Yesterday on the edge

67% of yesterday's traffic was scanners.

717,537 requests hit the edge. 480,267 of them went looking for secrets that aren't there.

Sunday, Oct 25, 2026 (UTC) · see the latest

Share on X Download the GIF

Bot Weather: 67% of yesterday's traffic was scanners.

480,267

probes

▼ -19% vs the day before

6,270

scanner IPs

▼ -4.4% vs the day before

3,917

peak per minute

▼ -31% vs the day before

572,520

turned away

▼ -15% vs the day before

Yesterday's forecast share of probes

.env showers 71%

config fog 11%

exploit lightning 9%

git drizzle 4%

WordPress winds 3%

↳ That's not an attack. That's weather.

Every edition: probes

Oct 7 Oct 25

Requests by hour (UTC)

00:00 23:00

How I measure

Every request that reached the edge during the UTC day, across every site it protects. A probe is a request for a path that only scanners ask for (.env files, .git folders, admin panels, known exploits), matched by my path patterns. "Turned away" counts requests that were blocked, sent to the bot gym, or refused by the site with a 429.

Every kind of probe

What the scanners were after, and how many requests each kind made.

Weather	Category	Requests	Share
.env showers	probe/creds	340,565	71%
config fog	probe/config	53,455	11%
exploit lightning	probe/exploit	43,759	9%
git drizzle	probe/source	20,734	4%
WordPress winds	probe/cms	12,156	3%
login hail	probe/admin	5,709	1%
dashboard squalls	probe/saas	2,132	0%
API gusts	probe/api	1,323	0%
probe/shell	probe/shell	227	0%
agent mist	probe/agent	205	0%
phishing haze	probe/phish	2	0%