Active installationsNewAdoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records ScraperGuard – AI Scraper Blocker version 1.0.0 as active, updated 7mo ago and tested up to WordPress 6.9.
Overview
About this plugin
ScraperGuard helps you block known AI scrapers (often called “good bots”) by matching their User-Agent string.
You can:
Select specific bots to block, or block all known bots.
Add your own custom User-Agent substrings (one per line).
Block via Apache.htaccess (fast, before WordPress loads) or via WordPress-level blocking (can show basic stats).
Important notes:
This plugin can block “good bots” that identify themselves. It cannot stop “bad bots” that ignore rules and/or spoof User-Agents. For that you may need additional security measures (WAF, rate limiting, bot protection).
htaccess file.
WordPress-level blocking only affects requests that reach WordPress (it won’t block direct hits to static files unless they route through WordPress).
Country blocking (geo blocking) can use a country header (fast) or an IP lookup (works without Cloudflare but is slower).
The settings page is under Tools → ScraperGuard.
External Services
This plugin can optionally connect to third-party IP geolocation services to determine the visitor’s country for country-based blocking. This feature is disabled by default and only activates when you explicitly enable “Country blocking” in the settings.
When country blocking is enabled and the “Country detection method” is set to “Auto” or “IP lookup”:
Service used: The plugin uses either ipwho.is or ipapi.co (configurable in settings)
Data sent: The visitor’s IP address is sent to the selected service
When data is sent: Only when a request is received and no country header is available from your server/proxy
Purpose: To determine the visitor’s country code (ISO-2) for geo-blocking
Caching: Results are cached locally for 24 hours by default (configurable 1-168 hours) to minimize requests
Privacy: IP addresses are sent to external services. Ensure compliance with your privacy policy and local regulations.
is (default provider):
is
is/
is/
* No API key required
co (alternative provider):
co
co/privacy/
co/terms/
* No API key required for basic usage
Important: If you keep the “Country detection method” set to “Header only” (the default), or if you don’t enable country blocking at all, no data is sent to external services.
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
user agent
ai
bots
htaccess
scraper
Compatibility & maintenance
Compatibility & maintenance
Tested up to WordPress 6.9
Not yet marked as tested with WordPress 7.1. WordPress.org currently lists Tested up to 6.9.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to6.9
Minimum requirementsWordPress 5.8 · PHP 7.4
Update activity14 Mar 20267mo ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
No tracked version or compatibility changes have been recorded by WP PlugIndex yet.
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
