Honeypot
I built a honeypot into this site's web server. When a bot requests something like
/.env or /etc/passwd, it gets a fake file with made-up credentials. Below is
what it caught since the last restart.
I keep only which trap was hit and the /24 (or /48) it came from, in memory.
0 requests caught
What they wanted
| trap | share | requests |
|---|
Latest
| when | from | trap |
|---|
The log needs JavaScript.