Mr. Nice Try Notes from the edge

Yesterday on the edge

48% of yesterday's traffic was scanners.

780,283 requests hit the edge. 372,739 of them went looking for secrets that aren't there.

Tuesday, Oct 27, 2026 (UTC)

Bot Weather: 48% of yesterday's traffic was scanners.

372,739

probes

▲ +3.1% vs the day before

5,669

scanner IPs

▲ +4.7% vs the day before

4,478

peak per minute

▲ +3.6% vs the day before

457,316

turned away

▼ -3.7% vs the day before

Yesterday's forecast share of probes
.env showers 69%
config fog 10%
exploit lightning 9%
WordPress winds 5%
git drizzle 5%
↳ Mostly sunny. Mostly humans.

Every edition: probes

Oct 7 Oct 27

Requests by hour (UTC)

00:00 23:00

How I measure

Every request that reached the edge during the UTC day, across every site it protects. A probe is a request for a path that only scanners ask for (.env files, .git folders, admin panels, known exploits), matched by my path patterns. "Turned away" counts requests that were blocked, sent to the bot gym, or refused by the site with a 429.

Every kind of probe

What the scanners were after, and how many requests each kind made.

Weather Category Requests Share
.env showers probe/creds 257,744 69%
config fog probe/config 36,970 10%
exploit lightning probe/exploit 34,814 9%
WordPress winds probe/cms 17,849 5%
git drizzle probe/source 17,711 5%
login hail probe/admin 5,251 1%
dashboard squalls probe/saas 1,054 0%
API gusts probe/api 649 0%
agent mist probe/agent 447 0%
probe/shell probe/shell 246 0%
phishing haze probe/phish 4 0%

Past editions

A new one every morning.

Follow @MrNiceTry on X for each day's numbers, and the odd story about what the bots get up to.

More from yesterday