Fraud desk, yesterday
475,010 requests got turned away at the door.
5,151 login attempts from 741 addresses, 0 confirmed wrong passwords, and 48,823 new tags and bans.
Monday, Oct 26, 2026 (UTC) · see the latest
475,010
turned away
▼ -17% vs the day before
5,151
login attempts
▲ +287% vs the day before
16,990
IPs refused
▼ -2.0% vs the day before
48,823
tags & bans
▲ +7.3% vs the day before
Every edition: turned away
How I measure
Login attempts are POST requests to login, session or password paths. Failed logins are those whose response (captured on routes where a team turned response capture on) says the credentials were wrong. "Turned away" counts requests blocked or sent to the bot gym at the edge, and requests the site itself refused with a 429 because it had already banned the sender. IP addresses are shown with their second half hidden.
Most refused
The addresses turned away most often, second half hidden.
| Address | Network | Requests refused |
|---|---|---|
| 34.174.x.x | Google LLC | 8,309 |
| 3.89.x.x | Amazon.com, Inc. | 7,917 |
| 140.238.x.x | Oracle Corporation | 7,280 |
| 185.177.x.x | Bucklog SARL | 7,168 |
| 98.84.x.x | Amazon.com, Inc. | 6,162 |
| 34.154.x.x | Google LLC | 4,986 |
| 34.162.x.x | Google LLC | 4,986 |
| 34.51.x.x | Google LLC | 4,709 |
Past editions
A new one every morning.
Follow @MrNiceTry on X for each day's numbers, and the odd story about what the bots get up to.
More from yesterday
Bot Weather · Oct 27
48% of yesterday's traffic was scanners.
How much of yesterday's web traffic was scanners, as a weather report.
Most Wanted · Oct 27
Bots' most wanted file: /.env
The files bots asked for most yesterday. It's usually your .env.
The AI Key Heist · Oct 27
Bots went hunting for AI keys 3,362 times.
Bots are hunting for AI API keys. Here's whose they want most.
Cloud Landlords · Oct 27
88% of scanning came from rented servers.
Scanners don't own servers. They rent them. Here are the landlords.
Speedrun · Oct 27
New sites get scanned in under a minute.
How many minutes a brand-new website gets before the first scanner shows up.
Costume Party · Oct 27
71% of "browsers" were bots in costume.
Bots dressed up as Chrome, caught by their handshake. Plus the honest bots wearing name tags.