How to check recent visitors in cPanel Visitors
The cPanel Visitors module (it may appear as Visitors or Visitantes depending on your panel language) shows the most recent requests your site received. It is the fastest way to confirm who requested a page, from which IP, and with what result, without waiting for the longer statistics reports to update.
Before you start
- You need your cPanel username and password for your hosting account.
- Visitors shows roughly the last 1,000 requests for each domain, not a full history. For trends across weeks or months use AWStats.
- The data comes from the site’s access log, so it reflects real visits, bots, and crawlers alike.
- You do not need administrator or SSH access: everything is done from cPanel.
Open Visitors
- Log in to cPanel.
- Find the Metrics section.
- Click the Visitors icon (it may also show as Visitantes).
- You will see the list of domains and subdomains on your account.
- Click the magnifying glass next to the domain you want to review to open its visit log.
Read the log columns
The log is shown as a table. These are the columns you will see:
| Column | What it means |
|---|---|
| IP Address | The address the request came from. |
| URL | The page or file that was requested. |
| Time | Date and time of the request. |
| Size | How much data was sent in the response. |
| Status | The HTTP result code (for example 200, 404, or 500). |
| Referrer | The page the visitor came from, if any. |
Read the whole row: the same IP requesting many URLs within a few seconds, or many 404 codes in a row, usually points to a bot or a scan.
Use the data to decide the next step
- One IP repeats hundreds of requests in a short time: if you confirm it is unwanted traffic, you can block it with IP Blocker.
- Many 404 or 500 codes: review the site’s errors to find broken links or application failures.
- Spikes in size or visits that affect performance: compare with Resource Usage to see whether your plan is being overloaded.
- You want to see trends, not just recent activity: use AWStats for a view across days or weeks.
Verify what you found
- You confirmed the exact IP, URL, and time of the request you are concerned about.
- You identified whether the pattern is a normal visit, a bot, or possible abuse.
- You wrote down the full IP before blocking it, so you do not block your own by mistake.
- If you took an action (a block or a fix), open Visitors again after a while to confirm the pattern changed.
Common errors
- Expecting a full history: Visitors only keeps the most recent requests; for earlier months use AWStats.
- Assuming it is exact real time: the log can take a few minutes to reflect the latest visits.
- Blocking your own IP: check your current address before adding blocks in IP Blocker.
- Mistaking legitimate bots for attacks: search engine crawlers appear often and are usually not a problem.
Recommended reading
Still need help?
If this guide didn’t solve your issue, our team can help you via ticket.