This release is all about making your traffic data
readable. The Datacenter panel has been completely redesigned, detection coverage has more than doubled, and the sidebar widget gets a brand new animated chart.
Datacenter panel — completely redesigned
The Datacenter Traffic panel has been rebuilt from the ground up. Instead of plain numbers, you now get a proper intelligence dashboard:
- KPI cards— Flagged today, last 7 days and blocked today, each with its own colour-coded icon.
- 30-day activity chart — A smooth area chart showing how datacenter traffic has evolved over the past month, so you can spot the exact day an attack campaign started.
- Top hosting providers — A ranked bar list of the hosting companies hitting your forum most.
- Provider identification (NEW) — Every detected IP now shows which hosting company or VPN network it belongs to, as a badge in the table. You no longer just know "this is a datacenter bot" — you know it came from DataCamp, M247, Hetzner, and so on.
- Identity column — See the exact user-agent each bot was pretending to be. Very often you'll notice a dozen different IPs all claiming to be the same browser: that's a distributed scraping botnet, and now it's obvious at a glance.
- AbuseIPDB lookup — Every IP in the table is a direct link to its AbuseIPDB reputation report. One click to see who you're dealing with.
Detection coverage more than doubled
The datacenter ASN database has grown from 43 to
110 known hosting and VPN networks. Newly covered providers include Scaleway, netcup, Aruba, LeaseWeb, Hostinger, Alibaba Cloud, Tencent Cloud, Huawei Cloud, Sharktech, ReliableSite, Hostwinds and a range of bulletproof-hosting networks commonly used by scrapers and commercial VPN services.
Note that consumer VPN services running on residential-style networks are deliberately
not included — flagging those would risk blocking real members.
Datacenter data in the AI daily report
The automated daily security report now includes datacenter figures: how many datacenter IPs were detected, and which providers dominated. Your AI-generated audit now covers this layer of traffic too.
New sidebar widget chart (Pro)
The 7-day trend chart in the widget has been redesigned:
- Intensity-coloured bars — Bar colour now reflects traffic volume relative to the week's peak, from teal on quiet days through blue and indigo up to violet. The colour tells you something instead of just decorating.
- Day labels — Each bar is labelled with its date, and today's bar is highlighted in amber with a soft glow.
- Peak marker — A small gold dot marks the busiest day of the week.
- Smooth animations — Bars grow in sequence on load, and the live counters (online users, today's visitors, blocked threats) count up to their value like a rolling counter.
All animations are pure CSS or lightweight vanilla JavaScript — no libraries, no external requests, negligible overhead. They also respect the operating system's "reduce motion" accessibility setting, so users who prefer a static interface get one automatically.
Free vs Pro
The Datacenter Intelligence panel is a Pro feature. Free users still see the live counters and the activity chart — so you can tell at a glance whether your forum is being targeted — while IP addresses and identities are masked. Detection itself (the trust-score penalty) remains available to everyone; only the panel details and direct blocking require a licence.
Upgrade notes
- Upload and run the upgrade from the Add-ons page as usual. A new database column is added automatically; the upgrade is safe on live boards.
- The Provider column fills in going forward. Existing log entries won't show a provider until those IPs are seen again, so expect the badges to appear progressively over the first hours.
- The 30-day chart shows data from the day daily archiving was introduced onward — it will fill out over the coming weeks.
- This release also includes the structural improvement from 1.9.3, where the GeoIP reader library is no longer loaded through a bundled Composer autoloader, making the package lighter and avoiding class conflicts with other add-ons.
As always, thanks to everyone testing and reporting. Enjoy!
New Behavioral Analysis (Threat Tags)The Live Radar now scans browsing habits and automatically assigns visual micro-badges to highlight anomalous activities:
[SCRAPER] (Purple): Identifies entities performing massive data extraction and heavy bandwidth consumption (triggers over 300 Hits in suspicious sessions).
[SCANNER] (Cyan): Detects hacking attempts or vulnerability scouting. The system intercepts anyone looking for system files, backups, or foreign CMS panels (.env, .sql, /wp-login, etc.).
[BRUTE FORCE] (Orange): Flags repeated attacks on login pages. Smart Thresholds applied: The system distinguishes between an attack bot (low threshold) and a real human user who simply forgot their password (high threshold), preventing false positives and accidental lockouts of your members.
UI/UX Design
Bug Fixes & Logic Tweaks
