The counts are for all the incoming requests, from regular users (browsers) and bots, whether the request was replied to or blocked or even if it was a bad request. Hopefully when bad bots are identified and then banned that they will eventually stop sending requests.