration-testing-company-hold ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
47 2026-08-13T15:50:50Z LDAP Injection GET /blog/what-does-exploitation-proof-of-concept-actually-mean-in-a-report ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
48 2026-08-13T17:36:30Z LDAP Injection GET /news_sitemap.xml ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
49 2026-08-14T05:02:38Z LDAP Injection GET /blog/anatomy-of-a-breach-ticketmaster-dixons ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
50 2026-08-14T23:29:29Z LDAP Injection GET /blog/anatomy-of-a-breach-anonymous-uk-government ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
51 2026-08-15T01:40:01Z LDAP Injection GET /blog/common-penetration-testing-types-explained ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
52 2026-08-15T06:44:48Z LDAP Injection GET /blog/how-do-i-ensure-the-penetration-test-aligns-with-our-specific-industry-risks ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
53 2026-08-15T07:27:02Z LDAP Injection GET /blog/from-the-hacker-desk-exploiting-trust-between-offices ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
54 2026-08-15T10:30:40Z LDAP Injection GET /blog/anatomy-of-a-breach-2012-year-review ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
55 2026-08-15T13:53:05Z LDAP Injection GET /blog/anatomy-of-a-breach-lulzsec ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
56 2026-08-16T06:17:47Z LDAP Injection GET /blog/anatomy-of-a-breach-target ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
57 2026-08-16T07:47:43Z LDAP Injection GET /blog/mature-penetration-testing-programme-multi-year ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
58 2026-08-16T16:48:21Z LDAP Injection GET /blog/anatomy-of-a-breach-lapsus ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
59 2026-08-16T20:05:06Z LDAP Injection GET /blog/what-information-does-a-penetration-testing-provider-need-before-starting ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
60 2026-08-16T20:06:47Z LDAP Injection GET /blog/anatomy-of-a-breach-rbs-worldpay ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
61 2026-08-17T09:17:07Z LDAP Injection GET /blog/how-attackers-think ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
62 2026-08-17T17:02:51Z LDAP Injection GET /blog/anatomy-of-a-breach-23andme ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
63 2026-08-18T04:24:32Z LDAP Injection GET /blog/teamviewer-hack---what-you-need-to-know ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
64 2026-08-18T05:24:53Z LDAP Injection GET /blog/from-the-hacker-desk-backup-systems-attack-vector ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
65 2026-08-18T06:50:53Z LDAP Injection GET /blog/anatomy-of-a-breach-acs-law-anonymous ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
66 2026-08-18T15:05:27Z LDAP Injection GET /blog/understanding-pass-the-hash-attack-how-hackers-exploit-password-vulnerabilities ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
67 2026-08-18T18:48:04Z LDAP Injection GET /blog/anatomy-of-a-breach-dyn-mirai ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
68 2026-08-18T19:39:27Z LDAP Injection GET /blog/from-the-hacker-desk-coffee-machine ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
69 2026-08-19T12:56:15Z LDAP Injection GET /blog/companies-house-webfiling-flaw-directors-exposed ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
70 2026-08-19T13:39:54Z LDAP Injection GET /blog/anatomy-of-a-breach-github-great-cannon ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
71 2026-08-20T04:36:50Z LDAP Injection GET /blog/anatomy-of-a-breach-imperva ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
72 2026-08-20T07:34:50Z LDAP Injection GET /blog/cyber-essentials-demystified-danzell-changes ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
73 2026-08-20T20:39:55Z LDAP Injection GET /blog/anatomy-of-a-breach-crowdstrike-outage ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i

In Summary

You came. You saw. You got absolutely owned by a hedgehog.

Every request you made was detected, logged, and laughed at. Our WAF didn't even break a sweat. Maybe next time try something more challenging — like reading a book on operational security.

Pro tip: If you're going to hack a cybersecurity company, maybe don't use the same IP address for every single request. Just a thought.

Attack Leaderboard Back to Safety Hire Us Instead