Bot traffic: colinfirth.org

all sites · all domains · last 15 days

All sites · All Domains · Visit colinfirth.org

Who is really visiting colinfirth.org?

Between Oct 23 and Nov 6, colinfirth.org received 34,960 requests. About 99.4% came from automated software and about 0.2% look like real people.

That works out to about 32 human visitors, roughly 2 a day, who opened 53 pages between them. 20 of them read more than one page.

The biggest source is scanners hunting for security holes. They try the same list of common weak spots on every site they find.

Bottom line: the hit counts on the All Domains worksheet are almost entirely bots. Use the human visitor figure here to judge this site's real audience.

99.4%of requests from bots
32human visitors (estimate)
53pages opened by people
34,960total requests, 15 days

Where the requests came from

People 0.2%Named bots 9.6%Disguised bots 9.8%Scanners 80%Unclear 0.4%

Requests per day

PeopleNamed botsDisguised botsScannersUnclear
01,5003,0004,5006,000Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

Human visitors per day

Same days, people only, on their own scale so they are visible.

02468Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

The breakdown

SourceRequestsΣ 34,960ShareData sentBlockedby the serverWhat this means
Break-in scanners21,69062%28 MB14,268Probing for WordPress logins, password files and other common weak spots.
Scanners posing as browsers6,27418%29 MB12Other requests from an address also caught probing for weak spots.
Disguised scrapers2,3136.6%19 MB6Claims to be a normal browser but only downloads pages, never the images or icons a real browser fetches, reads many pages without ever clicking a link, or runs from a cloud provider.
AI crawlers1,1493.3%2 MB80AI companies gathering pages or answering a user's question, and saying so.
Scripts and tools1,1103.2%2 MB4Programs such as curl or Python, or anything with an unrecognizable name.
Other named bots1,0693.1%5 MB21Any other software that identifies itself as a bot.
Search engines1,0152.9%5 MB15Crawlers that say who they are, such as Google, Bing, Apple and Amazon. Usually welcome: this is how people find the site.
Unclear1450.4%<1 MB0Browser name, but fetched only an image or data file and no page. Could be either.
SEO and marketing tools1240.4%<1 MB53Commercial tools that sell data about websites.
Possibly people460.1%<1 MB0Read 1 to 3 pages, arrived from a search engine or social link, no icons fetched. Referrers can be faked, so treat these as maybe.
Likely people120.0%<1 MB0Opened a page and also fetched its images or icons, at a human pace, from a non-cloud address.
No name given100.0%<1 MB0Requests that give no software name at all.
App link sweepers30.0%<1 MB1Touches only login, app or embed links and no actual content.

Named bots

Botas it names itselfTypeRequests
GooglebotSearch engines376
ClaudeBotAI crawlers268
PetalBotSearch engines180
bingbotSearch engines173
OAI-SearchBotAI crawlers124
GPTBotAI crawlers95
BytespiderAI crawlers79
YouBotAI crawlers62
CCBotAI crawlers62
Kimi-SearchBotOther named bots62
KimiBotOther named bots62
DuckAssistBotOther named bots59
ChatGLM-SpiderOther named bots57
BravebotOther named bots55
QlyzeBotOther named bots55

What people opened

Pages opened by at least two different human visitors.

PageHuman visitors
/20
/about/2

How people arrived

Referring siteHuman visitors
m.baidu.com20
www.google.com5
www.reddit.com1
www.quora.com1
www.google.com.ua1

Where disguised bots operate from

Address blocks, not individual addresses. A heavily used block with many addresses suggests one operator rotating through them.

Address blockRequestsAddresses used
192.42.0.0/1616840
103.4.0.0/16823
102.129.0.0/16791
185.220.0.0/164914
43.130.0.0/164626
183.207.0.0/16445
43.166.0.0/164121
158.69.0.0/16331

Day by day

DayHuman visitorsHuman pagesNamed botsrequestsDisguisedrequestsScannersrequestsUnclearrequestsAllrequestsBot share
Oct 23251481501,50081,81299.2%
Oct 2424592045631184198%
Oct 25001431223,075123,35299.6%
Oct 264714926496061,38699.1%
Oct 27122522454,14384,65099.8%
Oct 28221881821,35681,73699.4%
Oct 29341111681,17451,46399.3%
Oct 3022881561,248101,50499.2%
Oct 31354151814,56675,17499.8%
Nov 1247541,0952,498254,37699.3%
Nov 2005061792,08392,77799.7%
Nov 3581031442,139132,40899.1%
Nov 4341591074511173298%
Nov 534103971,05841,26899.2%
Nov 6121791421,15081,48199.3%

How this was measured

Every request in the server log was sorted by what it did, not only what it claimed to be. Bots that name themselves are counted as named. Anything claiming to be a browser had to act like one: open a page, fetch its images or icons, move at human speed, and come from outside the big cloud providers. These are estimates. A careful bot can pass the test, and a person with images blocked or a cached icon can fail it, so read the human figures as a good approximation, not an exact count. One person using two devices counts as two visitors. Google Analytics-style tools would show different numbers because most bots never run their script. Logs are kept for 15 days.

Built 2026-11-06 22:42 UTC from 15 log files.