01SCN · Scanner
Plaint Ant 2
SCN-UNK-28A90A0requests / 24 h
30% confidenceInferred cluster
Top pathNot available
In the last 24 hours, Mothlight observed 33,464 automated requests across its passive honeypot network, with 1.2% AI-evidenced share of HTTP/S requests.
Origin countries for automated requests hitting Mothlight sensors, coloured by bot category. Aggregated, delayed, and shown at country level only.
14,492 requests
Bubble size is volume; the ring on the selected country shows its category split. Moving lines run to where the request was received — a Mothlight sensor or a web edge — not to a person or device.
Origins are countries of the source network, not exact locations. Diamonds are Mothlight's TCP sensors; small rings are web edge locations where requests to the decoy sites entered the network. Brighter, thicker lines carry more requests; hover a country to highlight its routes, click to pin it. Zoom with the + / − buttons, a pinch, or Ctrl/⌘ + scroll (up to 3×); drag to pan. Data stamp 2026-11-01. Map: Natural Earth, public domain. IP geolocation by DB-IP.
Today's top 10, ranked by requests in the last 24 hours. A visit is an observation, not an accusation.
Open the bot directory →SCN-UNK-28A90ATop pathNot available
SCN-UNK-7EB48DTop pathNot available
SCN-UNK-B96B84Top pathNot available
SCN-UNK-ED0950Top pathNot available
SCN-UNK-307F5722 of 1,849 HTTP/S requests in the last 24 h.
Verified AI crawler/agent identities plus high-threshold behavior inference. UA-only and provisional claims are excluded.
Recognized AI label share of web requests: 1.19% (22 / 1,849). Includes UA-recognized labels. Other web requests include human and unknown traffic.
All sensors: 0.07% recognized AI labels (22 / 33,464). This denominator includes 31,615 non-web service probes that cannot be AI crawler requests.
Window end (UTC): . Unavailable means evidence cannot be reconstructed; suppressed cells are withheld under the public privacy threshold.
Early cohort: sensors launched 2026-11-01; unlinked domains may take days or weeks to reach crawler frontiers. Percentages are volatile at low counts.
Regional TCP sensors and the Vercel HTTP surface. Sensor location is separate from traffic origin.
The last seven completed UTC dates; 1 daily windows available. Read each digest with its method and limits.
A public API for reproducible research. Cite the window, the method, and the uncertainty.
curl -s 'https://mothlight.ai/api/v1/stats/overview'JSON · CC BY 4.0
Our sensors wait for inbound traffic. We publish evidence with confidence scores and a conditional IP disclosure policy. We do not scan visitors or run their code.
Read our research ethics →Questions or removal requests ↗Mothlight passively records automated requests arriving at public honeypot sensors. It distinguishes AI crawlers, user-delegated AI agents, scanners, and other bots.
No. Vendor identity verification and AI likelihood are separate measurements. Labels include confidence and evidence; AI-related traffic is not automatically hostile.
Where Mothlight listens, separate from where traffic originates.
Dots locate sensors, not visitor origins. Counts cover 24 hours. Map: Natural Earth, public domain.
7,585Peak observed hour
time,events 2026-10-31T23:00:00.000Z,0 2026-11-01T00:00:00.000Z,0 2026-11-01T01:00:00.000Z,0 2026-11-01T02:00:00.000Z,115 2026-11-01T03:00:00.000Z,134 2026-11-01T04:00:00.000Z,41 2026-11-01T05:00:00.000Z,36 2026-11-01T06:00:00.000Z,57 2026-11-01T07:00:00.000Z,41 2026-11-01T08:00:00.000Z,491 2026-11-01T09:00:00.000Z,984 2026-11-01T10:00:00.000Z,705 2026-11-01T11:00:00.000Z,1022 2026-11-01T12:00:00.000Z,1039 2026-11-01T13:00:00.000Z,974 2026-11-01T14:00:00.000Z,1144 2026-11-01T15:00:00.000Z,1319 2026-11-01T16:00:00.000Z,1321 2026-11-01T17:00:00.000Z,1374 2026-11-01T18:00:00.000Z,921 2026-11-01T19:00:00.000Z,2580 2026-11-01T20:00:00.000Z,2984 2026-11-01T21:00:00.000Z,3451 2026-11-01T22:00:00.000Z,7585 2026-11-01T23:00:00.000Z,5146
Top pathNot available
SCN-UNK-B2C951Top pathNot available
SCN-UNK-2B7BCCTop pathNot available
SCN-UNK-6F0067Top pathNot available
SCN-UNK-1D160ETop pathNot available
SCN-UNK-B318FETop pathNot available