Bot traffic: paulsfriends.com

all sites · all domains · last 15 days

All sites · All Domains · Visit paulsfriends.com

Who is really visiting paulsfriends.com?

Between Oct 23 and Nov 6, paulsfriends.com received 10,869 requests. About 98% came from automated software and about 0.9% look like real people.

That works out to about 53 human visitors, roughly 4 a day, who opened 58 pages between them. 5 of them read more than one page.

The biggest source is scanners hunting for security holes. They try the same list of common weak spots on every site they find.

The busiest day was Oct 26, with 3,308 requests, of which 4 came from people.

Bottom line: the hit counts on the All Domains worksheet are almost entirely bots. Use the human visitor figure here to judge this site's real audience.

98%of requests from bots
53human visitors (estimate)
58pages opened by people
10,869total requests, 15 days

Where the requests came from

People 0.9%Named bots 15%Disguised bots 17%Scanners 66%Unclear 1.6%

Requests per day

PeopleNamed botsDisguised botsScannersUnclear
01,0002,0003,0004,000Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

Human visitors per day

Same days, people only, on their own scale so they are visible.

036912Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

The breakdown

SourceRequestsΣ 10,869ShareData sentBlockedby the serverWhat this means
Break-in scanners5,72553%1 MB20Probing for WordPress logins, password files and other common weak spots.
Disguised scrapers1,68816%12 MB2Claims to be a normal browser but only downloads pages, never the images or icons a real browser fetches, reads many pages without ever clicking a link, or runs from a cloud provider.
Scanners posing as browsers1,44013%2 MB5Other requests from an address also caught probing for weak spots.
Other named bots6065.6%2 MB4Any other software that identifies itself as a bot.
Search engines4864.5%2 MB0Crawlers that say who they are, such as Google, Bing, Apple and Amazon. Usually welcome: this is how people find the site.
AI crawlers4384.0%<1 MB10AI companies gathering pages or answering a user's question, and saying so.
Unclear1791.6%<1 MB0Browser name, but fetched only an image or data file and no page. Could be either.
Scripts and tools1191.1%<1 MB0Programs such as curl or Python, or anything with an unrecognizable name.
SEO and marketing tools930.9%<1 MB35Commercial tools that sell data about websites.
Likely people660.6%<1 MB0Opened a page and also fetched its images or icons, at a human pace, from a non-cloud address.
Possibly people270.2%<1 MB0Read 1 to 3 pages, arrived from a search engine or social link, no icons fetched. Referrers can be faked, so treat these as maybe.
No name given10.0%<1 MB0Requests that give no software name at all.
App link sweepers10.0%<1 MB1Touches only login, app or embed links and no actual content.

Named bots

Botas it names itselfTypeRequests
PetalBotSearch engines207
ClaudeBotAI crawlers181
GooglebotSearch engines96
bingbotSearch engines62
OAI-SearchBotAI crawlers59
leakix.netOther named bots48
GPTBotAI crawlers47
ElevenlabsCrawlerOther named bots45
ibou-searchOther named bots45
serpstatbotSEO and marketing tools39
Amzn-SearchBotSearch engines34
QlyzeBotOther named bots33
SeznamBotSearch engines32
SEOJuice-SearchBotOther named bots32
SemrushBotSEO and marketing tools26

What people opened

Pages opened by at least two different human visitors.

PageHuman visitors
/45
/videos.html3

How people arrived

Referring siteHuman visitors
m.baidu.com17
www.google.com6
www.baidu.com1

Where disguised bots operate from

Address blocks, not individual addresses. A heavily used block with many addresses suggests one operator rotating through them.

Address blockRequestsAddresses used
192.42.0.0/1621330
5.102.0.0/16542
102.129.0.0/16401
185.220.0.0/16356
43.157.0.0/162620
170.106.0.0/162415
158.173.0.0/16245
43.130.0.0/162316

Day by day

DayHuman visitorsHuman pagesNamed botsrequestsDisguisedrequestsScannersrequestsUnclearrequestsAllrequestsBot share
Oct 232243101319847498%
Oct 2455671151711837893%
Oct 2522639515618295%
Oct 2633951093,09193,30899.6%
Oct 2733175147279861398%
Oct 2811102139961435395%
Oct 2944157162122845697%
Oct 3010101141483673068192%
Oct 31341991043001062097%
Nov 122103113437866398%
Nov 245951204151164897%
Nov 36725886653121,01898%
Nov 444661314021462097%
Nov 555411072771344695%
Nov 611451322211040997%

How this was measured

Every request in the server log was sorted by what it did, not only what it claimed to be. Bots that name themselves are counted as named. Anything claiming to be a browser had to act like one: open a page, fetch its images or icons, move at human speed, and come from outside the big cloud providers. These are estimates. A careful bot can pass the test, and a person with images blocked or a cached icon can fail it, so read the human figures as a good approximation, not an exact count. One person using two devices counts as two visitors. Google Analytics-style tools would show different numbers because most bots never run their script. Logs are kept for 15 days.

Built 2026-11-06 22:42 UTC from 15 log files.