Observed arrival · 2026-09-26
SM Bot Flagger: WordPress logs for bots that bluff
A WordPress plugin that logs requests and classifies visitors as people, crawlers, cache activity, or malicious traffic.
- For
- WordPress site operators investigating bot traffic
- Worth noticing
- Path requests outrank claimed user-agent labels; the page says roughly 200 editable rules cover crawlers, cache warmers, scanners, and credential probes.
Field notes
Its classifier treats the requested path as stronger evidence than a claimed user-agent, then folds in behavioral signals such as random-path scans, repeated login attempts, and 404 volume. The page describes about 200 editable rules and seven categories, with corrections propagating to earlier requests. It also says addresses are masked by default, daily salted hashes avoid cross-day tracking, secrets are redacted, and visitor data stays on the site's server.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue