Automated traffic stopped at the firewall — the rolling last 3 days.
Top networks the challenged traffic comes from — datacenter & residential-proxy heavy.
Connection origin at the edge; Tor shown separately.
What they claim to be.
Where they’re digging — attachments & media.
HEAD requests = cheap probing.
Challenges per hour (UTC).