Bot traffic: stumblicious.com

all sites · all domains · last 15 days

All sites · All Domains · Visit stumblicious.com

Who is really visiting stumblicious.com?

Between Oct 23 and Nov 6, stumblicious.com received 35,623 requests. About 99.4% came from automated software and about 0.2% look like real people.

That works out to about 35 human visitors, roughly 2 a day, who opened 57 pages between them. 22 of them read more than one page.

The biggest source is scanners hunting for security holes. They try the same list of common weak spots on every site they find.

Bottom line: the hit counts on the All Domains worksheet are almost entirely bots. Use the human visitor figure here to judge this site's real audience.

99.4%of requests from bots
35human visitors (estimate)
57pages opened by people
35,623total requests, 15 days

Where the requests came from

People 0.2%Named bots 12%Disguised bots 8.1%Scanners 79%Unclear 0.4%

Requests per day

PeopleNamed botsDisguised botsScannersUnclear
01,2502,5003,7505,000Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

Human visitors per day

Same days, people only, on their own scale so they are visible.

02468Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

The breakdown

SourceRequestsΣ 35,623ShareData sentBlockedby the serverWhat this means
Break-in scanners23,00265%27 MB13,749Probing for WordPress logins, password files and other common weak spots.
Scanners posing as browsers5,24015%20 MB10Other requests from an address also caught probing for weak spots.
AI crawlers1,7224.8%2 MB133AI companies gathering pages or answering a user's question, and saying so.
Disguised scrapers1,7144.8%15 MB1Claims to be a normal browser but only downloads pages, never the images or icons a real browser fetches, reads many pages without ever clicking a link, or runs from a cloud provider.
Search engines1,2703.6%4 MB16Crawlers that say who they are, such as Google, Bing, Apple and Amazon. Usually welcome: this is how people find the site.
Other named bots1,1803.3%4 MB23Any other software that identifies itself as a bot.
Scripts and tools1,1613.3%3 MB8Programs such as curl or Python, or anything with an unrecognizable name.
Unclear1570.4%<1 MB0Browser name, but fetched only an image or data file and no page. Could be either.
SEO and marketing tools1100.3%<1 MB50Commercial tools that sell data about websites.
Possibly people490.1%<1 MB0Read 1 to 3 pages, arrived from a search engine or social link, no icons fetched. Referrers can be faked, so treat these as maybe.
Likely people140.0%<1 MB0Opened a page and also fetched its images or icons, at a human pace, from a non-cloud address.
App link sweepers30.0%<1 MB0Touches only login, app or embed links and no actual content.
No name given10.0%<1 MB0Requests that give no software name at all.

Named bots

Botas it names itselfTypeRequests
PetalBotSearch engines412
GooglebotSearch engines360
ClaudeBotAI crawlers284
OAI-SearchBotAI crawlers189
bingbotSearch engines159
BytespiderAI crawlers139
GPTBotAI crawlers114
MoonshotBotOther named bots99
ApplebotSearch engines96
Meta-ExternalAgentAI crawlers92
KimiBotOther named bots90
Perplexity-UserAI crawlers88
DuckAssistBotOther named bots86
AmazonbotAI crawlers86
OAI-AdsBotSearch engines84

What people opened

Pages opened by at least two different human visitors.

PageHuman visitors
/31

How people arrived

Referring siteHuman visitors
m.baidu.com21
www.google.com7
www.baidu.com1

Where disguised bots operate from

Address blocks, not individual addresses. A heavily used block with many addresses suggests one operator rotating through them.

Address blockRequestsAddresses used
66.249.0.0/161503
192.42.0.0/1611727
183.207.0.0/16512
45.156.0.0/163735
31.40.0.0/16331
43.130.0.0/162817
5.102.0.0/16262
185.220.0.0/16216

Day by day

DayHuman visitorsHuman pagesNamed botsrequestsDisguisedrequestsScannersrequestsUnclearrequestsAllrequestsBot share
Oct 23231281552,19482,48899.6%
Oct 24241482322,071122,46799.4%
Oct 25002551173,024173,41399.5%
Oct 26363561952,44793,01499.5%
Oct 27581851601,07691,43899%
Oct 2811921257111093999%
Oct 292413518792031,24999.4%
Oct 30003321191,163111,62599.3%
Oct 31891261361,17471,45399%
Nov 1361,0909072,797134,81499.6%
Nov 2344801201,949102,56599.4%
Nov 324188901,760172,05999%
Nov 4343601081,649162,13899.0%
Nov 5121301324,19994,47299.8%
Nov 612277961,10861,48999.5%

How this was measured

Every request in the server log was sorted by what it did, not only what it claimed to be. Bots that name themselves are counted as named. Anything claiming to be a browser had to act like one: open a page, fetch its images or icons, move at human speed, and come from outside the big cloud providers. These are estimates. A careful bot can pass the test, and a person with images blocked or a cached icon can fail it, so read the human figures as a good approximation, not an exact count. One person using two devices counts as two visitors. Google Analytics-style tools would show different numbers because most bots never run their script. Logs are kept for 15 days.

Built 2026-11-06 22:43 UTC from 15 log files.