This release is all about making your traffic data readable. The Datacenter panel has been completely redesigned, detection coverage has more than doubled, and the sidebar widget gets a brand new animated chart.
🎨 Datacenter panel — completely redesigned
The Datacenter Traffic panel has been rebuilt from the ground up. Instead of plain numbers, you now get a proper intelligence dashboard:
- KPI cards — Flagged today, last 7 days and blocked today, each with its own colour-coded icon.
- 30-day activity chart — A smooth area chart showing how datacenter traffic has evolved over the past month, so you can spot the exact day an attack campaign started.
- Top hosting providers — A ranked bar list of the hosting companies hitting your forum most.
- Provider identification (NEW) — Every detected IP now shows which hosting company or VPN network it belongs to, as a badge in the table. You no longer just know "this is a datacenter bot" — you know it came from DataCamp, M247, Hetzner, and so on.
- Identity column — See the exact user-agent each bot was pretending to be. Very often you'll notice a dozen different IPs all claiming to be the same browser: that's a distributed scraping botnet, and now it's obvious at a glance.
- AbuseIPDB lookup — Every IP in the table is a direct link to its AbuseIPDB reputation report. One click to see who you're dealing with.
🌐 Detection coverage more than doubled
The datacenter ASN database has grown from 43 to 110 known hosting and VPN networks. Newly covered providers include Scaleway, netcup, Aruba, LeaseWeb, Hostinger, Alibaba Cloud, Tencent Cloud, Huawei Cloud, Sharktech, ReliableSite, Hostwinds and a range of bulletproof-hosting networks commonly used by scrapers and commercial VPN services.
Note that consumer VPN services running on residential-style networks are deliberately not included — flagging those would risk blocking real members.
🤖 Datacenter data in the AI daily report
The automated daily security report now includes datacenter figures: how many datacenter IPs were detected, and which providers dominated. Your AI-generated audit now covers this layer of traffic too.
📊 New sidebar widget chart (Pro)
The 7-day trend chart in the widget has been redesigned:
- Intensity-coloured bars — Bar colour now reflects traffic volume relative to the week's peak, from teal on quiet days through blue and indigo up to violet. The colour tells you something instead of just decorating.
- Day labels — Each bar is labelled with its date, and today's bar is highlighted in amber with a soft glow.
- Peak marker — A small gold dot marks the busiest day of the week.
- Smooth animations — Bars grow in sequence on load, and the live counters (online users, today's visitors, blocked threats) count up to their value like a rolling counter.
All animations are pure CSS or lightweight vanilla JavaScript — no libraries, no external requests, negligible overhead. They also respect the operating system's "reduce motion" accessibility setting, so users who prefer a static interface get one automatically.
This release is all about making your traffic data readable. The Datacenter panel has been completely redesigned, detection coverage has more than doubled, and the sidebar widget gets a brand new animated chart.
🎨 Datacenter panel — completely redesigned
The Datacenter Traffic panel has been rebuilt from the ground up. Instead of plain numbers, you now get a proper intelligence dashboard:
- KPI cards — Flagged today, last 7 days and blocked today, each with its own colour-coded icon.
- 30-day activity chart — A smooth area chart showing how datacenter traffic has evolved over the past month, so you can spot the exact day an attack campaign started.
- Top hosting providers — A ranked bar list of the hosting companies hitting your forum most.
- Provider identification (NEW) — Every detected IP now shows which hosting company or VPN network it belongs to, as a badge in the table. You no longer just know "this is a datacenter bot" — you know it came from DataCamp, M247, Hetzner, and so on.
- Identity column — See the exact user-agent each bot was pretending to be. Very often you'll notice a dozen different IPs all claiming to be the same browser: that's a distributed scraping botnet, and now it's obvious at a glance.
- AbuseIPDB lookup — Every IP in the table is a direct link to its AbuseIPDB reputation report. One click to see who you're dealing with.
🌐 Detection coverage more than doubled
The datacenter ASN database has grown from 43 to 110 known hosting and VPN networks. Newly covered providers include Scaleway, netcup, Aruba, LeaseWeb, Hostinger, Alibaba Cloud, Tencent Cloud, Huawei Cloud, Sharktech, ReliableSite, Hostwinds and a range of bulletproof-hosting networks commonly used by scrapers and commercial VPN services.
Note that consumer VPN services running on residential-style networks are deliberately not included — flagging those would risk blocking real members.
🤖 Datacenter data in the AI daily report
The automated daily security report now includes datacenter figures: how many datacenter IPs were detected, and which providers dominated. Your AI-generated audit now covers this layer of traffic too.
📊 New sidebar widget chart (Pro)
The 7-day trend chart in the widget has been redesigned:
- Intensity-coloured bars — Bar colour now reflects traffic volume relative to the week's peak, from teal on quiet days through blue and indigo up to violet. The colour tells you something instead of just decorating.
- Day labels — Each bar is labelled with its date, and today's bar is highlighted in amber with a soft glow.
- Peak marker — A small gold dot marks the busiest day of the week.
- Smooth animations — Bars grow in sequence on load, and the live counters (online users, today's visitors, blocked threats) count up to their value like a rolling counter.
All animations are pure CSS or lightweight vanilla JavaScript — no libraries, no external requests, negligible overhead. They also respect the operating system's "reduce motion" accessibility setting, so users who prefer a static interface get one automatically.
A major update to bot protection and reliability, developed across the 1.9.x cycle. It adds a powerful new detection layer against modern scrapers, full Cloudflare / reverse-proxy support, and migrates the GeoIP engine to a freely redistributable database. Everything is summarised below.
This is a targeted maintenance release focusing on the AI Daily Security Report system, ensuring perfect synchronization with your community's local settings.
🛠️ FIXES & IMPROVEMENTS
- Timezone Synchronization Fix: Resolved an edge-case bug where the date of the AI Daily Report could misalign (shift by one day) depending on the server's UTC time versus the forum's local timezone. The report now accurately reflects the exact 24-hour period based on the specific timezone set in your XenForo options.
- Native Date Localization: The AI Report no longer uses a hardcoded international date format (YYYY-MM-DD). It now intelligently reads your XenForo Language settings and natively formats the dates inside the generated report according to your community's specific locale preferences.
- UI Clean-up: Removed redundant date headers in the generated threads for a cleaner, more professional look.
This release focuses on significantly expanding the Radar's ability to recognize the newest web crawlers, particularly those related to AI training, while improving overall add-on stability.
🛡️ SECURITY & DETECTION ENHANCEMENTS
🛠️ FIXES & IMPROVEMENTS
- Massive Bot Definitions Update: Added over 40 new signatures to the default configurations. The Live Radar can now flawlessly detect and categorize the latest AI data scrapers (such as GPTBot, ClaudeBot, OAI-SearchBot, Bytespider), modern SEO scanners, and network vulnerability bots (like Nuclei or Zgrab).
- Enhanced Anti-Spoofing: Expanded the DNS verification map. The system will now actively block malicious connections attempting to spoof legitimate AI models or search engine bots.
- Known Bugs Fixed: Applied various under-the-hood optimizations and resolved minor known bugs in the traffic to ensure maximum stability and zero interruptions during the page load process.
⚠️ IMPORTANT NOTE FOR UPGRADING USERS Because XenForo safely preserves your custom option values during an upgrade, the new bot signatures will not automatically overwrite your existing lists. To take full advantage of the updated AI/Bot detection, please manually copy and paste the new lists below into your add-on options:
- Navigate to Admin CP > Setup > Options > Advanced Traffic Statistics.
- Replace your existing lists with the ones below.
- Save the changes.
FIXES & IMPROVEMENTS
- 🌍 Improved GeoIP handling (TOR Network):
- Fixed a bug where visitors originating from the TOR network (via Cloudflare's "T1" code) would display a broken image instead of a flag.
- These connections are now correctly mapped to the default "Unknown" icon to maintain a clean UI.
- 💾 Database Compatibility (MySQL Fix):
- Fixed a critical installation error (MySQL query error 3988) that occurred on servers with older database collations.
- Replaced special graphical characters (█) in the phrase system with standard compatible characters (#) to ensure a smooth installation and upgrade process for all users.
- ⚙️ Versioning:
- Add-on core updated to version 1.8.3.
✨ NEW KEY FEATURES
🤖 AI Security Analyst (AI Radar)
Automated Daily Reports: Every night at 12:30 AM (UTC), the add-on collects the day's traffic data (humans, legitimate bots, blocked threats) and securely sends it to the AI (based on Google Gemini 2.5 Flash).
Advanced Forensic Analysis: The AI doesn't simply summarize the numbers; it thoroughly examines a sample of the last 200 connections to uncover suspicious patterns, aggressive scraping bots (e.g., HeadlessChrome), unauthorized AI training attempts (e.g., ChatGPT bots), and spoofed user agents.
Intelligent Monthly Log: The AI automatically publishes the report in a private staff room of your choice. The system is intelligent: it creates a single thread for each month (e.g., "Security Log - 03/2026") and appends the daily reports as replies, keeping the forum clean and tidy.
Note: This feature is disabled by default and can be configured using the new options in the admin panel (requires a free Google AI Studio API key). (PRO feature)
NOTE: AI prompts and generated thread titles are managed through XenForo's native Phrase system. This allows the report to be instantly translated into any language simply by editing the phrase from the Admin panel (the AI will automatically respond in the requested language).
🛡️ "Hard Drop" Anti-DDoS and Anti-Scraping System
A new active security mechanism has been introduced. Connections classified as serious threats are no longer simply ignored or logged; they are now "hard dropped" at the server level. This significantly reduces database load and protects the forum from resource overload. (New feature available in options)
Query Optimization: Improved daily traffic extraction queries to support high-traffic forums without impacting Cron load times.
Fixed a minor bug that caused incorrect text to appear in the 7-day chart in the widget and in the Pro user-only stats
Hello everyone!We are incredibly proud to announce the release of Advanced Traffic Statistics 1.8.1, nicknamed "The Hunter".
This update focuses heavily on real-time threat unmasking, database performance for Large Boards, and giving you more control over your Live Radar.
🔥 What's New in 1.8.1:
[Added] Smart Signature Extractor: The Live Radar now features a dynamic algorithm that unmasks advanced bots and scrapers (such as HeadlessChrome or AI crawlers) hiding behind fake browser data. "Unknown Bots" are now a thing of the past!
[Added] Interactive Radar Filters: We’ve introduced a new dropdown menu right above the Live Radar. You can now filter real-time traffic on the fly (Humans Only, Bots Only, Blocked, or Spoofed) and adjust the display limit (up to 500 rows to ensure optimal server performance).
[Optimized] 504 Timeout Fix for Large Boards: The default IP log retention has been safely reduced from 30 to 7 days. This drastically cuts down database bloat, resulting in lightning-fast dashboard loading times and entirely preventing 504 Server Timeouts on high-traffic forums.
[Fixed] Chart Accuracy: Spoofed bots (fake Googlebots, etc.) are now instantly stripped of their disguises and correctly excluded from the "Good Bots" charts.
[Fixed] CSV Export: The CSV export tool has been completely rewritten to perfectly match the new Smart Radar logic and formatting.
🏆 The "Hunter" Community Challenge!Now that the Radar is smarter than ever, we want to see it in action!Install the 1.8.1 update, let it run, and share a screenshot of your Live Radar catching a sneaky bot or a blocked threat in the discussion thread. Let's see who catches the worst offender!
Thank you all for your continuous feedback and support. Update now and secure your board!
This update expands the capabilities of the Live Radar introduced in the previous version, equipping it with a true behavioral analysis engine. The system no longer just tells you who is on your forum, but analyzes in real-time what they are trying to do.
🛡️ New Behavioral Analysis (Threat Tags)The Live Radar now scans browsing habits and automatically assigns visual micro-badges to highlight anomalous activities:
🧲 [SCRAPER] (Purple): Identifies entities performing massive data extraction and heavy bandwidth consumption (triggers over 300 Hits in suspicious sessions).
🔓 [SCANNER] (Cyan): Detects hacking attempts or vulnerability scouting. The system intercepts anyone looking for system files, backups, or foreign CMS panels (.env, .sql, /wp-login, etc.).
🚪 [BRUTE FORCE] (Orange): Flags repeated attacks on login pages. Smart Thresholds applied: The system distinguishes between an attack bot (low threshold) and a real human user who simply forgot their password (high threshold), preventing false positives and accidental lockouts of your members.
✨ UI/UX Design
Micro-LED Status: The "Evaluation/Score" column of the Radar has been completely redesigned. Bulky rectangular buttons have been replaced with sleek, glowing "Micro-LED" visual indicators. The radar is now much cleaner, compact, and readable.
Updated Legend: Restructured the legend box to include explanations for the new Threat Tags and the new visual style.
🐛 Bug Fixes & Logic Tweaks
BAN Button Logic Fix: The "BAN IP" action button will no longer appear for Bots explicitly classified as "GOOD" (e.g., Googlebot, Facebook), even if they correctly trigger the "Scraper" badge due to their high indexing volumes.
- Major Performance Overhaul: Moved heavy database tasks (such as pruning old logs and aggregating yesterday's traffic data) out of the real-time Widget.
- New Dedicated Cron Entry: Maintenance operations are now handled by a lightweight, dedicated background Cron process (Statistiche - Manutenzione Giornaliera). It runs silently once a day, completely eliminating database bottlenecks during peak traffic hours.
- Fixed System Cron Stalling: Resolved the issue where heavy DELETE queries under high traffic could lock the database tables and stall XenForo's native cron queue.
- Ultra-Light Widget: The sidebar widget now only performs fast SELECT operations, drastically reducing the overall load on your server.