[Supergatto] Advanced Traffic Statistics: Live Radar, WAF & AI Security 1.8.4

Bot Signatures Update & Stability

This release focuses on significantly expanding the Radar's ability to recognize the newest web crawlers, particularly those related to AI training, while improving overall add-on stability.

SECURITY & DETECTION ENHANCEMENTS

• Massive Bot Definitions Update: Added over 40 new signatures to the default configurations. The Live Radar can now flawlessly detect and categorize the latest AI data scrapers (such as GPTBot, ClaudeBot, OAI-SearchBot, Bytespider), modern SEO scanners, and network vulnerability bots (like Nuclei or Zgrab).
• Enhanced Anti-Spoofing: Expanded the DNS verification map. The system will now actively block malicious connections attempting to spoof legitimate AI models or search engine bots.

FIXES & IMPROVEMENTS

• Known Bugs Fixed: Applied various under-the-hood optimizations and resolved minor known bugs in the traffic to ensure maximum stability and zero interruptions during the page load process.

IMPORTANT NOTE FOR UPGRADING USERS Because XenForo safely preserves your custom option values during an upgrade, the new bot signatures will not automatically overwrite your existing lists. To take full advantage of the updated AI/Bot detection, please manually copy and paste the new lists below into your add-on options:

1. Navigate to Admin CP > Setup > Options > Advanced Traffic Statistics.
2. Replace your existing lists with the ones below.
3. Save the changes.

Good Bots List:

Code:

Googlebot
Bing
Yahoo
DuckDuckGo
Yandex
Baidu
Sogou
Exabot
Applebot
Samsung
Huawei
Miui
Facebook
WhatsApp
Telegram
Twitter
Pinterest
Discord
LinkedIn
Skype
Viber
Snapchat
Slackbot
Mastodon
Cloudflare
Uptime
Pingdom
StatusCake
PayPal
Stripe
Google-Read-Aloud
AdsBot-Google
Google-Site-Verification
AppleNewsBot

AI / Scraper Bots List:

Code:

GPTBot
ChatGPT
ChatGPT-User
OAI-SearchBot
Claude
ClaudeBot
Anthropic
CommonCrawl
CCBot
Bytespider
Diffbot
Imagesift
Perplexity
YouBot
Omgili
Google-Extended
GoogleOther
Applebot-Extended
Amazonbot
FacebookBot
meta-externalagent
meta-externalfetch
cohere-ai
magpie-crawler

Bad / Junk Bots List:

Code:

AhrefsBot
SemrushBot
MJ12bot
DotBot
PetalBot
MegaIndex
BLEXBot
DataForSeoBot
SerpstatBot
ZoominfoBot
Ubervac
Barkrowler
Buck
SMTBot
TraceMyFile
LinkpadBot
ExtLinksBot
ltx71
NetSystemsResearch
Shodan
CensysInspect
python-requests
curl/
Wget/
libwww-perl
Go-http-client
Java/
Scrapy
GuzzleHttp
okhttp
aiohttp
PostmanRuntime
sqlmap
Nikto
Havij
Netsparker
OpenVAS
Nmap
Nuclei
Zgrab
DirBuster
Hydra
Masscan
w3af
IbouBot
trendictionbot
VelenPublicWebCrawler
BitSightBot
HeadlessChrome
BurpSuite

Anti-Spoofing: Verified Bot Map:

Code:

Googlebot : .googlebot.com, .google.com
bingbot : .search.msn.com, .microsoft.com
Yahoo : .crawl.yahoo.net
Yandex : .yandex.com, .yandex.ru, .yandex.net
Baidu : .baidu.com, .baidu.jp
DuckDuckGo : .duckduckgo.com, .search.msn.com, .microsoft.com
DuckDuckBot : .duckduckgo.com, .search.msn.com, .microsoft.com
Applebot : .apple.com, .apple-dns.net
Amazon : .amazon.com, .amazonaws.com
Twitter : .twitter.com, .twttr.com
Pinterest : .pinterest.com
LinkedIn : .linkedin.com
PetalBot : .aspiegel.com, .petalsearch.com, .hwclouds-dns.com
GPTBot : .openai.com
ChatGPT-User : .openai.com
OAI-SearchBot : .openai.com
ClaudeBot : .anthropic.com
Bytespider : .bytedance.com

Update 1.8.3 - Maintenance & Compatibility Release

FIXES & IMPROVEMENTS

• Improved GeoIP handling (TOR Network):
  • Fixed a bug where visitors originating from the TOR network (via Cloudflare's "T1" code) would display a broken image instead of a flag.
  • These connections are now correctly mapped to the default "Unknown" icon to maintain a clean UI.
• Database Compatibility (MySQL Fix):
  • Fixed a critical installation error (MySQL query error 3988) that occurred on servers with older database collations.
  • Replaced special graphical characters (█) in the phrase system with standard compatible characters (#) to ensure a smooth installation and upgrade process for all users.
• Versioning:
  • Add-on core updated to version 1.8.3.

NEW KEY FEATURES

AI Security Analyst (AI Radar)

Automated Daily Reports: Every night at 12:30 AM (UTC), the add-on collects the day's traffic data (humans, legitimate bots, blocked threats) and securely sends it to the AI (based on Google Gemini 2.5 Flash).

Advanced Forensic Analysis: The AI doesn't simply summarize the numbers; it thoroughly examines a sample of the last 200 connections to uncover suspicious patterns, aggressive scraping bots (e.g., HeadlessChrome), unauthorized AI training attempts (e.g., ChatGPT bots), and spoofed user agents.

Intelligent Monthly Log: The AI automatically publishes the report in a private staff room of your choice. The system is intelligent: it creates a single thread for each month (e.g., "Security Log - 03/2026") and appends the daily reports as replies, keeping the forum clean and tidy.

Note: This feature is disabled by default and can be configured using the new options in the admin panel (requires a free Google AI Studio API key). (PRO feature)

NOTE: AI prompts and generated thread titles are managed through XenForo's native Phrase system. This allows the report to be instantly translated into any language simply by editing the phrase from the Admin panel (the AI will automatically respond in the requested language).

"Hard Drop" Anti-DDoS and Anti-Scraping System

A new active security mechanism has been introduced. Connections classified as serious threats are no longer simply ignored or logged; they are now "hard dropped" at the server level. This significantly reduces database load and protects the forum from resource overload. (New feature available in options)

Query Optimization: Improved daily traffic extraction queries to support high-traffic forums without impacting Cron load times.

Fixed a minor bug that caused incorrect text to appear in the 7-day chart in the widget and in the Pro user-only stats