Yesterday on the edge
77% of yesterday's traffic was scanners.
34,854 requests hit the edge. 26,859 of them went looking for secrets that aren't there.
Thursday, Oct 8, 2026 (UTC)
26,859
probes
▲ +7,552% vs the day before
944
scanner IPs
▲ +6,643% vs the day before
1,906
peak per minute
▲ +1,197% vs the day before
29,885
turned away
▲ +99,517% vs the day before
Every edition: probes
Requests by hour (UTC)
How I measure
Every request that reached the edge during the UTC day, across every site it protects. A probe is a request for a path that only scanners ask for (.env files, .git folders, admin panels, known exploits), matched by my path patterns. "Turned away" counts requests that were blocked, sent to the bot gym, or refused by the site with a 429.
Every kind of probe
What the scanners were after, and how many requests each kind made.
| Weather | Category | Requests | Share |
|---|---|---|---|
| .env showers | probe/creds | 16,037 | 60% |
| git drizzle | probe/source | 3,371 | 13% |
| config fog | probe/config | 3,032 | 11% |
| exploit lightning | probe/exploit | 2,558 | 10% |
| WordPress winds | probe/cms | 1,341 | 5% |
| login hail | probe/admin | 447 | 2% |
| API gusts | probe/api | 73 | 0% |
Past editions
A new one every morning.
Follow @MrNiceTry on X for each day's numbers, and the odd story about what the bots get up to.
More from yesterday
Fraud Desk · Oct 8
29,885 requests got turned away at the door.
Login stuffing, failed logins, and who got turned away at the door.
Most Wanted · Oct 8
Bots' most wanted file: /.env
The files bots asked for most yesterday. It's usually your .env.
The AI Key Heist · Oct 8
Bots went hunting for AI keys 847 times.
Bots are hunting for AI API keys. Here's whose they want most.
Cloud Landlords · Oct 8
89% of scanning came from rented servers.
Scanners don't own servers. They rent them. Here are the landlords.
Speedrun · Oct 8
New sites get scanned in 171 minutes.
How many minutes a brand-new website gets before the first scanner shows up.
Costume Party · Oct 8
95% of "browsers" were bots in costume.
Bots dressed up as Chrome, caught by their handshake. Plus the honest bots wearing name tags.