Botnet Verification Loop Report: october-2026.
147 bot verification hits sunk or refused
verification-loop hits sunk/refused at the edge
botnets reported to hosting abuse desks this month
Link farms must re-crawl their own links to confirm they still resolve — the verification loop is the campaign's quality control, usually cloud VMs with blank or headless fingerprints. One campaign we fingerprinted ran 2,842+ verification challenges a day from a single provider's VM range. We know whose range it was; we filed the abuse report.
The Tarpit is the answer built for exactly this: the loop follows its own links into an endless run of worthless pages and spends its most expensive resource — crawler time — confirming nothing. A farm that can't verify its links abandons them.
Check your site free — 10 seconds
Keep reading
how SEO Sink protects your website · negative-SEO attack types, measured · real attack data from our own estate
Method & limits
Scope: this ledger is the retail edge (seosink.com's own protection surface) plus every free check run. Estate-wide attack telemetry merges into these reports in a later release — the numbers here are exact for what they measure, and they are a floor, not a ceiling.
Detail that would teach the attacking farm what we can see — fingerprints, source IPs, target properties — is aggregated or held back 30 days. Counts are always exact.