Fraud desk, yesterday
32,669 requests got turned away at the door.
621 login attempts from 319 addresses, 0 confirmed wrong passwords, and 40,203 new tags and bans.
Edition of Wednesday, Nov 11, 2026 (UTC) · updated every 24 hours
32,669
turned away
▲ +1.4% vs the day before
621
login attempts
▼ -13% vs the day before
10,070
IPs refused
▼ -18% vs the day before
40,203
tags & bans
▼ -20% vs the day before
Every edition: turned away
How we measure
Login attempts are POST requests to login, session or password paths. Failed logins are those whose response (captured on routes where a team turned response capture on) says the credentials were wrong. "Turned away" counts requests blocked or sent to the bot gym by NiceTryBot, and requests the site itself refused with a 429 because it had already banned the sender. IP addresses are shown with their second half hidden.
Most refused
The addresses turned away most often, second half hidden.
| Address | Network | Requests refused |
|---|---|---|
| 38.247.x.x | Ultahost, Inc. | 762 |
| 68.155.x.x | Microsoft Corporation | 459 |
| 34.22.x.x | Google LLC | 458 |
| 207.175.x.x | Google LLC | 452 |
| 77.74.x.x | Kaspersky Lab Switzerland GmbH | 423 |
| 162.19.x.x | OVH SAS | 408 |
| 93.159.x.x | Kaspersky Lab Switzerland GmbH | 326 |
| 93.159.x.x | Kaspersky Lab Switzerland GmbH | 290 |
Past editions
More from the edge
Bot Weather · Nov 11
20% of yesterday's traffic was scanners.
How much of yesterday's web traffic was scanners, as a weather report.
Most Wanted · Nov 11
Bots' most wanted file: /download.php
The files bots asked for most yesterday. It's usually your .env.
The AI Key Heist · Nov 11
Bots went hunting for AI keys 789 times.
Bots are hunting for AI API keys. Here's whose they want most.
Cloud Landlords · Nov 11
81% of scanning came from rented servers.
Scanners don't own servers. They rent them. Here are the landlords.
Speedrun · Nov 11
New sites get scanned in 1,245 minutes.
How many minutes a brand-new website gets before the first scanner shows up.
Costume Party · Nov 11
57% of "browsers" were bots in costume.
Bots dressed up as Chrome, caught by their handshake. Plus the honest bots wearing name tags.
Want these bots off your site?
Put your domains behind the NiceTryBot edge. You'll see every request, tag the scanners, and send them to the gym while real people get on with their day.
See how it works