I keep getting Pidgeys and Woobats.
There are only three Pokemon in a friend safari. Two are always there, the third is only there if the person you exchanged FCs with has beaten the E4, and if both of you are online at the same time.
Source: Experience and what I've heard and read.