Bot traffic: market.realhotsprings.com

all sites · all domains · last 15 days

All sites · All Domains · Visit market.realhotsprings.com

Who is really visiting market.realhotsprings.com?

Between Oct 23 and Nov 6, market.realhotsprings.com received 6,403 requests. About 97% came from automated software and about 0.5% look like real people.

That works out to about 13 human visitors, roughly fewer than 1 a day, who opened 14 pages between them. 1 of them read more than one page.

The biggest source is scanners hunting for security holes. They try the same list of common weak spots on every site they find.

The busiest day was Oct 26, with 3,115 requests, of which 11 came from people.

Bottom line: the hit counts on the All Domains worksheet are almost entirely bots. Use the human visitor figure here to judge this site's real audience.

97%of requests from bots
13human visitors (estimate)
14pages opened by people
6,403total requests, 15 days

Where the requests came from

People 0.5%Named bots 19%Disguised bots 9.1%Scanners 69%Unclear 2.5%

Requests per day

PeopleNamed botsDisguised botsScannersUnclear
01,0002,0003,0004,000Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

Human visitors per day

Same days, people only, on their own scale so they are visible.

01234Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

The breakdown

SourceRequestsΣ 6,403ShareData sentBlockedby the serverWhat this means
Break-in scanners4,11664%<1 MB381Probing for WordPress logins, password files and other common weak spots.
Disguised scrapers5648.8%2 MB1Claims to be a normal browser but only downloads pages, never the images or icons a real browser fetches, reads many pages without ever clicking a link, or runs from a cloud provider.
Other named bots4807.5%3 MB6Any other software that identifies itself as a bot.
Search engines4497.0%2 MB1Crawlers that say who they are, such as Google, Bing, Apple and Amazon. Usually welcome: this is how people find the site.
Scanners posing as browsers2954.6%2 MB12Other requests from an address also caught probing for weak spots.
AI crawlers2263.5%<1 MB2AI companies gathering pages or answering a user's question, and saying so.
Unclear1602.5%<1 MB0Browser name, but fetched only an image or data file and no page. Could be either.
SEO and marketing tools651.0%<1 MB49Commercial tools that sell data about websites.
Likely people300.5%<1 MB0Opened a page and also fetched its images or icons, at a human pace, from a non-cloud address.
Scripts and tools160.2%<1 MB0Programs such as curl or Python, or anything with an unrecognizable name.
Possibly people20.0%<1 MB0Read 1 to 3 pages, arrived from a search engine or social link, no icons fetched. Referrers can be faked, so treat these as maybe.

Named bots

Botas it names itselfTypeRequests
PetalBotSearch engines321
ClaudeBotAI crawlers122
SQLSpiderOther named bots109
MSIE 8.0Other named bots105
RiverBotOther named bots91
OAI-SearchBotAI crawlers77
bingbotSearch engines53
meta-webindexerOther named bots53
SemrushBotSEO and marketing tools48
Amzn-SearchBotSearch engines35
GooglebotSearch engines34
ElevenlabsCrawlerOther named bots31
BacklinksExtendedBotOther named bots16
GPTBotAI crawlers15
SofyaBotOther named bots15

What people opened

Pages opened by at least two different human visitors.

PageHuman visitors
/9
/71901/2

How people arrived

Referring siteHuman visitors
m.baidu.com1

Where disguised bots operate from

Address blocks, not individual addresses. A heavily used block with many addresses suggests one operator rotating through them.

Address blockRequestsAddresses used
43.157.0.0/161613
158.173.0.0/16122
94.26.0.0/16111
170.106.0.0/1698
43.164.0.0/1696
43.153.0.0/1688
49.51.0.0/1687
43.165.0.0/1676

Day by day

DayHuman visitorsHuman pagesNamed botsrequestsDisguisedrequestsScannersrequestsUnclearrequestsAllrequestsBot share
Oct 23118622137124899%
Oct 2411491844211497%
Oct 2511745138594%
Oct 264439193,04153,11599.5%
Oct 27003712242229399.3%
Oct 2800871342314598%
Oct 2900503936595%
Oct 30336526121522594%
Oct 3100188121320499%
Nov 12214616164333498%
Nov 20010336184632998%
Nov 300661052052740393%
Nov 4111551052183751693%
Nov 500259523215479%
Nov 611509302817383%

How this was measured

Every request in the server log was sorted by what it did, not only what it claimed to be. Bots that name themselves are counted as named. Anything claiming to be a browser had to act like one: open a page, fetch its images or icons, move at human speed, and come from outside the big cloud providers. These are estimates. A careful bot can pass the test, and a person with images blocked or a cached icon can fail it, so read the human figures as a good approximation, not an exact count. One person using two devices counts as two visitors. Google Analytics-style tools would show different numbers because most bots never run their script. Logs are kept for 15 days.

Built 2026-11-06 22:41 UTC from 15 log files.