Bot traffic: bnbhot.com

all sites · all domains · last 15 days

All sites · All Domains · Visit bnbhot.com

Who is really visiting bnbhot.com?

Between Oct 23 and Nov 6, bnbhot.com received 40,440 requests. About 98% came from automated software and about 1.2% look like real people.

That works out to about 152 human visitors, roughly 10 a day, who opened 218 pages between them. 40 of them read more than one page.

The biggest source is scanners hunting for security holes. They try the same list of common weak spots on every site they find.

Bottom line: the hit counts on the All Domains worksheet are almost entirely bots. Use the human visitor figure here to judge this site's real audience.

98%of requests from bots
152human visitors (estimate)
218pages opened by people
40,440total requests, 15 days

Where the requests came from

People 1.2%Named bots 32%Disguised bots 13%Scanners 52%Unclear 0.6%

Requests per day

PeopleNamed botsDisguised botsScannersUnclear
01,2502,5003,7505,000Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

Human visitors per day

Same days, people only, on their own scale so they are visible.

07142128Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

The breakdown

SourceRequestsΣ 40,440ShareData sentBlockedby the serverWhat this means
Break-in scanners14,66636%34 MB4,319Probing for WordPress logins, password files and other common weak spots.
Other named bots9,14623%86 MB15Any other software that identifies itself as a bot.
Scanners posing as browsers6,54216%42 MB38Other requests from an address also caught probing for weak spots.
Disguised scrapers4,06610%30 MB12Claims to be a normal browser but only downloads pages, never the images or icons a real browser fetches, reads many pages without ever clicking a link, or runs from a cloud provider.
Search engines2,0055.0%12 MB9Crawlers that say who they are, such as Google, Bing, Apple and Amazon. Usually welcome: this is how people find the site.
AI crawlers1,7024.2%3 MB59AI companies gathering pages or answering a user's question, and saying so.
Scripts and tools1,3333.3%7 MB5Programs such as curl or Python, or anything with an unrecognizable name.
Likely people4091.0%6 MB0Opened a page and also fetched its images or icons, at a human pace, from a non-cloud address.
SEO and marketing tools2580.6%<1 MB162Commercial tools that sell data about websites.
Unclear2330.6%2 MB0Browser name, but fetched only an image or data file and no page. Could be either.
Possibly people790.2%<1 MB0Read 1 to 3 pages, arrived from a search engine or social link, no icons fetched. Referrers can be faked, so treat these as maybe.
No name given10.0%<1 MB0Requests that give no software name at all.

Named bots

Botas it names itselfTypeRequests
facebook.comOther named bots4,962
meta-webindexerOther named bots2,663
ClaudeBotAI crawlers800
PetalBotSearch engines757
GooglebotSearch engines526
ElevenlabsCrawlerOther named bots227
QlyzeBotOther named bots197
OAI-SearchBotAI crawlers163
SemrushBotSEO and marketing tools151
BaiduspiderSearch engines136
bingbotSearch engines129
Amzn-SearchBotSearch engines124
ApplebotSearch engines119
GPTBotAI crawlers115
ExaSearchBotOther named bots102

What people opened

Pages opened by at least two different human visitors.

PageHuman visitors
/120
/gear/6
/news/4
/videos/4
/case-studies/2
/airbnb-guide.html2
/airbnb-guide/2
/packing-guide/2
/str-regulations/2

How people arrived

Referring siteHuman visitors
www.facebook.com24
m.baidu.com20
m.facebook.com19
www.google.com5
www.wholetech.com1
www.google.co.jp1
l.facebook.com1

Where disguised bots operate from

Address blocks, not individual addresses. A heavily used block with many addresses suggests one operator rotating through them.

Address blockRequestsAddresses used
66.249.0.0/161983
192.42.0.0/1617943
47.82.0.0/1610255
104.164.0.0/169511
158.69.0.0/16831
171.22.0.0/16752
103.4.0.0/16726
5.102.0.0/16713

Day by day

DayHuman visitorsHuman pagesNamed botsrequestsDisguisedrequestsScannersrequestsUnclearrequestsAllrequestsBot share
Oct 2356938273704141,93899%
Oct 244669821241871,34499%
Oct 257119042791,004112,22598%
Oct 2625309343523,296204,67098%
Oct 2735769326823121,93699.1%
Oct 2813138701821,31772,42098%
Oct 29101378335637261,54398%
Oct 3012131,1702021,645193,08598%
Oct 311235757188753241,78595%
Nov 114178661,4901,417153,82299%
Nov 2557033782,618113,72599.3%
Nov 311198303121,756192,94698%
Nov 414159743881,643413,09097%
Nov 513151,0623742,406133,89199%
Nov 61415853881,036142,02098%

How this was measured

Every request in the server log was sorted by what it did, not only what it claimed to be. Bots that name themselves are counted as named. Anything claiming to be a browser had to act like one: open a page, fetch its images or icons, move at human speed, and come from outside the big cloud providers. These are estimates. A careful bot can pass the test, and a person with images blocked or a cached icon can fail it, so read the human figures as a good approximation, not an exact count. One person using two devices counts as two visitors. Google Analytics-style tools would show different numbers because most bots never run their script. Logs are kept for 15 days.

Built 2026-11-06 22:43 UTC from 15 log files.