diff --git a/modules/security/bot-analyzer.sh b/modules/security/bot-analyzer.sh
index 80330cd..de9de1f 100755
--- a/modules/security/bot-analyzer.sh
+++ b/modules/security/bot-analyzer.sh
@@ -1791,8 +1791,9 @@ calculate_threat_scores() {
         fi
 
         # High success rate (90%+ 200/301/302) + high volume = potential scraping
-        if [ -n "${scraper_ips[$ip]}" ] && [ "${req_count:-0}" -gt 500 ]; then
-            score=$((score + 7))  # Scraping behavior
+        if [ -n "${scraper_ips[$ip]}" ]; then
+            local safe_req_count=$((req_count + 0))
+            [ "$safe_req_count" -gt 500 ] && score=$((score + 7))  # Scraping behavior
         fi
 
         # Attack patterns