About this plugin
What ScrapeFence Does for You
🍯 Honeypot Traps
Automatically inserts invisible fake links that only bots can see. When a bot clicks them, it gets trapped in an endless loop of fake pages, wasting its time and resources — your real content stays safe.
⚡ Rate Limiting
Detects when a single IP requests too many pages too fast (a clear sign of scraping) and either locks the IP out or traps it in a honeypot. Real human visitors never hit the limit.
🔑 Brute Force Protection
Watches for repeated failed logins, 404s, and 403 errors from the same IP. When a threshold is reached, the IP is automatically blocked or sent into a trap. Search engine bots are never affected.
⏱️ Cron Attack Defense
php by limiting how often non‑allowlisted IPs can trigger it, preventing server resource drain.
🌐 IP Allowlist & UA Blocklist
Comes preloaded with the IP ranges of Google, Bing, Baidu, Yandex, and other major search engines — they will never be blocked. You can also block known scraper User‑Agents with a simple list.
📡 REST API Protection
Locks down the WordPress REST API for unauthenticated visitors, preventing scrapers from harvesting your posts as raw JSON data.
🛡️ Frontend Protection
Disable right‑click, F12, text selection, and image dragging on the front end. Optionally add a copyright notice that appears whenever someone copies text from your site.
📊 Dashboard & Logs
See today’s blocked requests, total blocks, active traps, and a 7‑day trend chart. Browse a full, searchable log of every blocked IP, complete with status filters and bulk actions.
🧙 Setup Wizard
On activation, a simple 3‑step wizard guides you through adding your own IP to the allowlist, detecting caching plugins, and getting basic protection running in under a minute.
🌍 Fully Bilingual
Speaks your language — automatically switches between English and Chinese based on your WordPress settings.
Why ScrapeFence
- SEO‑safe – Real search engines are pre‑allowlisted. Honeypot pages use noindex. You won’t lose rankings.
- You won’t block yourself – Admins are always exempt, and the setup wizard makes sure your own IP is safe.
- Active trapping, not just blocking – Honeypots actively waste scrapers’ resources, instead of simply saying “no”.
- Lightweight & focused – Does one job and does it well, without slowing down your site.
Looking for even more advanced protection (behavior detection, DNS verification, burst protection)? top.
Privacy Notice
, rate limiting, honeypot traps, brute force attacks). This data is kept only on your server, never sent anywhere else, and is automatically cleaned up after 30 days. You can clear all logs at any time from the Maintenance page.
No cookies are placed on visitors’ browsers.