Build
Blocking spoofed AI user agents did not clean my analytics — a month of numbers
I put two Cloudflare WAF rules in front of credential scanners impersonating AI crawlers. A month later the blocked requests were still in my analytics as 403s, the scan count had gone from 145 to 991, and the scanning had moved onto the names real crawlers use — ChatGPT-User and Amazonbot. What the numbers say and how I split the two jobs.
