Bot traffic dwarfs human traffic (~98% of requests). Client-side analytics miss all bot traffic. Without IP verification, spoofed bots may inflate false metrics. One comparison found GPTBot can make 470x more requests than Googlebot on fresh domains. Evidence confidence: hypothesis, not yet confirmed.
Rule aeo-72e6780e983c8495 · measurement · hypothesis, not yet confirmed
Track AI crawler traffic server-side with IP verification. User agent strings are spoofable; verify against official IP ranges.
Applies to: all
Hypothesis: the reasoning is published, but no independent evidence confirms it yet. Test it on your own pages before you rely on it.
Why this matters
Bot traffic dwarfs human traffic (~98% of requests). Client-side analytics miss all bot traffic. Without IP verification, spoofed bots may inflate false metrics. One comparison found GPTBot can make 470x more requests than Googlebot on fresh domains.
Implementation
Type: not_automatable
Anti-pattern
Relying solely on client-side analytics or user-agent-only bot detection for traffic analysis.
Get the full rule + automated checks
Subscribe to access evidence, remediation steps, and configurable check descriptors for this rule.