Self-built dashboard finds 62.9% of 66,757 server requests are automated
Thionne_WTZ · x · 2026-10-18
A developer built a server-side monitoring dashboard and found that of 66,757 recorded requests, 5,068 were AI crawlers, 340 search engine bots, 806 security scanners, and 32 'impostors' — spoofed user-agents probing secrets or admin paths. Automated traffic made up 62.9% of all requests.
The post includes a hardening checklist: deploy a WAF (e.g. Cloudflare), close unneeded ports, never expose API keys or .env files, rate-limit sensitive endpoints, patch dependencies, monitor access logs, use SSH keys, set up alerts and tested backups, and verify suspicious traffic rather than trusting user-agents.
The author notes a scan isn't proof of a successful attack — classifications depend on their own detection rules — but argues you can't defend against activity you never notice.
More from coding & agent
- One founder's week on personal AI agents: taxes filed, Hamilton tickets, and an honest purchase scoreboard — altryne · 2026-10-18
- Shopify's Tobi Lütke: 'We are all verification engineers now' as agents become the third customer — schwentker · 2026-10-18
- Shopify CEO Tobi Lütke: "We are now all verification engineers" — schwentker · 2026-10-18
- Anthropic researcher on agent memory: "dreaming" aggregates memories from past sessions — schwentker · 2026-10-18
- Voice demo built with Jev draws "holy crap, that's the missing thing to get rid of keyboards" reaction — schwentker · 2026-10-18
- Agents reach llms.txt in only 32% of cases; 86% of those via site links — schwentker · 2026-10-18