Mr. Nice Try Notes from the edge

New record Yesterday on the edge

61% of yesterday's traffic was scanners.

734,532 requests hit the edge. 450,084 of them went looking for secrets that aren't there.

Monday, Oct 12, 2026 (UTC) · see the latest

Bot Weather: 61% of yesterday's traffic was scanners.

450,084

probes

▲ +260% vs the day before

5,734

scanner IPs

▲ +1,230% vs the day before

4,620

peak per minute

▲ +68% vs the day before

500,108

turned away

▲ +202% vs the day before

Yesterday's forecast share of probes
.env showers 53%
exploit lightning 15%
config fog 12%
git drizzle 11%
WordPress winds 6%
↳ That's not an attack. That's weather.

Every edition: probes

Oct 7 Oct 12

Requests by hour (UTC)

00:00 23:00

How I measure

Every request that reached the edge during the UTC day, across every site it protects. A probe is a request for a path that only scanners ask for (.env files, .git folders, admin panels, known exploits), matched by my path patterns. "Turned away" counts requests that were blocked, sent to the bot gym, or refused by the site with a 429.

Every kind of probe

What the scanners were after, and how many requests each kind made.

Weather Category Requests Share
.env showers probe/creds 239,282 53%
exploit lightning probe/exploit 66,591 15%
config fog probe/config 54,068 12%
git drizzle probe/source 50,229 11%
WordPress winds probe/cms 26,756 6%
login hail probe/admin 11,393 3%
API gusts probe/api 1,765 0%

Past editions

A new one every morning.

Follow @MrNiceTry on X for each day's numbers, and the odd story about what the bots get up to.

More from yesterday