Who rents to the scanners
93% of scanning came from rented servers.
Biggest landlord: Google LLC, with 427,866 probes from 1,199 of its machines. 1,166 networks sent scanners in all.
Edition of Tuesday, Nov 3, 2026 (UTC) · see the latest · updated every 24 hours
93%
from hosting
1,166
networks
▲ +4.1% vs the day before
128
countries
▼ -2.3% vs the day before
Every edition: from hosting
How we measure
Probe requests grouped by the network (autonomous system) their IP address belongs to, from DB-IP's free ASN database. "Hosting networks" are clouds and data centres on NiceTryBot's list of hosting providers. Country is where the IP geolocates, which for clouds is the data centre, not the person. IP geolocation by DB-IP (CC BY 4.0).
Every landlord in the top 15
| Network | ASN | Hosting? | Probes | Machines |
|---|---|---|---|---|
| Google LLC | AS396982, AS15169 | Yes | 427,866 | 1,199 |
| Microsoft Corporation | AS8075 | Yes | 39,589 | 260 |
| Amazon.com, Inc. | AS16509, AS14618 | Yes | 9,202 | 160 |
| Feo Prest SRL | AS208137 | — | 8,841 | 1 |
| TECHOFF SRV LIMITED | AS48090 | — | 5,540 | 32 |
| TC DATACENTER LIMITED | AS218785 | — | 4,267 | 8 |
| Cloudflare, Inc. | AS13335 | Yes | 2,213 | 1,162 |
| Eweka Internet Services B.V. | AS34343 | — | 1,811 | 3 |
| M247 Europe SRL | AS9009 | Yes | 1,578 | 110 |
| DigitalOcean, LLC | AS14061 | Yes | 1,543 | 400 |
| WIIT AG | AS24961 | — | 1,240 | 2 |
| Datacamp Limited | AS60068 | — | 1,195 | 9 |
| Oracle Corporation | AS31898 | Yes | 1,135 | 8 |
| SolidCore Hosting LTD | AS199457 | — | 971 | 1 |
| Zkillu SAS | AS215599 | — | 916 | 8 |
Where the servers are
The country each probe's IP geolocates to. For clouds, that's the data centre.
| Country | Probes | Share |
|---|---|---|
| US | 64,434 | 12% |
| HK | 43,787 | 8% |
| BE | 41,599 | 8% |
| DE | 40,970 | 8% |
| SG | 37,089 | 7% |
| IN | 34,124 | 7% |
| JP | 26,106 | 5% |
| IL | 23,425 | 5% |
| KR | 22,751 | 4% |
| TW | 20,953 | 4% |
Past editions
More from the edge
Bot Weather · Nov 11
20% of yesterday's traffic was scanners.
How much of yesterday's web traffic was scanners, as a weather report.
Fraud Desk · Nov 11
32,669 requests got turned away at the door.
Login stuffing, failed logins, and who got turned away at the door.
Most Wanted · Nov 11
Bots' most wanted file: /download.php
The files bots asked for most yesterday. It's usually your .env.
The AI Key Heist · Nov 11
Bots went hunting for AI keys 789 times.
Bots are hunting for AI API keys. Here's whose they want most.
Speedrun · Nov 11
New sites get scanned in 1,245 minutes.
How many minutes a brand-new website gets before the first scanner shows up.
Costume Party · Nov 11
57% of "browsers" were bots in costume.
Bots dressed up as Chrome, caught by their handshake. Plus the honest bots wearing name tags.
Want these bots off your site?
Put your domains behind the NiceTryBot edge. You'll see every request, tag the scanners, and send them to the gym while real people get on with their day.
See how it works