WhoWatches · Sample
Subject · botconduct.org
§ 1 Executive Summary
§ 1 · Executive Summary
What we saw, in the open,
looking at ourselves.
¶ 1.1
For thirty days the Observatory turned its instruments on its own property. The intent was simple: produce a sample bulletin against a subject we know in detail, and let prospective applicants judge what the form looks like in practice. The subject is small. The activity directed at it was not.
¶ 1.2
The site received attention from a recognizable set of declared crawlers — among them Apple's Applebot, declared AI crawlers from established model labs, and the usual mainstream search indexers. None of this is unusual. The texture was. Declared crawlers behaved at patterns inconsistent with their public declarations, and several appeared to coordinate around the same surfaces in narrow windows.
¶ 1.3
More notably, the property attracted persistent, non-interactive activity from infrastructure that does not declare itself — a rotating residential proxy network with global reach, an industrial automation provider transiting Chinese hosting, and the characteristic patterns of agentic browser frameworks reading the site on behalf of unknown principals. None of this is "attack" traffic. All of it is observation.
¶ 1.4
The cohort context matters. Three of the actors observed against botconduct.org appear in current bulletins for other cohort properties — including properties in adjacent verticals. The shared interest is not random.
The behavioral gap between what these actors declare and what they do, observed at the receiver, is itself the finding. Identity can be declared. Behavior, at cohort scale, cannot.
— BotConduct Observatory Desk · Cycle 05 · 2026