Bot traffic: wholeatx.com

all sites · all domains · last 15 days

All sites · All Domains · Visit wholeatx.com

Who is really visiting wholeatx.com?

Between Oct 24 and Nov 6, wholeatx.com received 5,419 requests. About 99% came from automated software and about 0.4% look like real people.

That works out to about 11 human visitors, roughly fewer than 1 a day, who opened 11 pages between them. 0 of them read more than one page.

The biggest source is scanners hunting for security holes. They try the same list of common weak spots on every site they find.

The busiest day was Nov 1, with 1,457 requests, of which 0 came from people.

Bottom line: the hit counts on the All Domains worksheet are almost entirely bots. Use the human visitor figure here to judge this site's real audience.

99%of requests from bots
11human visitors (estimate)
11pages opened by people
5,419total requests, 14 days

Where the requests came from

People 0.4%Named bots 8.4%Disguised bots 40%Scanners 51%Unclear 0.8%

Requests per day

PeopleNamed botsDisguised botsScannersUnclear
03757501,1251,500Oct 24Oct 26Oct 28Oct 30Nov 1Nov 3Nov 5

Human visitors per day

Same days, people only, on their own scale so they are visible.

01234Oct 24Oct 26Oct 28Oct 30Nov 1Nov 3Nov 5

The breakdown

SourceRequestsΣ 5,419ShareData sentBlockedby the serverWhat this means
Break-in scanners2,23941%<1 MB0Probing for WordPress logins, password files and other common weak spots.
Scripts and tools1,15521%<1 MB1Programs such as curl or Python, or anything with an unrecognizable name.
Disguised scrapers99318%<1 MB0Claims to be a normal browser but only downloads pages, never the images or icons a real browser fetches, reads many pages without ever clicking a link, or runs from a cloud provider.
Scanners posing as browsers5109.4%<1 MB0Other requests from an address also caught probing for weak spots.
SEO and marketing tools2003.7%<1 MB0Commercial tools that sell data about websites.
Other named bots1592.9%<1 MB0Any other software that identifies itself as a bot.
Search engines981.8%<1 MB0Crawlers that say who they are, such as Google, Bing, Apple and Amazon. Usually welcome: this is how people find the site.
Unclear460.8%<1 MB0Browser name, but fetched only an image or data file and no page. Could be either.
Likely people160.3%<1 MB0Opened a page and also fetched its images or icons, at a human pace, from a non-cloud address.
Possibly people30.1%<1 MB0Read 1 to 3 pages, arrived from a search engine or social link, no icons fetched. Referrers can be faked, so treat these as maybe.

Named bots

Botas it names itselfTypeRequests
SemrushBot-BASEO and marketing tools199
ForestEngineOther named bots60
PetalBotSearch engines30
bingbotSearch engines24
MSIE 8.0Other named bots24
leakix.netOther named bots24
ApplebotSearch engines18
GooglebotSearch engines15
MSIE 7.0Other named bots12
facebook.comOther named bots8
BaiduspiderSearch engines8
User-Agent:MozillaOther named bots7
CMS-CheckerOther named bots4
CensysInspectOther named bots3
nameserver-checker-http-validatorOther named bots3

How people arrived

Referring siteHuman visitors
www.baidu.com3

Where disguised bots operate from

Address blocks, not individual addresses. A heavily used block with many addresses suggests one operator rotating through them.

Address blockRequestsAddresses used
43.167.0.0/162654
43.133.0.0/16956
43.166.0.0/164524
183.207.0.0/16441
43.157.0.0/163423
43.135.0.0/163218
43.130.0.0/163023
49.51.0.0/162815

Day by day

DayHuman visitorsHuman pagesNamed botsrequestsDisguisedrequestsScannersrequestsUnclearrequestsAllrequestsBot share
Oct 240001001100.0%
Oct 251126154141020694%
Oct 26113422913027899.3%
Oct 271123125201035199.4%
Oct 28003282230137100.0%
Oct 29119610613221998%
Oct 30002712812216999%
Oct 312229312489083399.6%
Nov 1004451089761,45799.6%
Nov 2222873268337698%
Nov 300491362891148598%
Nov 43330125264442798%
Nov 500275675816695%
Nov 600121111910314100.0%

How this was measured

Every request in the server log was sorted by what it did, not only what it claimed to be. Bots that name themselves are counted as named. Anything claiming to be a browser had to act like one: open a page, fetch its images or icons, move at human speed, and come from outside the big cloud providers. These are estimates. A careful bot can pass the test, and a person with images blocked or a cached icon can fail it, so read the human figures as a good approximation, not an exact count. One person using two devices counts as two visitors. Google Analytics-style tools would show different numbers because most bots never run their script. Logs are kept for 15 days.

Built 2026-11-06 22:41 UTC from 13 log files.