Attack High Score
Leaderboard

> SELECT * FROM failed_hackers ORDER BY severity DESC LIMIT 10_

The top 10 attackers who tried — and spectacularly failed — to breach our defences. Ranked by severity, because not all failures are created equal.

Top 10 Failed Attackers

Rank IP Address Severity Score Total Attempts Top Attack Type Attack Types Used Last Seen
🥇 185.177.72.49 2552 1216 Server-Side Request Forgery 2 2026-02-12T07:06:07Z
🥈 109.123.249.184 865 169 Command Injection 9 2026-02-13T07:54:53Z
🥉 188.166.211.200 552 276 General Fuzzing / Forced Browsing 1 2026-02-11T12:49:15Z
4 158.158.42.54 436 218 General Fuzzing / Forced Browsing 1 2026-02-12T09:34:37Z
5 132.164.252.220 204 102 General Fuzzing / Forced Browsing 1 2026-02-13T02:46:33Z
6 4.194.217.214 110 55 General Fuzzing / Forced Browsing 1 2026-02-12T15:33:42Z
7 144.31.77.255 80 10 Server-Side Request Forgery 1 2026-02-13T16:16:51Z
8 20.199.107.218 64 32 General Fuzzing / Forced Browsing 1 2026-02-13T12:15:55Z
9 217.182.92.119 63 7 SQL Injection 1 2026-02-13T15:01:04Z
10 185.177.72.51 42 6 Server-Side Request Forgery 2 2026-02-12T02:08:43Z

How Scoring Works

Not all attacks are created equal. Each attempt is weighted by severity — because trying SQL injection is slightly more ambitious than poking around for /admin.

10
Command Injection
9
SQL Injection
8
Local/Remote File Inclusion
8
Server-Side Request Forgery
7
Template Injection
7
LDAP Injection
6
Cross-Site Scripting (XSS)
5
Header Injection
5
Path Traversal
2
General Fuzzing / Forced Browsing

Think you can top the leaderboard? We wouldn't recommend it. But if you insist, at least make it interesting.