What is Xenu's?

Watch it first. Xenu's has not been categorized yet, so there is no track record to lean on. Check which pages it requests and how often, and block it if the traffic is heavy or pointed at content you would not give an unknown bot. Almost none of the top websites we track have robots.txt rules for Xenu's right now.

Yes. Xenu's is expected to follow robots.txt rules, so a disallow rule is the right first move. Automatic Robots.txt adds and maintains that rule for you, and Agent Analytics confirms Xenu's actually follows it.

Unknown. Xenu's has no documented scope, so watch what it actually requests. Repeated hits on login or admin paths are the signal to block it.

Nobody knows yet. Xenu's is undocumented, so until its operator explains it, its behavior on your site is the only evidence of its intent.

Agent Analytics tracks Xenu's visits in real time alongside every other known AI agent, crawler, and scraper. You can also check your server logs for requests whose user agent string contains "Xenu's". Log the paths it requests and how often, since nothing about it is documented. Keep in mind that Xenu's doesn't publish a verification method, so any client can claim its user agent string and a log match is a hint rather than proof.