Bot traffic: wordpressretreat.com

all sites · all domains · last 15 days

All sites · All Domains · Visit wordpressretreat.com

Who is really visiting wordpressretreat.com?

Between Oct 23 and Nov 6, wordpressretreat.com received 27,553 requests. About 99% came from automated software and about 0.5% look like real people.

That works out to about 98 human visitors, roughly 7 a day, who opened 122 pages between them. 24 of them read more than one page.

The biggest source is scanners hunting for security holes. They try the same list of common weak spots on every site they find.

The busiest day was Oct 26, with 4,602 requests, of which 12 came from people.

Bottom line: the hit counts on the All Domains worksheet are almost entirely bots. Use the human visitor figure here to judge this site's real audience.

99%of requests from bots
98human visitors (estimate)
122pages opened by people
27,553total requests, 15 days

Where the requests came from

People 0.5%Named bots 8.9%Disguised bots 12%Scanners 78%Unclear 0.5%

Requests per day

PeopleNamed botsDisguised botsScannersUnclear
01,2502,5003,7505,000Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

Human visitors per day

Same days, people only, on their own scale so they are visible.

0481216Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4Nov 6

The breakdown

SourceRequestsΣ 27,553ShareData sentBlockedby the serverWhat this means
Break-in scanners17,88765%21 MB8,785Probing for WordPress logins, password files and other common weak spots.
Scanners posing as browsers3,65713%14 MB63Other requests from an address also caught probing for weak spots.
Disguised scrapers2,3068.4%17 MB7Claims to be a normal browser but only downloads pages, never the images or icons a real browser fetches, reads many pages without ever clicking a link, or runs from a cloud provider.
Scripts and tools9773.5%3 MB15Programs such as curl or Python, or anything with an unrecognizable name.
AI crawlers9073.3%1 MB30AI companies gathering pages or answering a user's question, and saying so.
Other named bots7692.8%3 MB12Any other software that identifies itself as a bot.
Search engines6162.2%2 MB4Crawlers that say who they are, such as Google, Bing, Apple and Amazon. Usually welcome: this is how people find the site.
SEO and marketing tools1570.6%<1 MB73Commercial tools that sell data about websites.
Unclear1300.5%<1 MB0Browser name, but fetched only an image or data file and no page. Could be either.
Possibly people1090.4%<1 MB0Read 1 to 3 pages, arrived from a search engine or social link, no icons fetched. Referrers can be faked, so treat these as maybe.
Likely people340.1%<1 MB0Opened a page and also fetched its images or icons, at a human pace, from a non-cloud address.
No name given40.0%<1 MB1Requests that give no software name at all.

Named bots

Botas it names itselfTypeRequests
ClaudeBotAI crawlers389
PetalBotSearch engines193
GooglebotSearch engines168
OAI-SearchBotAI crawlers101
bingbotSearch engines92
GPTBotAI crawlers91
ibou-searchOther named bots77
SemrushBotSEO and marketing tools66
QlyzeBotOther named bots65
BarkrowlerSEO and marketing tools52
leakix.netOther named bots52
SeznamBotSearch engines41
Amzn-SearchBotSearch engines38
MoonshotBotOther named bots38
ElevenlabsCrawlerOther named bots36

What people opened

Pages opened by at least two different human visitors.

PageHuman visitors
/90

How people arrived

Referring siteHuman visitors
coworkingretreat.com53
m.baidu.com22
merkezkombiteknikservisies.blogspot.com10
www.google.com3
www.bing.com1

Where disguised bots operate from

Address blocks, not individual addresses. A heavily used block with many addresses suggests one operator rotating through them.

Address blockRequestsAddresses used
45.138.0.0/161283
66.249.0.0/161283
192.42.0.0/169123
82.80.0.0/16582
102.129.0.0/16471
5.102.0.0/16472
154.28.0.0/16403
45.152.0.0/16381

Day by day

DayHuman visitorsHuman pagesNamed botsrequestsDisguisedrequestsScannersrequestsUnclearrequestsAllrequestsBot share
Oct 23341381862511759796%
Oct 24141598256288566297%
Oct 2513141191191,24581,51398%
Oct 269123841974,00544,60299.7%
Oct 27111393254790111,16198%
Oct 2814141181541,17691,47198%
Oct 29111380192561284998%
Oct 3044308114818161,26098%
Oct 31693981551,611172,19599%
Nov 1581969981,31142,51999.4%
Nov 2001122102,22542,55199.8%
Nov 3471381302,83853,12199.5%
Nov 4231071057151694698%
Nov 523951503,31473,57099.7%
Nov 6236567396553699%

How this was measured

Every request in the server log was sorted by what it did, not only what it claimed to be. Bots that name themselves are counted as named. Anything claiming to be a browser had to act like one: open a page, fetch its images or icons, move at human speed, and come from outside the big cloud providers. These are estimates. A careful bot can pass the test, and a person with images blocked or a cached icon can fail it, so read the human figures as a good approximation, not an exact count. One person using two devices counts as two visitors. Google Analytics-style tools would show different numbers because most bots never run their script. Logs are kept for 15 days.

Built 2026-11-06 22:42 UTC from 15 log files.