This Is What’s Really Hitting Your Website (Hint: Not People)

This Is What’s Really Hitting Your Website (Hint: Not People) I wanted to understand how much of our traffic was actually human, so I pulled and analyzed 48 hours of raw request logs. No filters, no analytics layer, just direct log data. Time Frame Start: 2026-03-31 10:00 UTC End: 2026-04-02 10:00 UTC All requests within that window were grouped by path patterns and behavior. Traffic Breakdown Requests were classified into four categories: WordPress probing (paths containing wp) XMLRPC access attempts PHP endpoint probing General scanning and enumeration Results: WordPress probes: 34 percent XMLRPC attempts: 18 percent PHP probes: 27 percent Other scanning: 21 percent Roughly 79 percent of requests were not normal user activity. Sample of Active IPs Below is a subset of IPs with the highest request volume or repeated attack patterns during the window: 185.220.101.45 WordPress login brute force patterns 45.146.165.12 XMLRPC pingback attempts 103.248.70.33 PHP endpoint scanning 91.134.23