Congratulations,
Dumbass

> cat /var/log/your-failures.log_

A very special round of applause for 57.141.20.62 for their valiant — and entirely unsuccessful — attempt to compromise our systems. We truly couldn't have done it without you. Well, actually we could. We did. You failed.

We Might Not Know Where You Live, But...

Did you think you were anonymous? That's adorable. Here's what we know about you:

IP Address 57.141.20.62
Country United States
Region New York
City New York
ISP / Org Unknown
Timezone Unknown
Coordinates 40.7126, -74.0066

Your Digital Fingerprint

Nice browser you've got there. It'd be a shame if someone… logged it.

meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))

Your Hall of Shame

Every single one of your pathetic attempts, lovingly preserved for posterity. Spoiler alert: they all failed.

Attack Breakdown

1
General Fuzzing / Forced Browsing
8
SQL Injection
74
LDAP Injection
83
Total Failed Attempts

Detailed Activity Log

# Timestamp Attack Type Method Target URI Detail
1 2026-04-20T21:36:08Z General Fuzzing / Forced Browsing GET /blog/?tag=nessus general_fuzzing [GET][tag] matched /(?:sqlmap|havij|pangolin|acunetix|nessus|nikto|netsparker|burpsuite|owasp[\s-]?zap)/i
2 2026-06-13T18:55:33Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
3 2026-06-14T08:38:48Z SQL Injection GET /null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
4 2026-06-14T09:56:10Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
5 2026-06-14T11:09:07Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
6 2026-06-14T12:29:54Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
7 2026-06-15T12:55:07Z SQL Injection GET /wp-content/uploads/2020/03/NGINX-Plus_product-page-hero.png sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
8 2026-06-15T18:21:39Z SQL Injection GET /blog/null sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
9 2026-06-16T03:08:03Z SQL Injection GET /wp-content/uploads/2020/03/NGINX-Plus_product-page-hero.png sqli [HEADER][HTTP_ACCEPT] matched /\/\*[\s\S]*?\*\//
10 2026-08-06T07:12:47Z LDAP Injection GET /blog/from-the-hacker-desk-coffee-machine ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
11 2026-08-06T07:16:08Z LDAP Injection GET /blog/anatomy-of-a-breach-rbs-worldpay ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
12 2026-08-06T09:29:08Z LDAP Injection GET /blog/what-are-the-most-common-misconfigurations-discovered-during-internal-network-tests ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
13 2026-08-06T14:22:48Z LDAP Injection GET /blog/from-the-hacker-desk-cracking-passwords-afternoon ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
14 2026-08-06T22:54:01Z LDAP Injection GET /blog/sector-under-the-microscope-construction ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
15 2026-08-07T00:27:58Z LDAP Injection GET /blog/salt-typhoon ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
16 2026-08-07T16:51:39Z LDAP Injection GET /blog/apt34 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
17 2026-08-07T17:53:52Z LDAP Injection GET /blog/how-do-penetration-testers-protect-sensitive-information-discovered-during-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
18 2026-08-07T20:10:51Z LDAP Injection GET /blog/how-do-testers-safely-exploit-vulnerabilities-without-disrupting-live-business-systems ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
19 2026-08-07T23:50:49Z LDAP Injection GET /blog/from-the-hacker-desk-usb-opened-the-door ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
20 2026-08-08T01:29:35Z LDAP Injection GET /blog/anatomy-of-a-breach-diginotar-ca ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
21 2026-08-09T03:38:52Z LDAP Injection GET /blog/from-the-hacker-desk-intern-laptop-beachhead ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
22 2026-08-09T11:43:41Z LDAP Injection GET /blog/how-do-testers-approach-api-security-assessments ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
23 2026-08-10T11:15:11Z LDAP Injection GET /blog/anatomy-of-a-breach-heartland-payment-systems ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
24 2026-08-11T04:19:16Z LDAP Injection GET /blog/from-the-hacker-desk-cracking-passwords-afternoon ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
25 2026-08-11T09:26:44Z LDAP Injection GET /blog/writing-findings-teams-can-remediate ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
26 2026-08-11T16:20:31Z LDAP Injection GET /blog/how-can-penetration-testing-reduce-cyber-insurance-premiums ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
27 2026-08-11T19:42:17Z LDAP Injection GET /blog/what-is-included-in-a-retest-and-is-it-charged-separately ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
28 2026-08-12T00:17:36Z LDAP Injection GET /blog/anatomy-of-a-breach-icbc-lockbit ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
29 2026-08-12T06:45:09Z LDAP Injection GET /blog/anatomy-of-a-breach-shellshock ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
30 2026-08-12T07:25:52Z LDAP Injection GET /blog/anatomy-of-a-breach-anthem ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
31 2026-08-12T15:28:17Z LDAP Injection GET /blog/penetration-testing-evolves-with-business ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
32 2026-08-12T16:06:42Z LDAP Injection GET /blog/anatomy-of-a-breach-github-great-cannon ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
33 2026-08-13T03:10:30Z LDAP Injection GET /blog/from-the-hacker-desk-drone-airborne-recon ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
34 2026-08-13T05:09:23Z LDAP Injection GET /blog/anatomy-of-a-breach-nhs-trust-fines-2011 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
35 2026-08-13T11:41:54Z LDAP Injection GET /blog/how-do-testers-measure-attack-surface-exposure-from-publicly-available-information ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
36 2026-08-14T01:36:12Z LDAP Injection GET /blog/the-digital-parasite-why-attackers-stopped-breaking-things-and-started-moving-in ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
37 2026-08-14T04:32:47Z LDAP Injection GET /blog/how-do-penetration-testers-balance-stealth-with-evidence-gathering ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
38 2026-08-15T10:22:45Z LDAP Injection GET /blog/what-happens-before-a-penetration-test ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
39 2026-08-15T12:03:59Z LDAP Injection GET /blog/anatomy-of-a-breach-ubuntu-forums ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
40 2026-08-15T20:14:06Z LDAP Injection GET /blog/how-can-businesses-ensure-their-remediation-actions-are-effective-after-a-test ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
41 2026-08-15T22:10:22Z LDAP Injection GET /blog/how-do-testers-assess-cloud-environments-differently-from-on-premise-infrastructure ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
42 2026-08-16T02:42:49Z LDAP Injection GET /blog/reconnaissance-and-osint-in-penetration-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
43 2026-08-16T02:47:07Z LDAP Injection GET /blog/anatomy-of-a-breach-nortel-networks ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
44 2026-08-16T06:15:44Z LDAP Injection GET /blog/from-the-hacker-desk-default-credentials-ics ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
45 2026-08-16T14:46:33Z LDAP Injection GET /blog/anatomy-of-a-breach-capital-one ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
46 2026-08-16T20:09:47Z LDAP Injection GET /blog/anatomy-of-a-breach-baltimore-ransomware ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
47 2026-08-17T02:08:26Z LDAP Injection GET /blog/anatomy-of-a-breach-facebook-plaintext-passwords ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
48 2026-08-17T13:24:57Z LDAP Injection GET /blog/how-do-i-evaluate-the-real-world-experience-of-a-penetration-testing-team ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
49 2026-08-17T15:33:33Z LDAP Injection GET /blog/how-often-should-an-organisation-conduct-external-and-internal-penetration-tests ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
50 2026-08-17T16:15:28Z LDAP Injection GET /blog/anatomy-of-a-breach-sap-netweaver ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
51 2026-08-17T16:56:13Z LDAP Injection GET /sitemap.txt ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
52 2026-08-18T00:54:53Z LDAP Injection GET /blog/anatomy-of-a-breach-equifax ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
53 2026-08-18T01:49:39Z LDAP Injection GET /blog/how-do-testers-safely-exploit-vulnerabilities-without-disrupting-live-business-systems ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
54 2026-08-18T04:23:02Z LDAP Injection GET /blog/how-do-we-define-the-scope-of-a-penetration-test-properly ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
55 2026-08-18T05:09:26Z LDAP Injection GET /blog/anatomy-of-a-breach-zappos ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
56 2026-08-18T14:03:01Z LDAP Injection GET /blog/anatomy-of-a-breach-vault-7 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
57 2026-08-18T23:32:32Z LDAP Injection GET /blog/business-guide-to-penetration-testing-choosing-a-provider ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
58 2026-08-19T01:10:25Z LDAP Injection GET /blog/anatomy-of-a-breach-hbo-hack ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
59 2026-08-19T05:19:43Z LDAP Injection GET /blog/what-is-the-typical-turnaround-time-for-a-final-report ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
60 2026-08-20T04:26:17Z LDAP Injection GET /blog/anatomy-of-a-breach-synnovis-nhs-london ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
61 2026-08-20T07:10:12Z LDAP Injection GET /sitemap.html ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
62 2026-08-20T16:04:14Z LDAP Injection GET /blog/anatomy-of-a-breach-icloud-photos ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
63 2026-08-20T19:43:16Z LDAP Injection GET /blog/privilege-escalation-explained ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
64 2026-08-21T04:07:39Z LDAP Injection GET /blog/what-does-a-crest-aligned-penetration-testing-methodology-actually-involve ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
65 2026-08-21T06:36:04Z LDAP Injection GET /blog/what-role-does-password-hygiene-still-play-in-modern-breach-scenarios ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
66 2026-08-21T07:44:07Z LDAP Injection GET /blog/anatomy-of-a-breach-powerschool ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
67 2026-08-22T00:55:55Z LDAP Injection GET /blog/difference-between-a-penetration-test-and-a-vulnerability-scan ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
68 2026-08-22T01:03:43Z LDAP Injection GET /blog/the-human-element-of-penetration-testing ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
69 2026-08-22T03:22:17Z LDAP Injection GET /blog/anatomy-of-a-breach-sidekick-cloud-data-loss ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
70 2026-08-22T03:45:16Z LDAP Injection GET /airspace-security ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
71 2026-08-22T08:46:57Z LDAP Injection GET /blog/cyber-essentials-demystified-security-updates ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
72 2026-08-22T17:08:27Z LDAP Injection GET /blog/what-evidence-will-i-receive-for-audit-or-compliance-purposes ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
73 2026-08-23T01:48:10Z LDAP Injection GET /blog/anatomy-of-a-breach-twitter-54m-api ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
74 2026-08-23T02:53:27Z LDAP Injection GET /blog/what-questions-should-i-ask-before-signing-a-penetration-testing-contract ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
75 2026-08-23T04:08:20Z LDAP Injection GET /blog/anatomy-of-a-breach-colonial-pipeline ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
76 2026-08-23T15:30:54Z LDAP Injection GET /blog/78-percent-uk-manufacturers-cyber-incidents-2026 ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
77 2026-08-24T00:35:02Z LDAP Injection GET /blog/anatomy-of-a-breach-spamhaus-ddos ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
78 2026-08-24T05:03:54Z LDAP Injection GET /blog/business-guide-to-penetration-testing-understanding-your-report ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
79 2026-08-24T07:03:33Z LDAP Injection GET /blog/basic-fit-data-breach-analysis ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
80 2026-08-24T17:11:23Z LDAP Injection GET /blog/anatomy-of-a-breach-marriott-starwood ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
81 2026-08-25T00:10:10Z LDAP Injection GET /blog/anatomy-of-a-breach-16-billion-credentials ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
82 2026-08-25T04:20:07Z LDAP Injection GET /blog/sector-under-the-microscope-professional-services ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i
83 2026-08-25T04:51:24Z LDAP Injection GET /blog/how-do-i-evaluate-the-real-world-experience-of-a-penetration-testing-team ldap_injection [HEADER][HTTP_USER_AGENT] matched /[)(|*\\]\s*[)(|*\\]/i

In Summary

You came. You saw. You got absolutely owned by a hedgehog.

Every request you made was detected, logged, and laughed at. Our WAF didn't even break a sweat. Maybe next time try something more challenging — like reading a book on operational security.

Pro tip: If you're going to hack a cybersecurity company, maybe don't use the same IP address for every single request. Just a thought.

Attack Leaderboard Back to Safety Hire Us Instead