Agent detected — Score 90/100

Agent confirmed

Honeypotted — fake dead-end served · 10 bouncer turns

Session details

Framework unattributed

Strategy honeypot

Turns 10

Detected Tue, 20 Oct 2026 10:21:16 GMT

User-Agent Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)

Signals fired 4 triggered

cross-user-pattern Fingerprint seen across multiple deployments

cloud-provider-asn Traffic originates from cloud infrastructure (AWS/GCP/Azure)

suspicious-accept Accept header pattern inconsistent with browser requests

header-order-anomaly Request headers in alphabetical or non-browser order

Attack path 10 requests

/.env.smtp Request

2
                  /config/env/aws_credentials.env
                  Auth probe
                

/firebase-admin.json Spec discovery

/compose.yaml Request

/.env.local?raw Request

6
                  /server.key
                  Auth probe
                

/.zshrc Request

/.env.production?import&raw Request

/.env.development?import&raw Request

/@fs/.env?raw?? Request

Bouncer transcript

No transcript — strategy did not engage the bouncer.