The Sink, live.
Hostile Requests Absorbed By The Tarpit Today (UTC)
Malicious Bots Currently Trapped In The Tarpit
Mean Life Of A Bot In The Tarpit
Hostile Hosts On The Attack Graph
Forged-Referer Hits Sunk Today
Tarpit Pages Served To Bots Today
Attack Signatures Fired Today
Bot Classes Sunk Today
Threats We Protect Against
CHURN-FARM LINK SPAM
Manufactured link waves fired at money pages to make a profile look bought. Attributed as campaigns in The Campaign Registry; sunk at the edge.
How churn-farm link spam works →
FORGED-REFERER FLOODS
Bots impersonating trusted referers to poison analytics and crawl stats — most of the rows above.
How forged-referer floods work →
BOTNET VERIFICATION LOOPS
Cloud-VM botnets re-crawling spam links to confirm they still fire. The Tarpit keeps them looping on worthless pages.
Inside botnet verification loops →
DANGLING-DNS HIJACKS
Idle domains serving third-party content on records nobody was watching — 56 found on our own estate.
Parked-domain hijack, in depth →
HACKED-SOURCE INJECTION
Legitimate sites compromised to host links — the quiet class; it lives in the signed-in triage, not the live edge.
Hacked-source link injection, in depth →
SCRAPING & SMEAR
Content theft, fake reviews, forum smears — the manual classes, tracked in the monthly reports.
Scraping & smear attacks, in depth →
Exact counts from live edge telemetry (sample-corrected). Detection rows name the hostile source — forged referers impersonate trusted domains, which is the attack, not the endorsement. What we never publish: anything about the properties being protected.