After getting some high usage reports from our Host, I decided to send Claude in to investigate. I wish I did it sooner, as soon as I flipped the switch, the reports started flowing in. I liked this one:
**2. Claude desktop app pulling product data: blocked for 7 days**
This is someone in Australia on an Aussie Broadband home connection using the Claude AI desktop app, which loaded the home page once and then fired 31 rapid product-data requests in about a minute and a half. All 31 were refused by the catalogue lock. That pattern is an automated AI agent pulling product data rather than a person shopping, and your rules treat AI-agent sessions and catalogue-lock refusals as catalogue harvesting. It got no product data, but it is blocked for 7 days.
Action: blocked for 7 days (Cloudflare IP rule, removes itself automatically)
Decided by: claude-opus-5-5, confidence medium
IP: [redacted]
Network: AU AS4764 WIDEBAND-AS-AP – Aussie Broadband, AU (no reverse DNS)
Trigger: CATALOGUE-API: refused 3 times by the catalogue lock in 10 min
Activity: 35 requests, 1 distinct pages, peak 1 pages/10s, 0 add-to-cart
Active: 2026-10-05 23:58:03Z -> 2026-10-05 23:59:38Z UTC
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Claude/2.19675.0 Chrome/152.0.7977.130 Safari/537.36 MSIX
Pages: / x1
API: 31 catalogue-API calls in 10 min, 31 refused by the lock, routes: /wc/store/products
Addresses: single IP
Spares: none
Server load: [0.5, 0.29, 0.28]
Source: r/ClaudeAI · by /u/Mitch_Henessey