This page contains a hidden link that only web scrapers and bots would find. It's explicitly marked as off-limits in robots.txt, which any well-behaved bot should respect. But some bots just can't help themselves...
🤖 Hall of Shame 🤖
These visitors ignored robots.txt and found our hidden link. Naughty naughty!
[2025-09-16 11:22:50] User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
[2025-09-16 12:17:21] User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
[2025-09-16 12:43:43] User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
[2025-09-16 13:33:31] User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
[2025-09-16 14:58:23] User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
[2025-09-16 17:26:19] User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36
🔍 Vulnerability Probers 🔍
These bots were looking for common vulnerabilities and misconfigured servers. Nice try!
[2025-09-16 08:23:52] Path: /metrics, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /cloud-config.yml, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /.ssh/id_ecdsa, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /config/production.json, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /config.php, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /.env.production, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /server.key, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /.vscode/sftp.json, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /docker-compose.yml, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /config.yaml, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /config.xml, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /.ssh/id_rsa, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /secrets.json, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /db/schema.rb, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /backup.sql, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /_vti_pvt/service.pwd, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /.svn/wc.db, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /config.yml, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /api/.env, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /wp-admin/setup-config.php, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /dump.sql, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /actuator/heapdump, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /backup.tar.gz, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /server-status, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /web.config, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /settings.py, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /.ssh/id_ed25519, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /.git/HEAD, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /backup.zip, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /database.sql, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /config.json, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /feed, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /database_backup.sql, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /user_secrets.yml, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /.aws/credentials, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /api/v1/format_query, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /phpinfo.php, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /.env, User-Agent: Go-http-client/1.1
[2025-09-16 08:23:52] Path: /etc/ssl/private/server.key, User-Agent: Go-http-client/1.1
[2025-09-16 09:02:16] Path: /api/v1/openapi.json, User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36
[2025-09-16 09:02:16] Path: /swagger/v1/swagger.json, User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36
[2025-09-16 09:02:16] Path: /graphql, User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36
[2025-09-16 09:02:16] Path: /api/graphql, User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36
[2025-09-16 09:02:16] Path: /query, User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36
[2025-09-16 11:22:51] Path: /https:/github.com/XanderStrike/bot-honeypot, User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
[2025-09-16 12:17:10] Path: /https:/github.com/XanderStrike/bot-honeypot, User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
[2025-09-16 12:43:43] Path: /https:/github.com/XanderStrike/bot-honeypot, User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
[2025-09-16 13:14:43] Path: /.git/config, User-Agent: Go-http-client/1.1
[2025-09-16 13:33:31] Path: /https:/github.com/XanderStrike/bot-honeypot, User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
[2025-09-16 14:58:23] Path: /https:/github.com/XanderStrike/bot-honeypot, User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
[2025-09-16 16:20:13] Path: /sitemap.xml, User-Agent: Python/3.11 aiohttp/3.11.12
[2025-09-16 19:22:42] Path: /.git/config, User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36
[2025-09-16 20:45:31] Path: /.env, User-Agent: Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36
[2025-09-17 01:13:41] Path: /_profiler/phpinfo, User-Agent: Mozilla/5.0
[2025-09-17 01:13:42] Path: /.env, User-Agent: Mozilla/5.0
[2025-09-17 01:13:42] Path: /.env.local, User-Agent: Mozilla/5.0
[2025-09-17 01:13:42] Path: /.env.production, User-Agent: Mozilla/5.0
[2025-09-17 01:13:42] Path: /blog.env, User-Agent: Mozilla/5.0
[2025-09-17 01:13:42] Path: /wp-content/.env, User-Agent: Mozilla/5.0
[2025-09-17 01:13:42] Path: /.git/config, User-Agent: Mozilla/5.0
[2025-09-17 01:13:42] Path: /application/.env, User-Agent: Mozilla/5.0
[2025-09-17 01:13:42] Path: /app/.env, User-Agent: Mozilla/5.0
[2025-09-17 01:13:42] Path: /config/.env, User-Agent: Mozilla/5.0
[2025-09-17 01:13:42] Path: /api/.env, User-Agent: Mozilla/5.0
[2025-09-17 01:13:42] Path: /config.json, User-Agent: Mozilla/5.0
[2025-09-17 01:13:42] Path: /laravel/.env, User-Agent: Mozilla/5.0
[2025-09-17 01:13:42] Path: /library/.env, User-Agent: Mozilla/5.0
[2025-09-17 01:13:43] Path: /nextjs-app/.env, User-Agent: Mozilla/5.0
[2025-09-17 01:13:43] Path: /node-api/.env, User-Agent: Mozilla/5.0
[2025-09-17 01:13:43] Path: /vendor/.env, User-Agent: Mozilla/5.0
[2025-09-17 01:13:43] Path: /.aws/credentials, User-Agent: Mozilla/5.0
[2025-09-17 01:13:43] Path: /myproject/.env, User-Agent: Mozilla/5.0
[2025-09-17 01:13:43] Path: /.envs/.production/.django, User-Agent: Mozilla/5.0
[2025-09-17 01:13:43] Path: /react-app/.env, User-Agent: Mozilla/5.0
[2025-09-17 01:13:43] Path: /react-app/.env.production, User-Agent: Mozilla/5.0
[2025-09-17 09:11:17] Path: /.git/config, User-Agent: Go-http-client/1.1
[2025-09-17 15:19:10] Path: /.vscode/sftp.js, User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36
[2025-09-17 15:19:10] Path: /api/v1/openapi.js, User-Agent: portalmmm/2.0 N410i(c20;TB)
[2025-09-17 15:19:10] Path: /config.js, User-Agent: Mozilla/5.0 (OS/2; Warp 4.5; rv:24.0) Gecko/20100101 Firefox/24.0
[2025-09-17 15:19:11] Path: /secrets.js, User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.71 Safari/537.36 OPR/63.0.3368.17 (Edition beta)
[2025-09-17 15:19:12] Path: /config/production.js, User-Agent: Mozilla/5.0 (compatible; Konqueror/3.5; SunOS) KHTML/3.5.1 (like Gecko)
[2025-09-17 15:19:13] Path: /swagger/v1/swagger.js, User-Agent: Googlebot-News
[2025-09-17 16:07:52] Path: /.git/HEAD, User-Agent: Python-urllib/3.10