WebDecoy / Bot Observatory
Bot traffic.
In the open.
Bots hitting WebDecoy.com, observed over a rolling 24-hour window. Explore real detections and their identity evidence, with a five-minute reporting delay. The exact dates and times for the displayed snapshot appear below.
No simulated traffic. No customer data. A dated snapshot stays visible when updates are unavailable.
Marker size reflects stored observations, not severity. Country centers are not visitor locations.
Identity alerts
Latest suspected spoofing groups in this windowA crawler name was claimed, but recorded identity evidence flagged impersonation. Unverified claims alone do not appear here.
- Bingbot Suspected spoofing Identity check flagged impersonation×1
UA · Bingbot/2Location unavailable · Edge sensor - Unidentified client Suspected spoofing Identity check flagged impersonation×1
UA · Unrecognized clientNetherlands · Edge sensor · VPN flagged - Amazonbot Suspected spoofing Identity check flagged impersonation×2
UA · Amazonbot/0Netherlands · Edge sensor · VPN flagged - Applebot Suspected spoofing Identity check flagged impersonation×1
UA · Applebot/0Netherlands · Edge sensor · VPN flagged
Activity across the window
Stored detections per hour · UTCWhat the evidence says
- Verified identity 1,242
- Other detection 793
- Unverified identity 122
- Decoy interaction 6
Named agents observed
- Meta-ExternalAgent 133
- Googlebot 78
- Bingbot 66
- ChatGPT-User 54
- PerplexityBot 48
- Amazonbot 39
Names include verified and unverified claims.
Countries in this window
- United States of America 1,423
- Singapore 155
- Germany 139
- France 108
- United Kingdom 41
- Netherlands 37
Showing all eligible stored detections in this window. Updates every minute, delayed five minutes. This is not total website traffic or a count of blocked attacks.
Snapshot:
Evidence before labels
A bot name is
just the beginning.
Some automated visitors identify themselves. Others touch a decoy. These observations describe different evidence, not a scale of maliciousness.
- Verified identity
- A crawler or agent identity supported by verification evidence.
- Unverified identity
- An agent name was claimed, but this observation does not establish a verified identity.
- Decoy interaction
- A request reached a decoy link or endpoint. This does not establish that it was blocked.
- Other detection
- A stored detection without a named crawler identity or decoy interaction.
Scope & methodology
What this window shows.
This observatory reports eligible stored detections on www.webdecoy.com. It is a view of one WebDecoy-owned property, not an estimate of all bot traffic on the internet.
- The rolling window covers 24 hours and ends five minutes before the snapshot time. The page checks for updates once a minute while visible.
- At most 5,000 recent eligible detections are included. When that limit is reached, all charts and counts describe that sample. Hourly buckets at the window edges can be partial.
- Test traffic and owner visits are excluded. Detections are observations, not unique bots, visitors, total requests, or confirmed blocked attacks.
- Recent observations are grouped into five-minute buckets. Locations are country-level approximations; map markers use country centers. Some detections have no available location.
- User-agent labels show recognized products and major versions only; raw strings, URLs, comments, and device identifiers are removed. A user agent is self-reported and is not proof of identity. Identity alerts show only records explicitly flagged for impersonation; unverified claims are not treated as spoofed. Tor/VPN labels reflect recorded network flags, not malicious intent. Named agents can include unverified claims. Identity verification does not establish intent. Customer properties, IP addresses, request paths, fingerprints, and visitor identifiers are never included in this public feed.
Explore the bot directory or read our research methodology for more context.
What’s visiting your site?
Get the evidence behind your own bot traffic.