Yesterday on the edge
40% of yesterday's traffic was scanners.
368,549 requests hit the edge. 146,576 of them went looking for secrets that aren't there.
Edition of Friday, Nov 6, 2026 (UTC) · see the latest · updated every 24 hours
146,576
probes
▲ +17% vs the day before
7,892
scanner IPs
▲ +57% vs the day before
3,045
peak per minute
▼ -15% vs the day before
180,459
turned away
▲ +16% vs the day before
Every edition: probes
Requests by hour (UTC)
How we measure
Every request that reached the NiceTryBot edge during the UTC day, across every site it protects. A probe is a request for a path that only scanners ask for (.env files, .git folders, admin panels, known exploits), matched by NiceTryBot's path patterns. "Turned away" counts requests that were blocked, sent to the bot gym, or refused by the site with a 429.
Every kind of probe
What the scanners were after, and how many requests each kind made.
| Weather | Category | Requests | Share |
|---|---|---|---|
| .env showers | probe/creds | 105,521 | 72% |
| exploit lightning | probe/exploit | 19,218 | 13% |
| config fog | probe/config | 13,572 | 9% |
| git drizzle | probe/source | 5,088 | 4% |
| login hail | probe/admin | 1,373 | 1% |
| WordPress winds | probe/cms | 1,100 | 1% |
| API gusts | probe/api | 298 | 0% |
| dashboard squalls | probe/saas | 285 | 0% |
| agent mist | probe/agent | 115 | 0% |
| probe/shell | probe/shell | 6 | 0% |
Past editions
More from the edge
Fraud Desk · Nov 11
32,669 requests got turned away at the door.
Login stuffing, failed logins, and who got turned away at the door.
Most Wanted · Nov 11
Bots' most wanted file: /download.php
The files bots asked for most yesterday. It's usually your .env.
The AI Key Heist · Nov 11
Bots went hunting for AI keys 789 times.
Bots are hunting for AI API keys. Here's whose they want most.
Cloud Landlords · Nov 11
81% of scanning came from rented servers.
Scanners don't own servers. They rent them. Here are the landlords.
Speedrun · Nov 11
New sites get scanned in 1,245 minutes.
How many minutes a brand-new website gets before the first scanner shows up.
Costume Party · Nov 11
57% of "browsers" were bots in costume.
Bots dressed up as Chrome, caught by their handshake. Plus the honest bots wearing name tags.
Want these bots off your site?
Put your domains behind the NiceTryBot edge. You'll see every request, tag the scanners, and send them to the gym while real people get on with their day.
See how it works