| path | count |
|---|---|
| /.well-known/mcp.json | 38 |
| /honeypot/services/docker | 31 |
| /.env.production | 17 |
| /credentials.json | 15 |
| /service-account.json | 15 |
| /.env | 15 |
| /.env.local | 13 |
| /secrets.json | 12 |
| /.env.development | 11 |
| /.env.backup | 10 |
| /config.json | 10 |
| /.env.staging | 9 |
| /.git/config | 8 |
| /.env.bak | 8 |
| ts | uaClass | path | country |
|---|---|---|---|
| 2026-08-30 00:13:42 | HUMAN | /.well-known/mcp.json | UY |
| 2026-08-29 11:14:33 | HUMAN | /honeypot/services/docker | SY |
| 2026-08-29 00:11:03 | HUMAN | /.well-known/mcp.json | EC |
| 2026-08-28 11:13:07 | HUMAN | /honeypot/services/docker | BD |
| 2026-08-28 00:10:19 | HUMAN | /.well-known/mcp.json | VE |
| 2026-08-27 00:12:34 | HUMAN | /.well-known/mcp.json | BR |
| 2026-08-26 11:11:14 | HUMAN | /honeypot/services/docker | ES |
| 2026-08-26 00:09:16 | HUMAN | /.well-known/mcp.json | BG |
| 2026-08-25 10:56:10 | HUMAN | /wp-admin/install.php | SG |
| 2026-08-25 00:10:05 | HUMAN | /.well-known/mcp.json | BR |
| 2026-08-24 11:12:22 | HUMAN | /honeypot/services/docker | NP |
| 2026-08-24 00:08:11 | HUMAN | /.well-known/mcp.json | VN |
| 2026-08-23 11:11:45 | HUMAN | /honeypot/services/docker | TR |
| 2026-08-23 00:07:54 | HUMAN | /.well-known/mcp.json | VN |
| 2026-08-22 00:07:49 | HUMAN | /.well-known/mcp.json | PK |
| 2026-08-21 11:11:25 | HUMAN | /honeypot/services/docker | PK |
| 2026-08-21 00:09:20 | HUMAN | /.well-known/mcp.json | PL |
| 2026-08-20 11:14:07 | HUMAN |
API: /api/observatory/v1/honeypot/investigate?fp=fp_5fa9248149fba6b325baaaad78915632
| /.env.example | 8 |
| /.docker/config.json | 7 |
| /.ssh/id_ed25519 | 7 |
| /.aws/credentials | 7 |
| /.git/HEAD | 7 |
| /gcp-credentials.json | 7 |
| /honeypot/services/docker |
| BR |
| 2026-08-20 00:08:41 | HUMAN | /.well-known/mcp.json | ES |
| 2026-08-19 11:11:42 | HUMAN | /honeypot/services/docker | JO |
| 2026-08-19 00:09:17 | HUMAN | /.well-known/mcp.json | BR |
| 2026-08-18 11:13:14 | HUMAN | /honeypot/services/docker | IQ |
| 2026-08-17 21:08:40 | HUMAN | /.well-known/mcp.json | NG |
| 2026-08-17 14:02:13 | HUMAN | /honeypot/services/docker | TR |
| 2026-08-17 00:25:13 | KNOWN_LLM_AGENT | /.ssh/authorized_keys | US |
| 2026-08-17 00:25:13 | KNOWN_LLM_AGENT | /.ssh/id_rsa | US |
| 2026-08-17 00:25:13 | KNOWN_LLM_AGENT | /.ssh/id_ed25519 | US |
| 2026-08-17 00:25:13 | KNOWN_LLM_AGENT | /.npmrc | US |
| 2026-08-17 00:25:13 | KNOWN_LLM_AGENT | /.docker/config.json | US |
| 2026-08-17 00:25:13 | KNOWN_LLM_AGENT | /credentials.json | US |
| 2026-08-17 00:25:13 | KNOWN_LLM_AGENT | /service-account.json | US |
| 2026-08-17 00:25:13 | KNOWN_LLM_AGENT | /secrets.json | US |
| 2026-08-17 00:25:13 | KNOWN_LLM_AGENT | /.env.backup | US |
| 2026-08-17 00:25:13 | KNOWN_LLM_AGENT | /.env.old | US |
| 2026-08-17 00:25:12 | KNOWN_LLM_AGENT | /.env.bak | US |
| 2026-08-17 00:25:12 | KNOWN_LLM_AGENT | /.env.production | US |
| 2026-08-17 00:25:12 | KNOWN_LLM_AGENT | /.env.local | US |
| 2026-08-17 00:25:12 | KNOWN_LLM_AGENT | /.github/workflows/deploy.yml | US |
| 2026-08-17 00:25:12 | KNOWN_LLM_AGENT | /.gitlab-ci.yml | US |
| 2026-08-17 00:25:12 | KNOWN_LLM_AGENT | /.git/config | US |
| 2026-08-17 00:25:12 | KNOWN_LLM_AGENT | /.aws/config | US |
| 2026-08-17 00:25:12 | KNOWN_LLM_AGENT | /.git/HEAD | US |
| 2026-08-17 00:25:12 | KNOWN_LLM_AGENT | /.env.example | US |
| 2026-08-17 00:25:12 | KNOWN_LLM_AGENT | /.env | US |
| 2026-08-17 00:25:11 | KNOWN_LLM_AGENT | /.aws/credentials | US |
| 2026-08-16 21:07:48 | HUMAN | /.well-known/mcp.json | IQ |
| 2026-08-16 14:02:47 | HUMAN | /honeypot/services/docker | BR |
| 2026-08-15 21:06:58 | HUMAN | /.well-known/mcp.json | BR |
| 2026-08-15 14:01:42 | HUMAN | /honeypot/services/docker | RU |
| 2026-08-14 21:06:23 | HUMAN | /.well-known/mcp.json | VN |