Bot traffic: listsiam.com

all sites · all domains · last 15 days

All sites · All Domains · Visit listsiam.com

Who is really visiting listsiam.com?

Between Oct 23 and Nov 6, listsiam.com received 6,429 requests. About 94% came from automated software and about 4.0% look like real people.

That works out to about 80 human visitors, roughly 5 a day, who opened 100 pages between them. 13 of them read more than one page.

The biggest source is scanners hunting for security holes. They try the same list of common weak spots on every site they find.

Bottom line: the hit counts on the All Domains worksheet are almost entirely bots. Use the human visitor figure here to judge this site's real audience.

94%of requests from bots
80human visitors (estimate)
100pages opened by people
6,429total requests, 15 days

Where the requests came from

People 4.0%Named bots 20%Disguised bots 22%Scanners 53%Unclear 1.6%

Requests per day

PeopleNamed botsDisguised botsScannersUnclear
02505007501,000Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

Human visitors per day

Same days, people only, on their own scale so they are visible.

0481216Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

The breakdown

SourceRequestsΣ 6,429ShareData sentBlockedby the serverWhat this means
Break-in scanners2,31136%<1 MB6Probing for WordPress logins, password files and other common weak spots.
Disguised scrapers1,29420%5 MB0Claims to be a normal browser but only downloads pages, never the images or icons a real browser fetches, reads many pages without ever clicking a link, or runs from a cloud provider.
Scanners posing as browsers1,09617%1 MB10Other requests from an address also caught probing for weak spots.
Other named bots4747.4%2 MB10Any other software that identifies itself as a bot.
Search engines4226.6%1 MB3Crawlers that say who they are, such as Google, Bing, Apple and Amazon. Usually welcome: this is how people find the site.
AI crawlers2994.7%<1 MB2AI companies gathering pages or answering a user's question, and saying so.
Likely people2263.5%<1 MB0Opened a page and also fetched its images or icons, at a human pace, from a non-cloud address.
Unclear1041.6%<1 MB0Browser name, but fetched only an image or data file and no page. Could be either.
Scripts and tools1031.6%<1 MB0Programs such as curl or Python, or anything with an unrecognizable name.
SEO and marketing tools691.1%<1 MB44Commercial tools that sell data about websites.
Possibly people300.5%<1 MB0Read 1 to 3 pages, arrived from a search engine or social link, no icons fetched. Referrers can be faked, so treat these as maybe.
App link sweepers10.0%<1 MB1Touches only login, app or embed links and no actual content.

Named bots

Botas it names itselfTypeRequests
OAI-SearchBotAI crawlers155
PetalBotSearch engines142
bingbotSearch engines99
GooglebotSearch engines86
SemrushBotSEO and marketing tools36
meta-webindexerOther named bots36
Amzn-SearchBotSearch engines35
ChatGPT-UserAI crawlers31
ClaudeBotAI crawlers31
Dataprovider.comOther named bots29
facebook.comOther named bots28
ExaSearchBotOther named bots27
ElevenlabsCrawlerOther named bots25
ibou-searchOther named bots25
CensysInspectOther named bots24

What people opened

Pages opened by at least two different human visitors.

PageHuman visitors
/56
/how-it-works/12
/for-agents/5
/foreign-buyer-guide/4
/faq/3
/join.html3
/regions/3
/for-owners/2
/fees-taxes/2

How people arrived

Referring siteHuman visitors
www.google.com15
m.baidu.com12
www.bing.com1

Where disguised bots operate from

Address blocks, not individual addresses. A heavily used block with many addresses suggests one operator rotating through them.

Address blockRequestsAddresses used
192.42.0.0/1617322
152.53.0.0/161102
5.102.0.0/16563
185.220.0.0/16287
43.157.0.0/162620
171.25.0.0/16232
112.45.0.0/162317
223.106.0.0/162221

Day by day

DayHuman visitorsHuman pagesNamed botsrequestsDisguisedrequestsScannersrequestsUnclearrequestsAllrequestsBot share
Oct 232283129155638296%
Oct 24447386546171499%
Oct 2566788039922787%
Oct 26131310572138736886%
Oct 27224490196533798%
Oct 2823727778323796%
Oct 2968527964421790%
Oct 301010971296151188795%
Oct 31116491140530198%
Nov 17780127287651197%
Nov 244177120348967396%
Nov 34894101404962296%
Nov 48107084208838993%
Nov 571411693180942192%
Nov 678594091214376%

How this was measured

Every request in the server log was sorted by what it did, not only what it claimed to be. Bots that name themselves are counted as named. Anything claiming to be a browser had to act like one: open a page, fetch its images or icons, move at human speed, and come from outside the big cloud providers. These are estimates. A careful bot can pass the test, and a person with images blocked or a cached icon can fail it, so read the human figures as a good approximation, not an exact count. One person using two devices counts as two visitors. Google Analytics-style tools would show different numbers because most bots never run their script. Logs are kept for 15 days.

Built 2026-11-06 22:41 UTC from 15 log files.