Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behavi ...
show moreBad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 4 on 1 host(s)
User agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.
Requested, e.g.:
- console.[REDACTED]/
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3
Requested, e.g.:
- qa.[REDACTED]/.git/config
show less
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behavi ...
show moreBad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 7 on 1 host(s)
User agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.
Requested, e.g.:
- testing.[REDACTED]/
- testing.[REDACTED]/.git/config
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa
Requested, e.g.:
- registry.[REDACTED]/wp-admin/
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa
Requested, e.g.:
- registry.[REDACTED]/xmlrpc.php
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa
Requested, e.g.:
- registry.[REDACTED]/wp-login.php
show less
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behavi ...
show moreBad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 3 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Sa
Requested, e.g.:
- old.[REDACTED]/
show less
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behavi ...
show moreBad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 4 on 1 host(s)
User agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3
Requested, e.g.:
- billing.[REDACTED]/
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 6 on 1 host(s)
User agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3
Requested, e.g.:
- k8s.[REDACTED]/
- k8s.[REDACTED]/.git/config
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 2 on 1 host(s)
User agent:
Requested, e.g.:
- jelly.[REDACTED]/this_is_a_new_hello_world.php
- jelly.[REDACTED]/wp-content/plugins/hellopress/wp_filemanager.php
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa
Requested, e.g.:
- uat.[REDACTED]/wp-admin/
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa
Requested, e.g.:
- uat.[REDACTED]/xmlrpc.php
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa
Requested, e.g.:
- uat.[REDACTED]/wp-login.php
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36
Requested, e.g.:
- [REDACTED]/.git/index
show less
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behavi ...
show moreBad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 5 on 1 host(s)
User agent: Mozilla/5.0 (Windows; U; Windows XP) Gecko MultiZilla/1.6.1.0a | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.104 Safari/5
Requested, e.g.:
- sftp.[REDACTED]/
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa
Requested, e.g.:
- login.[REDACTED]/wp-login.php
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa
Requested, e.g.:
- login.[REDACTED]/xmlrpc.php
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa
Requested, e.g.:
- login.[REDACTED]/xmlrpc.php
show less
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behavi ...
show moreBad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 6 on 2 host(s)
User agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko; compatible; zgrab/0.x) Chr | Mozilla/5.0 (compatible; Expanse; +https://www.expanse.co)
Requested, e.g.:
- mail.[REDACTED]/nopeebbngqkac
- n8n.[REDACTED]/
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa
Requested, e.g.:
- backup.[REDACTED]/xmlrpc.php
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa
Requested, e.g.:
- backup.[REDACTED]/xmlrpc.php
show less
Used an AWS access key that exists only in a honeypot's fake config file (canary token) at 2026-11-0 ...
show moreUsed an AWS access key that exists only in a honeypot's fake config file (canary token) at 2026-11-04 04:12 UTC, API call GetCallerIdentity, client Boto3/1.42.73 md/Botocore#1.42.73 ua/2.1 os/linux#6.19.13+parrot7-amd64 md/arch#x86_64 lang/python#3.13.5 md/pyimpl#CPyt
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa
Requested, e.g.:
- sso.[REDACTED]/wp-admin/
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa
Requested, e.g.:
- sso.[REDACTED]/wp-login.php
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git . ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa
Requested, e.g.:
- sso.[REDACTED]/xmlrpc.php
show less
Web App Attack
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.