New record Who rents to the scanners
92% of scanning came from rented servers.
Biggest landlord: Google LLC, with 586,551 probes from 1,198 of its machines. 408 networks sent scanners in all.
Wednesday, Oct 14, 2026 (UTC) · see the latest
92%
from hosting
408
networks
▲ +8.2% vs the day before
111
countries
▲ +12% vs the day before
Every edition: from hosting
How I measure
Probe requests grouped by the network (autonomous system) their IP address belongs to, from DB-IP's free ASN database. "Hosting networks" are clouds and data centres on my list of hosting providers. Country is where the IP geolocates, which for clouds is the data centre, not the person. IP geolocation by DB-IP (CC BY 4.0).
Every landlord in the top 15
| Network | ASN | Hosting? | Probes | Machines |
|---|---|---|---|---|
| Google LLC | AS396982, AS15169 | Yes | 586,551 | 1,198 |
| Microsoft Corporation | AS8075 | Yes | 65,719 | 47 |
| DigitalOcean, LLC | AS14061 | Yes | 14,604 | 736 |
| TECHOFF SRV LIMITED | AS48090 | — | 10,409 | 12 |
| TechTies Inc. | AS197170 | — | 10,318 | 16 |
| TC DATACENTER LIMITED | AS218785 | — | 9,712 | 10 |
| 3xK Tech GmbH | AS200373 | — | 9,445 | 3,447 |
| ALFA TELECOMUNICACOES | AS264596 | — | 6,359 | 1 |
| Amazon.com, Inc. | AS14618, AS16509 | Yes | 6,308 | 34 |
| M247 Europe SRL | AS9009 | Yes | 3,461 | 24 |
| Cloudflare, Inc. | AS13335 | Yes | 2,845 | 1,245 |
| InMotion Hosting, Inc. | AS22611 | — | 2,663 | 1 |
| Storm Industries LLC | AS219502 | — | 2,014 | 12 |
| Datacamp Limited | AS60068, AS212238 | Yes | 1,688 | 20 |
| Hydra Communications Ltd | AS25369 | — | 1,530 | 11 |
Where the servers are
The country each probe's IP geolocates to. For clouds, that's the data centre.
| Country | Probes | Share |
|---|---|---|
| US | 212,793 | 29% |
| DE | 51,603 | 7% |
| KR | 40,176 | 5% |
| AU | 38,091 | 5% |
| NL | 36,880 | 5% |
| SG | 35,005 | 5% |
| IN | 34,546 | 5% |
| JP | 32,501 | 4% |
| BR | 30,747 | 4% |
| GB | 30,298 | 4% |
Past editions
A new one every morning.
Follow @MrNiceTry on X for each day's numbers, and the odd story about what the bots get up to.
More from yesterday
Bot Weather · Oct 27
48% of yesterday's traffic was scanners.
How much of yesterday's web traffic was scanners, as a weather report.
Fraud Desk · Oct 27
457,316 requests got turned away at the door.
Login stuffing, failed logins, and who got turned away at the door.
Most Wanted · Oct 27
Bots' most wanted file: /.env
The files bots asked for most yesterday. It's usually your .env.
The AI Key Heist · Oct 27
Bots went hunting for AI keys 3,362 times.
Bots are hunting for AI API keys. Here's whose they want most.
Speedrun · Oct 27
New sites get scanned in under a minute.
How many minutes a brand-new website gets before the first scanner shows up.
Costume Party · Oct 27
71% of "browsers" were bots in costume.
Bots dressed up as Chrome, caught by their handshake. Plus the honest bots wearing name tags.