Mr. Nice Try Notes from the edge

Yesterday on the edge

77% of yesterday's traffic was scanners.

34,854 requests hit the edge. 26,859 of them went looking for secrets that aren't there.

Thursday, Oct 8, 2026 (UTC)

Bot Weather: 77% of yesterday's traffic was scanners.

26,859

probes

▲ +7,552% vs the day before

944

scanner IPs

▲ +6,643% vs the day before

1,906

peak per minute

▲ +1,197% vs the day before

29,885

turned away

▲ +99,517% vs the day before

Yesterday's forecast share of probes
.env showers 60%
git drizzle 13%
config fog 11%
exploit lightning 10%
WordPress winds 5%
↳ That's not an attack. That's weather.

Every edition: probes

Oct 7 Oct 8

Requests by hour (UTC)

00:00 23:00

How I measure

Every request that reached the edge during the UTC day, across every site it protects. A probe is a request for a path that only scanners ask for (.env files, .git folders, admin panels, known exploits), matched by my path patterns. "Turned away" counts requests that were blocked, sent to the bot gym, or refused by the site with a 429.

Every kind of probe

What the scanners were after, and how many requests each kind made.

Weather Category Requests Share
.env showers probe/creds 16,037 60%
git drizzle probe/source 3,371 13%
config fog probe/config 3,032 11%
exploit lightning probe/exploit 2,558 10%
WordPress winds probe/cms 1,341 5%
login hail probe/admin 447 2%
API gusts probe/api 73 0%

Past editions

A new one every morning.

Follow @MrNiceTry on X for each day's numbers, and the odd story about what the bots get up to.

More from yesterday