🍯 Honeypot Intelligence

Categories

Type	Hits
other	258
unknown	147
targeted	121
vuln_scan	11
automated	6
robots	3
graphql	3
aws_probe	1
env_file	1
phpmyadmin	1
llm_agent	1

Subdomain Aliases

Subdomain	Hits
backup	275
staging	1
admin	1

Trap Endpoints

• /.env - Fake credentials
• /.git/config - Fake repo
• /wp-admin - Fake WordPress
• /debug - Fake debug info
• /graphql - Fake GraphQL
• /backup.sql - Fake DB dump
• /api/admin - Fake admin API
• /robots.txt - Reveals "hidden" paths

Recent Activity

Time	IP	Alias	Method	Path	Type	Patterns	UA
06:00:47	216.73.217.5	backup	GET	/robots.txt	llm_agent	llm_agent_ua, bot_ua	Mozilla/5.0 AppleWebKit/537.36 (KHTML, l
04:51:46	74.7.230.28	backup	GET	/robots.txt	unknown	bot_ua	Mozilla/5.0 (Macintosh; Intel Mac OS X 1
03:41:28	138.199.43.75	backup	GET	/admin/adminer.php	automated	scripted_request	python-requests/2.32.5
03:41:28	138.199.43.75	backup	GET	/admin/adminer.php	automated	scripted_request	python-requests/2.32.5
03:41:28	138.199.43.75	backup	GET	/adminer/adminer.php	automated	scripted_request	python-requests/2.32.5
03:41:28	138.199.43.75	backup	GET	/adminer/adminer.php	automated	scripted_request	python-requests/2.32.5
03:41:27	138.199.43.75	backup	GET	/adminer.php	automated	scripted_request	python-requests/2.32.5
03:41:27	138.199.43.75	backup	GET	/adminer.php	automated	scripted_request	python-requests/2.32.5
03:41:24	138.199.43.75	backup	GET	/php-myadmin/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:24	138.199.43.75	backup	GET	/php-myadmin/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:23	138.199.43.75	backup	GET	/php-my-admin/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:23	138.199.43.75	backup	GET	/php-my-admin/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:23	138.199.43.75	backup	GET	/mysql-admin/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:23	138.199.43.75	backup	GET	/mysql-admin/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:22	138.199.43.75	backup	GET	/phpmyadmin2/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:22	138.199.43.75	backup	GET	/phpmyadmin2/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:22	138.199.43.75	backup	GET	/phpMyAdmin2/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:22	138.199.43.75	backup	GET	/phpMyAdmin2/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:21	138.199.43.75	backup	GET	/phpMyAdmin-2/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:21	138.199.43.75	backup	GET	/phpMyAdmin-2/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:20	138.199.43.75	backup	GET	/pma/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:19	138.199.43.75	backup	GET	/PMA/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:19	138.199.43.75	backup	GET	/PMA/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:19	138.199.43.75	backup	GET	/phpMyAdmin/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:19	138.199.43.75	backup	GET	/phpMyAdmin/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:18	138.199.43.75	backup	GET	/phpmyadmin/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:41:18	138.199.43.75	backup	GET	/phpmyadmin/index.php	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:40:49	138.199.43.75	backup	GET	/.aws/credentials	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:40:48	138.199.43.75	backup	GET	/sapi/debug/default/view	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:40:48	138.199.43.75	backup	GET	/sapi/debug/default/view	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:40:48	138.199.43.75	backup	GET	/web/debug/default/view	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:40:48	138.199.43.75	backup	GET	/web/debug/default/view	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:40:48	138.199.43.75	backup	GET	/frontend/web/debug/default/view	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:40:48	138.199.43.75	backup	GET	/frontend/web/debug/default/view	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:40:48	138.199.43.75	backup	GET	/debug/default/view	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:40:48	138.199.43.75	backup	GET	/debug/default/view	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:40:47	138.199.43.75	backup	GET	/debug/default/view.html	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:40:47	138.199.43.75	backup	GET	/debug/default/view.html	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:40:46	138.199.43.75	backup	GET	/debug/default/view	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:40:46	138.199.43.75	backup	GET	/debug/default/view	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:40:46	138.199.43.75	backup	GET	/.env	unknown	-	Mozilla/5.0 (Macintosh; Intel Mac OS X 1
03:40:46	138.199.43.75	backup	POST	/.env	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:40:46	138.199.43.75	backup	POST	/.env	unknown	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64
03:40:45	138.199.43.75	backup	POST	/login/	automated	scripted_request	python-requests/2.32.5
03:40:45	138.199.43.75	backup	POST	/login/	automated	scripted_request	python-requests/2.32.5
03:40:44	138.199.43.75	backup	GET	/openid_connect/cpanelid	automated	scripted_request	python-requests/2.32.5
03:40:44	138.199.43.75	backup	GET	/openid_connect/cpanelid	automated	scripted_request	python-requests/2.32.5
03:40:42	138.199.43.75	backup	GET	/whm	automated	scripted_request	python-requests/2.32.5
03:40:42	138.199.43.75	backup	GET	/whm	automated	scripted_request	python-requests/2.32.5
03:40:15	190.173.63.243	admin	GET	/api/internal/config	unknown	-	Mozilla/5.0 (Windows NT 10.0; WOW64) App