In one of the agency communities I hang out in, the same story has come up three times in the past month: a business owner opens their hosting invoice and finds a surprise charge. Extra visits. Extra bandwidth. Overage fees.
The culprit wasn’t a marketing win or a viral post. It was bots.
One agency owner put it plainly: their client got charged extra bandwidth for bot traffic. Not customers — crawlers. And the worst version I’ve heard first-hand? A client billed $10,000 for bandwidth usage. Ten grand — for traffic that was never going to buy a thing.
If your hosting bill has crept up and you can’t explain why, here’s what’s actually going on.
The short answer
As of mid-2026, automated traffic makes up 57.5% of all web requests — bots officially passed humans this year, according to Cloudflare. AI crawlers are the fastest-growing slice: OpenAI’s GPTBot alone grew 305% in a single year.
Meanwhile, premium managed WordPress hosts like WP Engine and Flywheel bill by visits and bandwidth — $2 per 1,000 visits over your plan’s limit on both. When bot traffic inflates those numbers, you pay for it — sometimes spectacularly. I’ve heard first-hand of a bandwidth bill hitting $10,000.
At Holler Digital, we don’t charge bandwidth or visitor overages — every hosting plan includes a WordPress-tuned firewall with bot and DDoS protection, and our platform monitors every site’s bandwidth and flags abnormal spikes so we can deal with the bots before they ever become a line item on your invoice.
That’s the whole story if your coffee’s getting cold. The longer version explains why this is suddenly happening to everyone — and why “just block all the bots” is exactly the wrong fix.
What changed: the AI crawler explosion
The web has always had bots — Google’s crawler has been reading your site for 25 years. What’s new is the sheer volume.
Every AI company is now crawling the web to feed its models and answer engines: GPTBot, ClaudeBot, PerplexityBot, Google-Extended, Bytespider, and a long tail of scrapers that don’t bother introducing themselves. On top of that, agentic AI — assistants that browse pages on a user’s behalf — is generating billions of requests a day.
The Wikimedia Foundation reported its multimedia bandwidth surged 50% — with about 65% of its most expensive traffic coming from bots, not readers.
Your website is getting the same treatment, at a smaller scale. And unlike a human visitor, a hungry crawler doesn’t read one page and leave. It requests everything — every page, every image, every PDF — sometimes daily.
How this shows up on your hosting bill
Most managed WordPress hosts price their plans on one of two meters:
Visit-based billing. WP Engine and Flywheel both charge $2 per 1,000 visits over your plan’s monthly allowance. Both say known bots don’t count toward it — and that word is doing a lot of heavy lifting. Their filters catch the crawlers that politely identify themselves. The aggressive ones don’t, so they land on your meter looking exactly like customers. It’s why agency owners on both platforms keep reporting high bot activity and surprise overages.
Bandwidth-based billing. Your plan includes a data transfer allowance, and bot crawls burn through it just like human visits do — faster, actually, because crawlers download everything. Flywheel’s own overage policy says that if you’re consistently over on bandwidth, you may be charged for it. And they’re far from alone — the $10,000 bill I mentioned came from a different host entirely. Same billing model, bigger number.
Either way, the meter can’t tell a customer from a crawler with perfect accuracy. So when AI crawling doubled, a lot of businesses started paying for traffic that will never buy anything.
Worth checking on your own invoice: your visit or bandwidth number month-over-month, whether it’s climbing while your Google Analytics traffic is flat, and what your host charges when you cross the line. Flat analytics + rising hosting bill is the classic bot signature — GA4 filters out most bots; your host’s meter often doesn’t.
Why “block all bots” is the wrong fix
Here’s the twist most people miss in 2026: some of those bots are the best thing that ever happened to your marketing.
When GPTBot or PerplexityBot reads your site, that’s your content becoming quotable in ChatGPT and Perplexity answers — where a growing share of your customers now do their research. Block everything, and you’ve just made your business invisible to AI search. (We’ve written about why AI visibility matters.)
So the job isn’t blocking bots. It’s managing them:
Let the bots that send you customers in — search crawlers and the AI crawlers you want citing you. Block the scrapers, fake browsers, and bulk-download bots that cost you money and give nothing back. And rate-limit the grey area so nothing hammers your server, welcome or not.
That takes a properly configured firewall and someone paying attention — not a checkbox.
How we handle it (and why our clients don’t get surprise bills)
We host WordPress sites for Alberta businesses on infrastructure we manage ourselves, and this problem is exactly why our plans are built the way they are:
No bandwidth or visitor overage charges. Your monthly price is your monthly price. Bot surge, traffic spike, viral moment — the bill doesn’t move.
Bot and DDoS protection on every plan. Every site sits behind a WordPress-tuned firewall that blocks abusive crawlers and fake traffic automatically, while verified search and AI crawlers get through.
Abnormal bandwidth detection. We built monitoring into our hosting platform that watches every site’s bandwidth and flags unusual spikes. When something starts eating data at 3am, we see it, investigate it, and shut it down — usually before anyone notices. That’s our job, not yours.
AI crawlers managed for visibility, not just blocked. Because we also do AI-visibility work, we configure bot access deliberately — your site stays readable to the AI tools your customers use, without letting scrapers run up the meter.
Hosting plans start at $125/month, overage-free. The full breakdown is on our web hosting page, and if you’re weighing options, here’s what hosting actually costs in Canada.
Quick answers for the skimmers
Why did my hosting bill suddenly go up?
Very possibly bot traffic. Bots now generate 57.5% of all web requests, and AI crawlers grew over 300% last year. If your host bills by visits or bandwidth, bot surges can push you over your plan’s limits.
Do web hosts charge for bot traffic?
In practice, yes. WP Engine and Flywheel both charge $2 per 1,000 visits over your plan, and both exclude only known bots from the count — unidentified crawlers land on your meter. Flywheel may also bill sustained bandwidth overages. Bot-driven bills can run from a few dollars to five figures — the worst I’ve heard first-hand was $10,000, from another host on the same billing model.
Should I block AI bots from my website?
Not all of them. Crawlers like GPTBot and PerplexityBot make your business visible in AI search results. Block malicious scrapers, rate-limit the rest, and keep the crawlers that send you customers.
How do I know if bots are inflating my hosting usage?
Compare your host’s visit/bandwidth numbers against Google Analytics. If your hosting meter is climbing while GA4 traffic is flat, bots are the likely culprit — GA4 filters them; hosting meters often don’t.
Not sure what’s on your bill?
Send it over. Seriously — I’ll take a look at your hosting invoice and your traffic and tell you in plain English whether you’re paying for robots.
And if you’d rather your hosting bill just stopped being a monthly surprise, our hosting plans come with the firewall, the monitoring, and a flat price. Don’t get caught with your website down — or paying for visitors that were never human.
