New bot filters deployed recently were accidentally blocking SamsungBrowser and Naver. Fixed!
03.03.2026 22:51
👍 0
🔁 0
💬 0
📌 0
New bot filters deployed recently were accidentally blocking SamsungBrowser and Naver. Fixed!
Singapore is the current bot capital of the world for spoofed user agents (bots pretending to be actual people).
Over *95%* of the traffic our entire network receives from there is getting blocked by our aggressive bot filters. Nowhere else is even remotely close.
Fun times! 😡
Check out our new UTM builder & QR code generator! clicky.com/utm-qr-codes...
Multiple hotmail and outlook customers have contacted us recently about 2FA emails not being received. Has our domain or mail IP been added to some new Microsoft blacklist? Who knows. Anyone with contacts there that could help, let us know.
Some big anti-bot updates went live last night. Some sites may notice a significant drop in traffic, but let us know if anything seems alarming. 🤖
jQuery just turned 20 years old! 😱
Clicky will also be turning 20 this November! 😭
HOW IS THIS POSSIBLE 👴👴👴
One of our uptime monitoring IP addresses changed today (out of our control), in case you need to update your firewall. If you use @cloudflare.social, we're on their verified bot list. More info here, including an API to grab the full list of IPs at any time - clicky.com/help/faq/fea...
It was an estimate based on the hourly visitor graphs I saw from customers' websites, there only seemed to be one hour where traffic was significantly impacted. The overall outage may have been longer though!
If you see a drop in your traffic earlier today, there was a Cloudflare outage for ~1 hour.
Forgot the word "bot" in here somehow. This post was about bot traffic in China.
This Cloudflare graph shows our total traffic volume from China. Huge surge the last week or so, almost triple what it was before. Previous generation was on Chrome 134, new gen is on 139. 134 traffic started dying off at the exact same time 139 started surging. Globally blocked as of... now.
These are the new AI bots we've been fighting the last few months, using human user agents, many from residential ISPs. It is hell. cryptography.dog/blog/AI-scra...
This is only going to keep getting worse. archive.is/BMWER
Our new Shopify tracking code is ready to go. It will track all pageviews, sales, revenue, and add/remove cart actions, and attach customer emails and order IDs to sessions when there's a sale. Check it out!
clicky.com/help/apps-pl...
on-site analytics bug is fixed. clear your browser cache and let us know how it works!
There's also a bug with the on-site analytics widget not loading. This will be fixed today!
There was an issue with our automatic history.pushState() tracking. Deploying a fix now!
If you are using proxy tracking with caching, you'll need to clear that cache manually if you want your site's tracking code updated asap. Otherwise, regardless of using proxy tracking or not, you shouldn't need to do anything!
🚨 Major tracking update, out now: We're finally moving on from script tag injection, to fetch(). Fetch offers way more flexibility, and is much friendlier with strict CSP headers.
We'll be monitoring for issues, but tweet or email us if you see any 🤓
Discovered when updating our Shopify tracking code to the new API (a few weeks late, sorry). We'll announce this Shopify update soon, should be within 24 hours!
Elements inside of an <iframe sandbox> will not send a referrer header, even if iframe is same origin, unless you have "allow-same-origin" set, which... mostly defeats the purpose of a sandbox.
This is not documented or discussed *anywhere* online
#webdev #protips #yourewelcome
We started working on this last week and we're trying some pretty aggressive measures, so your traffic may fluctuate a bit more than you're used to for a bit.
We're going to make mistakes too... A customer just informed us no iCloud relay traffic was logging.
Oops 🥹
There are some new AI bots going insane on the internet, massively inflating views for some of our customers. One pattern we've noticed is most of these sites seem to be sites with "listings", e.g. housing for rent, items for sale, that kind of thing.
Email reports with PDF attachment using custom dashboards... those were broken for a while and always just showed "today", instead of the specified date range. Fixed just now!
If you have a github account, please upvote this issue for Google Pagespeed. It's insane they don't include any unique identifiers anymore, especially since the user agent they do use is extremely outdated. github.com/GoogleChrome...
Last, we moved to clicky.com in 2012, but still there are calls to the API via getclicky.com, more than we expected once we looked. So there's an exception to bot blocking for API calls, since they're supposed to be 100% automated. Let us know if any issues
We have some new AI features coming soon that we teased about in our last blog post, but once that's ready, then our bot detection will also improve a good amount.
blog.clicky.com/ai-utms-and-...
We're well past peak traffic logging time today, but it's currently blocking about 800 requests per minute.
No filter is perfect, there will be false positives, but please let us know how it's working and if you see any major changes in your traffic.
Some reports recently of excessive bot traffic getting logged, likely some new AI crawlers. We already have a lot of code dedicated to filtering out bots, but we've just enabled Cloudflare's "bad" bot blocking on all tracking domains (*.getclicky.com). 🧵
Sending you an email...