# A persistent Cursor browser generated high-frequency requests against my Cloudflare Worker **URL:** \ **Category:** Bug Reports\ **Tags:** browser, cloud-agents\ **Created:** [September 12, 2026, 1:03pm UTC](https://forum.cursor.com/t/a-persistent-cursor-browser-generated-high-frequency-requests-against-my-cloudflare-worker/171434 "2026-09-12T13:03:40Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![rrstux](https://avatars.discourse-cdn.com/v4/letter/r/54ee81/32.png) [@rrstux](https://forum.cursor.com/u/rrstux)\ **Post date:** [September 12, 2026, 1:03pm UTC](https://forum.cursor.com/t/a-persistent-cursor-browser-generated-high-frequency-requests-against-my-cloudflare-worker/171434/1 "2026-09-12T13:03:40Z")
### Where does the bug appear (feature/product)? Cloud Agent (GitHub, Slack, Web, Linear) ### Describe the Bug I was working on a feature that runs several health checks on my website and tested it via Cursor browser using several ways (local, other machine, mobile, Cloud agents). I was emailed by Cloudflare that my worker invocations are very high, and I noticed that there are around 1k requests every 5 minutes constantly in the last 5 days from what looks to me like a Cursor agent browser. Need some help stopping this, not sure how to proceed, although I cleaned all my agents, caches, cloud agents, environments etc. ### Steps to Reproduce Not sure - looks like a stale browser. ### Expected Behavior After I deleted all my cloud agents (using API), local agent, cache, chats, requests still come in. I added a WAF rule to prevent hammering my worker but, I can still see requests coming in from that IP address. ### Operating System MacOS ### Version Information Cursor IDE: 3.20.17 ### For AI issues: add Request ID with privacy disabled c1865b1eb3975c580fdd72ce2ea29837 ### Additional Information Source-IP: 104.30.180.109 User-Agent: Mozilla/5.0 (X11; Linux x86\_64) … Chrome/151.0.0.0 … Signature-Agent: “[https://cursorusercontent.com](https://cursorusercontent.com)” Signature-Input: sig1=(“@authority” “signature-agent”);keyid=“Vuxu4…Ub\_Oo”;alg=“ed25519”;tag=“web-bot-auth”;created=1789207648;expires=1789207738;nonce=“[redacted]” Signature: [redacted] Cloudflare verifiedBotCategory: AI Assistant ![image](https://us1.discourse-cdn.com/cursor1/original/3X/0/3/03ee7aa6b5de99e6477c0e09bf59ee8cf7d56b90.png) ### Does this stop you from using Cursor No - Cursor works, but with this issue ---
**Author:** ![Colin](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/colin/32/90452_2.png) [@Colin](https://forum.cursor.com/u/Colin)\ **Post date:** [September 13, 2026, 8:10am UTC](https://forum.cursor.com/t/a-persistent-cursor-browser-generated-high-frequency-requests-against-my-cloudflare-worker/171434/5 "2026-09-13T08:10:26Z")
Hey @rrstux, thanks for the detailed report. Those requests aren’t coming from a Cloud Agent or the Cursor IDE browser, so deleting agents and caches wouldn’t have helped. The Signature-Agent header you’re seeing ([cursorusercontent.com](http://cursorusercontent.com)) is the identity of the browser inside your _Grok Bot_ computer. When Grok Bot tested your health checks, it opened your pages in tabs in that computer’s Chrome, and those tabs stay open after the task finishes. Your health-check pages poll your Worker on their own, so the open tabs keep generating traffic while the computer runs (and it runs while the Grok Bot app is open). To stop it: 1. Open Grok Bot on your Mac. 2. Open your computer view (the “Open computer” / screen button). 3. Close every Chrome tab with your site open, or quit Chrome inside the computer. 4. In Grok Bot, open Automations and pause or delete any routine running your health checks (one was scheduled every 5 minutes on Sep 9). 5. If requests continue, go to Settings and use Reset Grok Bot’s Computer. This rebuilds the computer and drops all open tabs. ---
**Author:** ![rrstux](https://avatars.discourse-cdn.com/v4/letter/r/54ee81/32.png) [@rrstux](https://forum.cursor.com/u/rrstux)\ **Post date:** [October 3, 2026, 3:23am UTC](https://forum.cursor.com/t/a-persistent-cursor-browser-generated-high-frequency-requests-against-my-cloudflare-worker/171434/8 "2026-10-03T03:23:26Z")
Thank you @Colin , meanwhile the requests stopped as my Cursor & GrokBot subscription stopped. You were right, GrokBot was chilling in my Dock and I haven’t noticed it, totally forgot about the army of Groks clicking around. 😀