If regular users can't log in, that would decrease the load, and that could be presented in those metrics i suppose.

"Look! there was an artificial traffic spike here... but then our systems kicked in and saved the day!" (By locking out paying users and letting in bots, because that's easier for the 'protection' company and gives the same stats for 'back to normal' in the reports)