Advanced Traffic Statistics: Live Radar, WAF & AI Security 1.9.2

Advanced Traffic Statistics 1.9.2

A major update to bot protection and reliability, developed across the 1.9.x cycle. It adds a powerful new detection layer against modern scrapers, full Cloudflare / reverse-proxy support, and migrates the GeoIP engine to a freely redistributable database. Everything is summarised below.

---

Datacenter (ASN) Detection

Modern scrapers are hard to catch: they run headless browsers with perfect user-agents and valid headers, sailing past traditional checks. But they almost always run on datacenter IPs, while real visitors come from residential or mobile networks. This turns that into a detection signal.

• Detects datacenter traffic from AWS, Google Cloud, Azure, DigitalOcean, Hetzner, OVH, Vultr, Linode, Contabo, Oracle and more.
• Configurable trust-score penalty — datacenter visitors have their trust score reduced and can be flagged as bots. Available to all users.
• Hard-block mode (Pro) — Pro license holders can block datacenter traffic outright with a 403 response. Off by default.
• Verified crawler exemption — Googlebot, Bingbot and other legitimate crawlers that pass Forward-Confirmed reverse DNS are never penalised, even from datacenter IPs.
• Logged-in users are always exempt — a member on a VPN is never affected.
• Lite & Full modes — works out of the box in Lite mode (major clouds). For full coverage including smaller hosts and VPN infrastructure (DataCamp, M247 and others), an optional free database can be added — instructions are shown right in the option.
• Dedicated dashboard panel — shows flagged/blocked counts, a persistent 7-day history, and a live table of recent datacenter visitors with country, trust score, block status, hit count, the user-agent they were pretending to be, and a direct AbuseIPDB lookup link on every IP.

---

Enabling full datacenter protection (optional)

By default, Datacenter Detection runs in Lite mode, covering the major cloud providers (AWS, Google Cloud, Azure, DigitalOcean, Hetzner, OVH, Vultr, Linode, Contabo, Oracle). This already stops most datacenter-based scrapers.

For full protection that also detects smaller hosting providers and VPN infrastructure (DataCamp, M247 and many others), add the optional DB-IP ASN Lite database:

1. Download the MMDB format from https://db-ip.com/db/download/ip-to-asn-lite
2. Decompress the .gz file
3. Rename it exactly to dbip-asn-lite.mmdb
4. Upload it via FTP to the folder src/addons/Statistiche/_data/

The database is free (CC-BY licensed) and updated monthly. Without it, detection still works normally in Lite mode. This database is not bundled with the add-on to keep the package lightweight and fully compatible with all hosting environments, including XenForo Cloud.

---

Cloudflare & reverse proxy support

• Real visitor IP recovery — forums behind Cloudflare now see visitors' real IPs instead of Cloudflare's, so statistics, geolocation and datacenter detection all work correctly. The CF-Connecting-IP header is only trusted when the connection genuinely originates from a verified Cloudflare range, preventing header spoofing.
• Works with existing setups — if your server already restores real IPs (mod_remoteip / nginx real_ip), the add-on detects this and does nothing, avoiding any conflict.
• Admin warning — if the add-on detects it's seeing Cloudflare IPs without the real visitor IP, it alerts the admin with instructions to fix it.

---

GeoIP engine migrated to DB-IP

The country database has been migrated to DB-IP Lite (Creative Commons licensed), which can be freely redistributed within the add-on, ensuring full licensing compliance. Attribution is displayed on the statistics page as required. For most users the change is invisible — country detection works exactly as before, and now functions on every hosting environment including XenForo Cloud, with no server configuration or PECL extension required.

---

Reliability & accuracy

• Persistent 7-day statistics — datacenter history is now stored in a daily archive, so the weekly figures stay accurate regardless of how aggressively old logs are pruned. (Note: the 7-day figure fills in progressively over the first week after updating.)
• Cleaner dashboard panel — the recent-visitors table shows the latest entries with a "View all in Live Radar" link for the full list, keeping the panel tidy even when thousands of IPs are blocked.

---

Removed — Bot Honeypot Trap

The Bot Honeypot Trap has been removed, as it did not deliver the expected results: modern scrapers no longer blindly follow hidden links, so in real-world use it caught virtually nothing. Its role is now filled far more effectively by the new Datacenter Detection above. The related options and template modification are removed automatically on upgrade — no manual cleanup needed.

If you had enabled the honeypot, you can now safely remove these two lines from your robots.txt, as they are no longer used:
Code:
Disallow: /statistiche/Basic/trap<br>Disallow: /statistiche/trap

---

Upgrade notes

1. Upload and run the upgrade from the Add-ons page. Database changes are applied automatically and the upgrade is safe on live boards.
2. Datacenter Detection is off by default — enable it when ready, starting with the trust-score penalty before considering hard-block mode.
3. If your forum is behind Cloudflare or another CDN, ensure real visitor IPs are being restored (the add-on can do this automatically — see the Cloudflare option in the settings).
4. For full datacenter coverage beyond the major clouds, follow the instructions shown in the detection option to add the optional free ASN database.

Thanks to everyone who tested and provided feedback throughout the 1.9.x cycle. Enjoy the update!

This update expands the capabilities of the Live Radar introduced in the previous version, equipping it with a true behavioral analysis engine. The system no longer just tells you who is on your forum, but analyzes in real-time what they are trying to do.

New Behavioral Analysis (Threat Tags)The Live Radar now scans browsing habits and automatically assigns visual micro-badges to highlight anomalous activities:

• [SCRAPER] (Purple): Identifies entities performing massive data extraction and heavy bandwidth consumption (triggers over 300 Hits in suspicious sessions).
• [SCANNER] (Cyan): Detects hacking attempts or vulnerability scouting. The system intercepts anyone looking for system files, backups, or foreign CMS panels (.env, .sql, /wp-login, etc.).
• [BRUTE FORCE] (Orange): Flags repeated attacks on login pages. Smart Thresholds applied: The system distinguishes between an attack bot (low threshold) and a real human user who simply forgot their password (high threshold), preventing false positives and accidental lockouts of your members.

UI/UX Design

• Micro-LED Status: The "Evaluation/Score" column of the Radar has been completely redesigned. Bulky rectangular buttons have been replaced with sleek, glowing "Micro-LED" visual indicators. The radar is now much cleaner, compact, and readable.
• Updated Legend: Restructured the legend box to include explanations for the new Threat Tags and the new visual style.

Bug Fixes & Logic Tweaks

• BAN Button Logic Fix: The "BAN IP" action button will no longer appear for Bots explicitly classified as "GOOD" (e.g., Googlebot, Facebook), even if they correctly trigger the "Scraper" badge due to their high indexing volumes.

Changelog 1.7.4:

• Major Performance Overhaul: Moved heavy database tasks (such as pruning old logs and aggregating yesterday's traffic data) out of the real-time Widget.
• New Dedicated Cron Entry: Maintenance operations are now handled by a lightweight, dedicated background Cron process (Statistiche - Manutenzione Giornaliera). It runs silently once a day, completely eliminating database bottlenecks during peak traffic hours.
• Fixed System Cron Stalling: Resolved the issue where heavy DELETE queries under high traffic could lock the database tables and stall XenForo's native cron queue.
• Ultra-Light Widget: The sidebar widget now only performs fast SELECT operations, drastically reducing the overall load on your server.

Changelog:

• NEW: Top Blocked Bots Chart: Added a new horizontal bar chart to the main report page. It displays today's "Top 10 Blocked Bots," giving you immediate visual feedback on exactly who is attacking your forum and being stopped by the AI/Junk Shields.
• PERFORMANCE: Core Optimization: Implemented an optimized version of the core file (Listener.php) featuring a smart cache limiting system. This reduces database write operations by approximately 90% without losing tracking precision.
• OPTION: Navigation Link: Added a new setting to enable a public statistics link positioned under the "Members" tab (useful if you prefer not to use the sidebar widget). The link location can be fully customized and moved anywhere via the XenForo Admin Panel (Public Navigation).
• DESIGN: Visual Overhaul: The report page graphics have been completely rewritten to provide a cleaner, more modern, and easier-to-read visualization of your data.

What's New in 1.6.1?

Bot Intelligence & AI DetectionWe have rewritten the detection engine from scratch. The addon now distinguishes between:

• Authorized Crawlers (Green): Essential traffic like Google, Bing, Yahoo.
• AI & LLM Scrapers (Purple): Identify who is training on your data (ChatGPT, GPTBot, Claude, CCBot).
• Aggressive/Unknown Bots (Red): Commercial crawlers (Ahrefs, Semrush, MJ12) and unclassified traffic.

Traffic Insight (Health Score)No need to guess if your traffic is healthy. The new "Traffic Insight" box gives you an immediate A/B/C Grade based on the ratio between real humans and aggressive bots.

• Score A: Healthy traffic.
• Score C: High risk / Bot spam detected -> Recommendations included (e.g., "Consider enabling WAF").

Glass Mode & Dark Theme PerfectionWe have improved the UI for dark styles. Charts now support a beautiful "Glass Mode" with transparency effects, and labels automatically adapt to ensure perfect readability on dark backgrounds.

Other Improvements:

• Database: Optimized table structure for bot name storage.
• Security: Enhanced core integrity checks.
• Setup: Improved upgrade routine for smoother transition from older versions.

Screenshots:[Qui puoi inserire gli screenshot che mi hai mostrato: il box Traffic Insight con la "A", la lista dei Bot colorata e il grafico Glass Mode]

Upgrade now to 1.6.1 to turn your raw data into actionable insights!

We're excited to announce the release of version 1.5.7, an update that takes your forum monitoring to the next level, introducing exclusive integration and new proactive analytics.

What's new?

"Quiz System" Widget Integration
Are you a proud user of our Quiz System? Now you can showcase your community's activity directly in the statistics widget!

• Total Attempts: Monitor your users' engagement.
• Success Rate: View how many quizzes are passed or failed in real time.

Note: This feature can be enabled/disabled from the admin options.

Under the Hood

• Performance: SQL query optimization for technological data retrieval.
• Clean Code: Code completely cleaned of redundant comments and debugging for maximum execution speed.

Improve your forum engagement!
Did you know that statistics are only half the battle? To turn your visitors into active users, we've created the ultimate gamification tool.

Download now: Quiz System PRO - Gamification & Analytics

With the Quiz System, you can create exciting challenges, issue customized PDF certificates, and track progress with dedicated dashboards. Seamless integration with Advanced Traffic Statistics lets you keep everything under control in a single suite!

How to update
Download the new build 1.5.7.

Upload the files, overwriting the previous ones.

Upgrade from your Admin Panel.

Enjoy the new stats!

Like this update? Leave a ★★★★★ review to support continued development!