Mr. Nice Try Notes from the edge

New record Yesterday on the edge

74% of yesterday's traffic was scanners.

1,261,882 requests hit the edge. 927,539 of them went looking for secrets that aren't there.

Tuesday, Oct 13, 2026 (UTC) · see the latest

Bot Weather: 74% of yesterday's traffic was scanners.

927,539

probes

▲ +106% vs the day before

7,519

scanner IPs

▲ +31% vs the day before

19,997

peak per minute

▲ +333% vs the day before

940,688

turned away

▲ +88% vs the day before

Yesterday's forecast share of probes
.env showers 65%
config fog 11%
exploit lightning 11%
git drizzle 7%
WordPress winds 4%
↳ That's not an attack. That's weather.

Every edition: probes

Oct 7 Oct 13

Requests by hour (UTC)

00:00 23:00

How I measure

Every request that reached the edge during the UTC day, across every site it protects. A probe is a request for a path that only scanners ask for (.env files, .git folders, admin panels, known exploits), matched by my path patterns. "Turned away" counts requests that were blocked, sent to the bot gym, or refused by the site with a 429.

Every kind of probe

What the scanners were after, and how many requests each kind made.

Weather Category Requests Share
.env showers probe/creds 600,595 65%
config fog probe/config 104,678 11%
exploit lightning probe/exploit 102,018 11%
git drizzle probe/source 66,663 7%
WordPress winds probe/cms 38,951 4%
login hail probe/admin 12,730 1%
API gusts probe/api 1,904 0%

Past editions

A new one every morning.

Follow @MrNiceTry on X for each day's numbers, and the odd story about what the bots get up to.

More from yesterday