Bot traffic: havelistings.com

all sites · all domains · last 15 days

All sites · All Domains · Visit havelistings.com

Who is really visiting havelistings.com?

Between Oct 23 and Nov 6, havelistings.com received 50,942 requests. About 99.7% came from automated software and about 0.1% look like real people.

That works out to about 40 human visitors, roughly 3 a day, who opened 62 pages between them. 22 of them read more than one page.

The biggest source is scanners hunting for security holes. They try the same list of common weak spots on every site they find.

Bottom line: the hit counts on the All Domains worksheet are almost entirely bots. Use the human visitor figure here to judge this site's real audience.

99.7%of requests from bots
40human visitors (estimate)
62pages opened by people
50,942total requests, 15 days

Where the requests came from

People 0.1%Named bots 6.2%Disguised bots 6.4%Scanners 87%Unclear 0.2%

Requests per day

PeopleNamed botsDisguised botsScannersUnclear
02,0004,0006,0008,000Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

Human visitors per day

Same days, people only, on their own scale so they are visible.

02468Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

The breakdown

SourceRequestsΣ 50,942ShareData sentBlockedby the serverWhat this means
Break-in scanners37,51074%3 MB21,246Probing for WordPress logins, password files and other common weak spots.
Scanners posing as browsers6,84813%11 MB38Other requests from an address also caught probing for weak spots.
Disguised scrapers2,0934.1%17 MB2Claims to be a normal browser but only downloads pages, never the images or icons a real browser fetches, reads many pages without ever clicking a link, or runs from a cloud provider.
Scripts and tools1,1652.3%2 MB6Programs such as curl or Python, or anything with an unrecognizable name.
Search engines1,1162.2%4 MB8Crawlers that say who they are, such as Google, Bing, Apple and Amazon. Usually welcome: this is how people find the site.
AI crawlers1,0442.0%<1 MB57AI companies gathering pages or answering a user's question, and saying so.
Other named bots8591.7%3 MB22Any other software that identifies itself as a bot.
SEO and marketing tools1420.3%<1 MB53Commercial tools that sell data about websites.
Unclear930.2%<1 MB0Browser name, but fetched only an image or data file and no page. Could be either.
Possibly people550.1%<1 MB0Read 1 to 3 pages, arrived from a search engine or social link, no icons fetched. Referrers can be faked, so treat these as maybe.
Likely people160.0%<1 MB0Opened a page and also fetched its images or icons, at a human pace, from a non-cloud address.
No name given10.0%<1 MB0Requests that give no software name at all.

Named bots

Botas it names itselfTypeRequests
PetalBotSearch engines452
ClaudeBotAI crawlers263
GooglebotSearch engines222
bingbotSearch engines202
OAI-SearchBotAI crawlers145
GPTBotAI crawlers91
QlyzeBotOther named bots69
ApplebotSearch engines58
ibou-searchOther named bots51
QwenbotOther named bots50
MoonshotBotOther named bots49
Meta-ExternalAgentAI crawlers46
BytespiderAI crawlers46
SemrushBotSEO and marketing tools46
BravebotOther named bots45

What people opened

Pages opened by at least two different human visitors.

PageHuman visitors
/32

How people arrived

Referring siteHuman visitors
m.baidu.com21
ydvhzclkweser.blogspot.com6
www.google.com6
duckduckgo.com1
www.bing.com1

Where disguised bots operate from

Address blocks, not individual addresses. A heavily used block with many addresses suggests one operator rotating through them.

Address blockRequestsAddresses used
66.249.0.0/161463
102.129.0.0/16681
158.69.0.0/16591
205.188.0.0/16471
192.42.0.0/163815
194.163.0.0/16382
43.166.0.0/163517
104.164.0.0/16332

Day by day

DayHuman visitorsHuman pagesNamed botsrequestsDisguisedrequestsScannersrequestsUnclearrequestsAllrequestsBot share
Oct 23232461502,69043,09399.8%
Oct 24571251381,19861,47499.1%
Oct 25442491113,03053,40099.7%
Oct 26351951986,25366,65799.8%
Oct 27241252002,29862,63399.6%
Oct 28221701154,69454,98699.9%
Oct 2924722692,34512,69199.8%
Oct 30113531422,859103,36599.7%
Oct 3124791562,220102,46999.4%
Nov 1594771,1975,72277,41899.7%
Nov 2222461164,21184,58499.8%
Nov 3241241322,59492,86399.5%
Nov 4563841331,48872,01999.3%
Nov 5352221231,88042,23499.6%
Nov 612947987651,05699.3%

How this was measured

Every request in the server log was sorted by what it did, not only what it claimed to be. Bots that name themselves are counted as named. Anything claiming to be a browser had to act like one: open a page, fetch its images or icons, move at human speed, and come from outside the big cloud providers. These are estimates. A careful bot can pass the test, and a person with images blocked or a cached icon can fail it, so read the human figures as a good approximation, not an exact count. One person using two devices counts as two visitors. Google Analytics-style tools would show different numbers because most bots never run their script. Logs are kept for 15 days.

Built 2026-11-06 22:42 UTC from 15 log files.