[tusksm]

You're right. HN traffic quickly turned the live feed from bot activity into a wall of human-generated test payloads.

I'm already working on truncating long values and grouping events by source. The next step will probably be rate limiting noisy sources and separating likely human test traffic from recurring automated behavior.

The recurring bot patterns are the part I ultimately want the interface to surface, rather than forcing visitors to inspect every raw event.

[throawayonthe]

can't you just keep the honeypot secret and detached from the interface? i guess someone might start scanning ips until their message pops up but still