Congratulations,
Dumbass

> cat /var/log/your-failures.log_

A very special round of applause for 57.141.20.61 for their valiant — and entirely unsuccessful — attempt to compromise our systems. We truly couldn't have done it without you. Well, actually we could. We did. You failed.

We Might Not Know Where You Live, But...

Did you think you were anonymous? That's adorable. Here's what we know about you:

IP Address 57.141.20.61
Country United States
Region New York
City New York
ISP / Org Unknown
Timezone Unknown
Coordinates 40.7126, -74.0066

Your Digital Fingerprint

Nice browser you've got there. It'd be a shame if someone… logged it.

meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))

Your Hall of Shame

Every single one of your pathetic attempts, lovingly preserved for posterity. Spoiler alert: they all failed.

Attack Breakdown

8
SQL Injection
69
LDAP Injection
77
Total Failed Attempts

Detailed Activity Log

# Timestamp Attack Type Method Target URI Detail
1 2026-06-13T11:27:20Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
2 2026-06-13T11:29:15Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
3 2026-06-13T22:08:50Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
4 2026-06-13T22:29:52Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
5 2026-06-14T03:21:09Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
6 2026-06-14T15:18:03Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
7 2026-06-17T03:58:33Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
8 2026-06-17T04:54:03Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
9 2026-08-05T20:50:43Z LDAP Injection GET /blog/how-do-testers-safely-exploit-vulnerabilities-without-disrupting-live-business-systems ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
10 2026-08-06T01:42:44Z LDAP Injection GET /blog/penetration-testing-challenge-assumptions-not-confirm-comfort ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
11 2026-08-06T04:00:39Z LDAP Injection GET /blog/sector-under-the-microscope-local-government ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
12 2026-08-06T17:48:44Z LDAP Injection GET /blog/can-penetration-testing-uncover-weaknesses-in-remote-working-and-vpn-architectures ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
13 2026-08-06T20:02:56Z LDAP Injection GET /blog/from-the-hacker-desk-superyacht-keylock ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
14 2026-08-07T16:11:15Z LDAP Injection GET /blog/anatomy-of-a-breach-collins-airports ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
15 2026-08-08T01:18:38Z LDAP Injection GET /blog/penetration-testing-evolves-with-business ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
16 2026-08-08T11:06:02Z LDAP Injection GET /blog/anatomy-of-a-breach-2012-year-review ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
17 2026-08-08T18:03:52Z LDAP Injection GET /blog/anatomy-of-a-breach-moonpig ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
18 2026-08-09T17:19:54Z LDAP Injection GET /blog/anatomy-of-a-breach-network-solutions ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
19 2026-08-09T21:22:59Z LDAP Injection GET /penetration-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
20 2026-08-10T11:39:29Z LDAP Injection GET /blog/when-should-a-business-choose-a-red-team-engagement-instead-of-a-standard-penetration-test ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
21 2026-08-10T23:40:05Z LDAP Injection GET /blog/apt27 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
22 2026-08-11T01:25:20Z LDAP Injection GET /blog/what-makes-a-web-application-penetration-test-genuinely-thorough ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
23 2026-08-11T07:07:49Z LDAP Injection GET /blog/sector-under-the-microscope-professional-services ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
24 2026-08-11T09:10:28Z LDAP Injection GET /blog/anatomy-of-a-breach-red-cross-icrc ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
25 2026-08-11T16:54:27Z LDAP Injection GET /blog/anatomy-of-a-breach-2013-year-review ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
26 2026-08-11T18:46:03Z LDAP Injection GET /blog/anatomy-of-a-breach-cryptolocker ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
27 2026-08-11T22:21:14Z LDAP Injection GET /blog/who-owns-the-data-generated-during-a-penetration-test ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
28 2026-08-12T06:18:29Z LDAP Injection GET /blog/jlr-breach-deep-dive ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
29 2026-08-12T12:58:25Z LDAP Injection GET /blog/anatomy-of-a-breach-620m-accounts ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
30 2026-08-13T07:52:19Z LDAP Injection GET /responsible-disclosure ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
31 2026-08-13T18:55:33Z LDAP Injection GET /blog/penetration-testing-and-defensive-security ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
32 2026-08-13T19:54:30Z LDAP Injection GET /blog/anatomy-of-a-breach-collection-1 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
33 2026-08-14T01:33:47Z LDAP Injection GET /blog/anatomy-of-a-breach-anthem ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
34 2026-08-14T04:39:38Z LDAP Injection GET /blog/xml-external-entity-attack ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
35 2026-08-14T13:24:02Z LDAP Injection GET /blog/what-is-included-in-a-retest-and-is-it-charged-separately ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
36 2026-08-15T06:03:46Z LDAP Injection GET /responsible-disclosure ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
37 2026-08-15T10:00:06Z LDAP Injection GET /blog/how-confidential-is-the-penetration-testing-report ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
38 2026-08-15T11:02:44Z LDAP Injection GET /blog/rockstar-games-breach-shinyhunters-supply-chain-attack-analysis ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
39 2026-08-15T12:23:45Z LDAP Injection GET /blog/from-the-hacker-desk-gps-spoofing-patrol-drone ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
40 2026-08-15T16:09:53Z LDAP Injection GET /blog/attack-surface-mapping ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
41 2026-08-15T23:05:54Z LDAP Injection GET /blog/anatomy-of-a-breach-western-digital ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
42 2026-08-16T02:06:48Z LDAP Injection GET /blog/penetration-testing-enables-decisions-resilience-confidence ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
43 2026-08-16T05:41:05Z LDAP Injection GET /blog/anatomy-of-a-breach-gmp-memory-stick ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
44 2026-08-16T05:49:30Z LDAP Injection GET /blog/anatomy-of-a-breach-uk-ico-enforcement-2012 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
45 2026-08-16T07:16:35Z LDAP Injection GET /blog/cambridge-analytica-breach-deep-dive ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
46 2026-08-16T13:09:42Z LDAP Injection GET /blog/anatomy-of-a-breach-uk-government-data-loss-epidemic ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
47 2026-08-16T17:30:12Z LDAP Injection GET /blog/cyber-essentials-demystified-malware-protection ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
48 2026-08-17T02:18:55Z LDAP Injection GET /blog/anatomy-of-a-breach-premera-blue-cross ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
49 2026-08-17T15:49:56Z LDAP Injection GET /blog/anatomy-of-a-breach-facebook-access-tokens ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
50 2026-08-17T16:15:48Z LDAP Injection GET /blog/can-testing-cover-mobile-applications-and-apis-together ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
51 2026-08-17T23:48:13Z LDAP Injection GET /blog/capgemini-data-breach-20gb-of-sensitive-information-stolen ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
52 2026-08-18T01:48:55Z LDAP Injection GET /blog/should-we-inform-staff-before-conducting-an-internal-penetration-test ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
53 2026-08-18T02:55:22Z LDAP Injection GET /blog/anatomy-of-a-breach-gonzalez-indictment ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
54 2026-08-18T10:53:55Z LDAP Injection GET /blog/anatomy-of-a-breach-norsk-hydro ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
55 2026-08-18T10:55:19Z LDAP Injection GET /blog/anatomy-of-a-breach-mega-breach-dumps ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
56 2026-08-18T19:43:43Z LDAP Injection GET /blog/anatomy-of-a-breach-comodo-ca ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
57 2026-08-18T22:12:01Z LDAP Injection GET /blog/anatomy-of-a-breach-att-73m ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
58 2026-08-19T05:41:54Z LDAP Injection GET /blog/penetration-testing-relevant-despite-automation-ai ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
59 2026-08-19T11:27:23Z LDAP Injection GET /blog/anatomy-of-a-breach-kaseya-vsa ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
60 2026-08-19T19:46:47Z LDAP Injection GET /blog/how-do-phishing-simulations-differ-from-real-adversary-social-engineering-campaigns ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
61 2026-08-20T09:35:43Z LDAP Injection GET /blog/from-the-hacker-desk-drone-controller-firmware ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
62 2026-08-20T20:59:16Z LDAP Injection GET /blog/anatomy-of-a-breach-livingsocial ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
63 2026-08-20T21:18:11Z LDAP Injection GET /blog/how-do-providers-ensure-testing-is-legal-and-authorised ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
64 2026-08-21T01:25:27Z LDAP Injection GET /blog/how-do-ethical-hackers-think-differently-from-traditional-it-security-teams ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
65 2026-08-21T02:25:23Z LDAP Injection GET /blog/cyber-essentials-demystified-secure-configuration ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
66 2026-08-21T06:37:10Z LDAP Injection GET /blog/penetration-test-report-explained ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
67 2026-08-21T08:07:13Z LDAP Injection GET /blog/how-do-penetration-testers-protect-sensitive-information-discovered-during-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
68 2026-08-21T09:12:28Z LDAP Injection GET /blog/anatomy-of-a-breach-new-york-times-china ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
69 2026-08-21T13:39:29Z LDAP Injection GET /blog/cyber-essentials-demystified-access-control ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
70 2026-08-21T15:35:51Z LDAP Injection GET /blog/choosing-penetration-testing-provider-methodology-quality-expertise ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
71 2026-08-22T04:32:50Z LDAP Injection GET /blog/from-the-hacker-desk-mfa-not-multi-factor ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
72 2026-08-22T08:37:48Z LDAP Injection GET /blog/the-report-is-the-deliverable ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
73 2026-08-22T09:49:13Z LDAP Injection GET /blog/what-are-the-ethical-boundaries-of-professional-hacking ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
74 2026-08-23T09:04:11Z LDAP Injection GET /blog/anatomy-of-a-breach-dusseldorf-hospital ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
75 2026-08-23T09:52:46Z LDAP Injection GET /blog/can-a-penetration-test-demonstrate-resilience-against-ransomware ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
76 2026-08-23T20:06:15Z LDAP Injection GET /blog/anatomy-of-a-breach-att-ipad-email ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
77 2026-08-23T21:39:07Z LDAP Injection GET /blog/anatomy-of-a-breach-t-mobile-us-2018 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i

In Summary

You came. You saw. You got absolutely owned by a hedgehog.

Every request you made was detected, logged, and laughed at. Our WAF didn't even break a sweat. Maybe next time try something more challenging — like reading a book on operational security.

Pro tip: If you're going to hack a cybersecurity company, maybe don't use the same IP address for every single request. Just a thought.

Attack Leaderboard Back to Safety Hire Us Instead