Sometimes the cloudflare bot filtering in their web analytics is just hilariously bad. I just had some IP (looks like some automated security scanner run by UT Austin) flag my security system, fail the (also cloudflare) captcha 12,000 times over the course of a day, and never get flagged by them as a bot.