Bot traffic: dropbox.wholetech.com

all sites · all domains · last 15 days

All sites · All Domains · Visit dropbox.wholetech.com

Who is really visiting dropbox.wholetech.com?

Between Oct 23 and Nov 6, dropbox.wholetech.com received 4,398 requests. About 51% came from automated software and about 14% look like real people.

That works out to about 311 human visitors, roughly 21 a day, who opened 315 pages between them. 4 of them read more than one page.

The biggest source is software pretending to be ordinary web browsers. It usually comes from thousands of rotating addresses to avoid being blocked, and it takes content without sending any readers back.

51%of requests from bots
311human visitors (estimate)
315pages opened by people
4,398total requests, 15 days

Where the requests came from

People 14%Named bots 0.3%Disguised bots 43%Scanners 7.5%Unclear 35%

Requests per day

PeopleNamed botsDisguised botsScannersUnclear
0150300450600Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

Human visitors per day

Same days, people only, on their own scale so they are visible.

09182736Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

The breakdown

SourceRequestsΣ 4,398ShareData sentBlockedby the serverWhat this means
Disguised scrapers1,87443%<1 MB1,872Claims to be a normal browser but only downloads pages, never the images or icons a real browser fetches, reads many pages without ever clicking a link, or runs from a cloud provider.
Unclear1,54035%<1 MB1,531Browser name, but fetched only an image or data file and no page. Could be either.
Likely people62314%<1 MB623Opened a page and also fetched its images or icons, at a human pace, from a non-cloud address.
Break-in scanners2996.8%<1 MB33Probing for WordPress logins, password files and other common weak spots.
Scanners posing as browsers330.8%<1 MB4Other requests from an address also caught probing for weak spots.
Scripts and tools140.3%<1 MB14Programs such as curl or Python, or anything with an unrecognizable name.
Other named bots80.2%<1 MB6Any other software that identifies itself as a bot.
Search engines50.1%<1 MB0Crawlers that say who they are, such as Google, Bing, Apple and Amazon. Usually welcome: this is how people find the site.
Possibly people20.0%<1 MB0Read 1 to 3 pages, arrived from a search engine or social link, no icons fetched. Referrers can be faked, so treat these as maybe.

Named bots

Botas it names itselfTypeRequests
PetalBotSearch engines4
CensysInspectOther named bots3
bingbotSearch engines1
modat.ioOther named bots1
AionBotOther named bots1
facebook.comOther named bots1
meta-webindexerOther named bots1
KeenableBotOther named bots1

How people arrived

Referring siteHuman visitors
m.baidu.com1

Where disguised bots operate from

Address blocks, not individual addresses. A heavily used block with many addresses suggests one operator rotating through them.

Address blockRequestsAddresses used
139.100.0.0/166562
94.228.0.0/165252
87.232.0.0/165050
72.63.0.0/163434
45.204.0.0/162929
154.222.0.0/162727
23.230.0.0/162019
189.104.0.0/161919

Day by day

DayHuman visitorsHuman pagesNamed botsrequestsDisguisedrequestsScannersrequestsUnclearrequestsAllrequestsBot share
Oct 232525010908524445%
Oct 241919111308523748%
Oct 251616212008624051%
Oct 2619190750011267%
Oct 272222110748624246%
Oct 2812131254125954047%
Oct 292526014508428052%
Oct 302727113508727749%
Oct 313334412708628346%
Nov 1151501471848744874%
Nov 22222015008728153%
Nov 3131321591438541573%
Nov 423231144025344433%
Nov 5232305508418530%
Nov 6181804808617028%

How this was measured

Every request in the server log was sorted by what it did, not only what it claimed to be. Bots that name themselves are counted as named. Anything claiming to be a browser had to act like one: open a page, fetch its images or icons, move at human speed, and come from outside the big cloud providers. These are estimates. A careful bot can pass the test, and a person with images blocked or a cached icon can fail it, so read the human figures as a good approximation, not an exact count. One person using two devices counts as two visitors. Google Analytics-style tools would show different numbers because most bots never run their script. Logs are kept for 15 days.

Built 2026-11-06 22:41 UTC from 15 log files.