from(bucket: "telegraf/telegraf_low_granularity") |> range(start: 2026-08-01T00:00:00Z, stop: 2026-08-08T00:00:00Z) |> filter(fn: (r) => r._measurement == "ssh_tarpit") |> filter(fn: (r) => r._field == "after_sum") |> filter(fn: (r) => exists r.country) |> group() |> sum()In the last week, my tarpits have burnt 11.6 days of bot time. from(bucket: "telegraf/telegraf_low_granularity") |> range(start: 2026-08-01T00:00:00Z, stop: 2026-08-08T00:00:00Z) |> filter(fn: (r) => r["_measurement"] == "ssh_tarpit") |> filter(fn: (r) => r["_field"] == "after_count") |> aggregateWindow(every: v.windowPeriod, fn: sum, createEmpty: false) |> group(columns: ["country"]) |> sum() |> group() |> sum()There were 9387 tarpitted connections, vs 6354 in 2022. Although I still have Anubis deployed in various places, many of my sites now quietly advertise a path into an LLM maze too. from(bucket: "telegraf/telegraf_low_granularity") |> range(start: -90d) |> filter(fn: (r) => r._measurement == "fck_your_llm") |> filter(fn: (r) => r._field == "count") |> group() |> sum()In the last 90 days, the maze has served 310,248,945 requests. Until mid-last month, my LLM maze was serving a pretty significant number of requests each day.