Bot traffic: thanksforclicking.net

all sites · all domains · last 15 days

All sites · All Domains · Visit thanksforclicking.net

Who is really visiting thanksforclicking.net?

Between Oct 23 and Nov 6, thanksforclicking.net received 41,239 requests. About 99.6% came from automated software and about 0.1% look like real people.

That works out to about 33 human visitors, roughly 2 a day, who opened 53 pages between them. 19 of them read more than one page.

The biggest source is scanners hunting for security holes. They try the same list of common weak spots on every site they find.

Bottom line: the hit counts on the All Domains worksheet are almost entirely bots. Use the human visitor figure here to judge this site's real audience.

99.6%of requests from bots
33human visitors (estimate)
53pages opened by people
41,239total requests, 15 days

Where the requests came from

People 0.1%Named bots 4.4%Disguised bots 5.3%Scanners 90%Unclear 0.2%

Requests per day

PeopleNamed botsDisguised botsScannersUnclear
01,2502,5003,7505,000Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

Human visitors per day

Same days, people only, on their own scale so they are visible.

02468Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

The breakdown

SourceRequestsΣ 41,239ShareData sentBlockedby the serverWhat this means
Break-in scanners34,29583%55 MB22,588Probing for WordPress logins, password files and other common weak spots.
Scanners posing as browsers2,8026.8%14 MB9Other requests from an address also caught probing for weak spots.
Disguised scrapers1,9164.6%13 MB6Claims to be a normal browser but only downloads pages, never the images or icons a real browser fetches, reads many pages without ever clicking a link, or runs from a cloud provider.
Other named bots6041.5%3 MB8Any other software that identifies itself as a bot.
AI crawlers5631.4%<1 MB22AI companies gathering pages or answering a user's question, and saying so.
Search engines4771.2%2 MB5Crawlers that say who they are, such as Google, Bing, Apple and Amazon. Usually welcome: this is how people find the site.
Scripts and tools2640.6%<1 MB2Programs such as curl or Python, or anything with an unrecognizable name.
SEO and marketing tools1560.4%<1 MB63Commercial tools that sell data about websites.
Unclear980.2%<1 MB0Browser name, but fetched only an image or data file and no page. Could be either.
Possibly people460.1%<1 MB0Read 1 to 3 pages, arrived from a search engine or social link, no icons fetched. Referrers can be faked, so treat these as maybe.
Likely people120.0%<1 MB0Opened a page and also fetched its images or icons, at a human pace, from a non-cloud address.
App link sweepers50.0%<1 MB0Touches only login, app or embed links and no actual content.
No name given10.0%<1 MB0Requests that give no software name at all.

Named bots

Botas it names itselfTypeRequests
ClaudeBotAI crawlers234
PetalBotSearch engines179
GooglebotSearch engines112
OAI-SearchBotAI crawlers86
GPTBotAI crawlers69
bingbotSearch engines67
SemrushBotSEO and marketing tools60
leakix.netOther named bots48
ibou-searchOther named bots43
BarkrowlerSEO and marketing tools38
Amzn-SearchBotSearch engines34
Dataprovider.comOther named bots32
ElevenlabsCrawlerOther named bots31
SERankingBacklinksBotSEO and marketing tools30
SeznamBotSearch engines29

What people opened

Pages opened by at least two different human visitors.

PageHuman visitors
/26

How people arrived

Referring siteHuman visitors
m.baidu.com19
phoeniteclimz.blogspot.com7
www.google.com2

Where disguised bots operate from

Address blocks, not individual addresses. A heavily used block with many addresses suggests one operator rotating through them.

Address blockRequestsAddresses used
192.42.0.0/168526
45.138.0.0/16853
102.129.0.0/16702
158.69.0.0/16612
66.249.0.0/16546
103.83.0.0/16481
185.220.0.0/163210
154.28.0.0/16303

Day by day

DayHuman visitorsHuman pagesNamed botsrequestsDisguisedrequestsScannersrequestsUnclearrequestsAllrequestsBot share
Oct 232365742,83482,98599.6%
Oct 2424961183,51053,73399.8%
Oct 257757942,34552,50899.5%
Oct 2624801481,40051,63799.5%
Oct 27241792601,90232,34899.7%
Oct 28111111964,34854,66199.9%
Oct 2936601641,66961,90699.3%
Oct 3000741151,69071,88699.6%
Oct 3135891792,80823,08499.7%
Nov 1352132602,49862,98299.6%
Nov 2111021954,01844,32199.9%
Nov 3241851132,40072,70999.6%
Nov 4343051393,112273,58899.1%
Nov 523151702,27632,50399.8%
Nov 6123361287538898%

How this was measured

Every request in the server log was sorted by what it did, not only what it claimed to be. Bots that name themselves are counted as named. Anything claiming to be a browser had to act like one: open a page, fetch its images or icons, move at human speed, and come from outside the big cloud providers. These are estimates. A careful bot can pass the test, and a person with images blocked or a cached icon can fail it, so read the human figures as a good approximation, not an exact count. One person using two devices counts as two visitors. Google Analytics-style tools would show different numbers because most bots never run their script. Logs are kept for 15 days.

Built 2026-11-06 22:42 UTC from 15 log files.