WebbPlatsen

joho68

This WordPress plugin provides security functionality and integration with fail2ban.
It does not require fail2ban to function.
Basic security functionality includes:
<ul>
<li>Disabling login with username (require e-mail address)</li>
<li>Allow/Deny login from IP address, hostname (including wildcard support)</li>
<li>Preventing user enumeration (?author=nnn)</li>
<li>Less detailed error messages on login failures</li>
<li>Minimum username length</li>
<li>Blocking specific usernames from being used to register new users</li>
<li>Requiring e-mail address matching for new user registrations</li>
<li>Warning about new user role setting</li>
<li>Blocking of portions or all of WordPress REST API</li>
<li>Disabling of RSS and Atom feeds</li>
<li>Removal of “Generator” information from HTML and feeds</li>
<li>Detection of Cloudflare IP addresses for logging of actual IP addresses</li>
<li>Blocking/Allowing logins from IP addresses, IP ranges, and/or hostnames</li>
<li>Partially or fully disable XMLRPC access</li>
</ul>
The plugin also plays nicely with Fail2ban, which is an advanced way of blocking IP addresses dynamically upon suspicious behavior.
Other notes:
<ul>
<li>This plugin may work with earlier versions of WordPress</li>
<li>This plugin has been tested with WordPress 5.5+ and 6.x at the time of this writing</li>
<li>This plugin has been tested with PHP 7.4, and 8.1.x at the time of this writing</li>
<li>This plugin optionally makes use of <code>mb_</code> PHP functions</li>
<li>This plugin may create entries in your PHP error log (if active)</li>
<li>This plugin contains no Javascript</li>
<li>This plugin contains no tracking code and does not store any information about users</li>
</ul>
<h3>Credits</h3>
The Fail2WP Plugin was written by Joaquim Homrighausen while converting caffeine into code.
Fail2WP is sponsored by <a href="https://webbplatsen.se" rel="nofollow ugc">WebbPlatsen i Sverige AB</a>, Sweden.
Commercial support and customizations for this plugin is available from WebbPlatsen i Sverige AB in Sweden.
If you find this plugin useful, the author is happy to receive a donation, good review, or just a kind word.
If there is something you feel to be missing from this plugin, or if you have found a problem with the code or a feature, please do not hesitate to reach out to support@webbplatsen.se.
This plugin can also be downloaded from <a href="https://code.webbplatsen.net/wordpress/fail2wp/" rel="nofollow ugc">code.webbplatsen.net</a> and <a href="https://github.com/joho1968/fail2wp" rel="nofollow ugc">GitHub</a>
More detailed documentation is available at <a href="https://code.webbplatsen.net/documentation/fail2wp/" rel="nofollow ugc">code.webbplatsen.net/documentation/fail2wp/</a>
Kudos to <a href="https://github.com/tholu" rel="nofollow ugc">Thomas Lutz</a>.

Fail2WP

Security plugin for WordPress with support for fail2ban. Tested with WordPress 5.5+ and PHP 7.4/8.1.x.

Delower Hossain

MonarchWP

In the age of AI, your valuable website content is a prime target for data crawlers from large tech companies. Bot Traffic Shield is your first line of defense against content theft and unauthorized scraping.
This lightweight yet powerful plugin identifies and blocks a wide range of AI bots and data scrapers before they can access and harvest your content, protecting your intellectual property while reducing unnecessary server load.
<h3>🛡️ Why You Need Bot Traffic Shield</h3>
<ul>
<li>Protect Your Content – Stop AI companies from training their models on your hard work</li>
<li>Reduce Server Load – Block unwanted traffic that wastes your bandwidth and resources</li>
<li>SEO-Safe Blocking – Only blocks harmful bots; legitimate search engines like Google and Bing remain unaffected</li>
<li>Take Control – Decide who can and cannot access your valuable content</li>
</ul>
<h3>✨ Key Features</h3>
Real-Time Bot Blocking 
* Actively blocks bots by their User-Agent on every page request 
* Immediate protection with zero configuration needed
Comprehensive Default Blocklist 
* Pre-configured list of 20+ known AI crawlers and scrapers 
* Includes ChatGPT-User, Google-Extended, GPTBot, CCBot, Bytespider, Amazonbot, Applebot, and more 
* Regularly updated with new bot signatures
Advanced Logging & Analytics 
* Track every blocked bot attempt with detailed logs 
* View bot name, IP address, user agent, and timestamp 
* Pagination system – Browse through logs easily (20 entries per page) 
* Running statistics showing total blocked requests
CSV Export Capability 
* Export your block logs to CSV format 
* Filter exports by date range (7 days, 30 days, or all time) 
* Perfect for analysis, reporting, or compliance
robots.txt Integration 
* Automatically adds <code>Disallow</code> rules to your virtual robots.txt 
* Provides an additional layer of protection for well-behaved bots
Fully Customizable 
* Add your own custom User-Agent strings to block 
* Simple textarea interface – one bot per line 
* Enable/disable logging with a single toggle 
* Master on/off switch for all blocking features
Modern, Intuitive Interface 
* Beautiful, clean admin UI with tabbed navigation 
* Modern toggle switches and card-based design 
* Mobile-responsive admin panel 
* No learning curve – start protecting immediately
Lightweight & Performance-Optimized 
* Minimal impact on site speed 
* Efficient code that runs before page load 
* No external API calls or database queries on frontend
<h3>🎯 Who Is This Plugin For?</h3>
<ul>
<li>Content Creators – Protect your articles, tutorials, and creative work</li>
<li>Bloggers – Keep your unique content from being scraped</li>
<li>News Sites – Prevent unauthorized content aggregation</li>
<li>E-commerce – Protect product descriptions and pricing data</li>
<li>Any WordPress Site – That values their content and server resources</li>
</ul>
<h3>🚀 How It Works</h3>
<ol>
<li>Install and activate the plugin</li>
<li>Bot Traffic Shield immediately starts blocking known bad bots</li>
<li>Monitor blocked attempts in the logs</li>
<li>Add custom bots to block as needed</li>
<li>Export logs for analysis or record-keeping</li>
</ol>
No complicated setup. No API keys. No subscriptions.
<h3>🔒 Privacy & Security</h3>
<ul>
<li>All data stays on your server</li>
<li>No external services or third-party dependencies</li>
<li>GDPR compliant – you control all logged data</li>
<li>Logs can be cleared at any time by disabling logging</li>
</ul>
<h3>📊 Perfect For</h3>
✅ Reducing bandwidth costs 
✅ Protecting original content 
✅ Improving server performance 
✅ Maintaining competitive advantage 
✅ Preventing AI training on your data
Stop letting AI companies profit from your hard work. Install Bot Traffic Shield and take back control of your content today!
<h3>Privacy Policy</h3>
Bot Traffic Shield logs the following information when a bot is blocked (if logging is enabled): 
* User-Agent string 
* IP address 
* Request timestamp 
* Requested URL
All data is stored locally in your WordPress database. No information is sent to external servers. You can disable logging or clear logs at any time from the plugin settings.
<h3>Support</h3>
For support, feature requests, or bug reports: 
* Visit our website: <a href="https://monarchwp.com/" rel="nofollow ugc">https://monarchwp.com/</a> 
* Email: info@monarchwp.com
<h3>Credits</h3>
Developed by <a href="https://monarchwp.com/" rel="nofollow ugc">MonarchWP</a>

Bot Traffic Shield – Block Bad Bots and Stop AI Bots Crawlers

A powerful and user-friendly plugin to block AI crawlers and malicious data scraper bots, protecting your content and server resources.

Fail2WP vs Bot Traffic Shield – Block Bad Bots and Stop AI Bots Crawlers