Bot traffic: retailcenters.wholereach.com

all sites · all domains · last 15 days

All sites · All Domains · Visit retailcenters.wholereach.com

Who is really visiting retailcenters.wholereach.com?

Between Oct 23 and Nov 6, retailcenters.wholereach.com received 3,948 requests. About 98% came from automated software and about 1.7% look like real people.

That works out to about 52 human visitors, roughly 3 a day, who opened 55 pages between them. 3 of them read more than one page.

The biggest source is scanners hunting for security holes. They try the same list of common weak spots on every site they find.

Bottom line: the hit counts on the All Domains worksheet are almost entirely bots. Use the human visitor figure here to judge this site's real audience.

98%of requests from bots
52human visitors (estimate)
55pages opened by people
3,948total requests, 15 days

Where the requests came from

People 1.7%Named bots 32%Disguised bots 30%Scanners 36%Unclear 0.8%

Requests per day

PeopleNamed botsDisguised botsScannersUnclear
0150300450600Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

Human visitors per day

Same days, people only, on their own scale so they are visible.

09182736Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

The breakdown

SourceRequestsΣ 3,948ShareData sentBlockedby the serverWhat this means
Disguised scrapers1,15029%36 MB0Claims to be a normal browser but only downloads pages, never the images or icons a real browser fetches, reads many pages without ever clicking a link, or runs from a cloud provider.
Break-in scanners81421%6 MB8Probing for WordPress logins, password files and other common weak spots.
Scanners posing as browsers60615%13 MB0Other requests from an address also caught probing for weak spots.
Search engines56114%16 MB0Crawlers that say who they are, such as Google, Bing, Apple and Amazon. Usually welcome: this is how people find the site.
Other named bots3067.8%8 MB20Any other software that identifies itself as a bot.
AI crawlers2436.2%5 MB0AI companies gathering pages or answering a user's question, and saying so.
SEO and marketing tools1383.5%3 MB48Commercial tools that sell data about websites.
Possibly people451.1%1 MB0Read 1 to 3 pages, arrived from a search engine or social link, no icons fetched. Referrers can be faked, so treat these as maybe.
Unclear330.8%<1 MB0Browser name, but fetched only an image or data file and no page. Could be either.
Scripts and tools240.6%<1 MB0Programs such as curl or Python, or anything with an unrecognizable name.
Likely people210.5%<1 MB0Opened a page and also fetched its images or icons, at a human pace, from a non-cloud address.
App link sweepers70.2%<1 MB6Touches only login, app or embed links and no actual content.

Named bots

Botas it names itselfTypeRequests
PetalBotSearch engines359
ClaudeBotAI crawlers138
ElevenlabsCrawlerOther named bots103
SERankingBacklinksBotSEO and marketing tools86
ApplebotSearch engines84
OAI-SearchBotAI crawlers72
Amzn-SearchBotSearch engines56
RiverBotOther named bots51
meta-webindexerOther named bots43
SemrushBot-BASEO and marketing tools35
bingbotSearch engines34
GPTBotAI crawlers27
GooglebotSearch engines25
archive.org_botOther named bots22
KeenableBotOther named bots20

What people opened

Pages opened by at least two different human visitors.

PageHuman visitors
/9

How people arrived

Referring siteHuman visitors
www.google.com42
m.baidu.com1

Where disguised bots operate from

Address blocks, not individual addresses. A heavily used block with many addresses suggests one operator rotating through them.

Address blockRequestsAddresses used
148.135.0.0/162121
213.136.0.0/16441
185.61.0.0/16431
192.42.0.0/162016
223.184.0.0/16191
103.173.0.0/16141
112.207.0.0/16131
47.79.0.0/161111

Day by day

DayHuman visitorsHuman pagesNamed botsrequestsDisguisedrequestsScannersrequestsUnclearrequestsAllrequestsBot share
Oct 2312946878324698%
Oct 2422132521219197%
Oct 2500103770218299%
Oct 2611871226221998%
Oct 27009427202132499.7%
Oct 280088831117399.4%
Oct 29009570100326899%
Oct 3011665784221198%
Oct 314470500012894%
Nov 1007760242238199.5%
Nov 2001437784230699.3%
Nov 3555269236336598%
Nov 4343563350113672%
Nov 55562285187654598%
Nov 6002249199327399%

How this was measured

Every request in the server log was sorted by what it did, not only what it claimed to be. Bots that name themselves are counted as named. Anything claiming to be a browser had to act like one: open a page, fetch its images or icons, move at human speed, and come from outside the big cloud providers. These are estimates. A careful bot can pass the test, and a person with images blocked or a cached icon can fail it, so read the human figures as a good approximation, not an exact count. One person using two devices counts as two visitors. Google Analytics-style tools would show different numbers because most bots never run their script. Logs are kept for 15 days.

Built 2026-11-06 22:41 UTC from 15 log files.