Maintenance and compliance release. Blocking still follows the datasets your token grants; reconnect your token from Settings if you have not done so since 1.0.21.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3690553,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3690553,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3690553,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3690553,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.1.6"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3690553,"resolution":"1","location":"assets","locale":"","width":1381,"height":940},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3690553,"resolution":"2","location":"assets","locale":"","width":1381,"height":2359},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3690553,"resolution":"3","location":"assets","locale":"","width":1381,"height":1617},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3690553,"resolution":"4","location":"assets","locale":"","width":1381,"height":1490},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3690553,"resolution":"5","location":"assets","locale":"","width":1381,"height":945},"screenshot-6.png":{"filename":"screenshot-6.png","revision":3690553,"resolution":"6","location":"assets","locale":"","width":1381,"height":942},"screenshot-7.png":{"filename":"screenshot-7.png","revision":3690553,"resolution":"7","location":"assets","locale":"","width":1381,"height":2070}},"screenshots":{"1":"Dashboard \u2014 blocked and blockable traffic charts and the blocker simulator.","2":"Statistics \u2014 total blocked traffic over time and a breakdown by type.","3":"Blockable Traffic \u2014 traffic that was allowed through but matches a dataset you could block, with per-category counters and top-10 tables.","4":"Countries \u2014 block visitors by country, grouped by continent; your own country is always excluded.","5":"Bots \u2014 block well-known crawlers, scanners and attack tools by User-Agent.","6":"Geolocation database \u2014 choose a free IP-to-country provider (DB-IP, MaxMind or IP2Location) and download it locally.","7":"Settings \u2014 master on\/off switches per category, response code, proxy headers, IP whitelist and emergency recovery."}},"plugin_section":[],"plugin_tags":[166108,1174,4124,1192,600],"plugin_category":[49,54],"plugin_contributors":[280145],"plugin_business_model":[],"class_list":["post-354907","plugin","type-plugin","status-publish","hentry","plugin_tags-bot-protection","plugin_tags-firewall","plugin_tags-geolocation","plugin_tags-ip-blocking","plugin_tags-security","plugin_category-maps-and-location","plugin_category-security-and-spam-protection","plugin_contributors-moveforwardltd","plugin_committers-moveforwardltd"],"banners":{"banner":"https:\/\/ps.w.org\/sentraip\/assets\/banner-772x250.png?rev=3690553","banner_2x":"https:\/\/ps.w.org\/sentraip\/assets\/banner-1544x500.png?rev=3690553","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/sentraip\/assets\/icon-128x128.png?rev=3690553","icon_2x":"https:\/\/ps.w.org\/sentraip\/assets\/icon-256x256.png?rev=3690553","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/sentraip\/assets\/screenshot-1.png?rev=3690553","caption":"Dashboard \u2014 blocked and blockable traffic charts and the blocker simulator."},{"src":"https:\/\/ps.w.org\/sentraip\/assets\/screenshot-2.png?rev=3690553","caption":"Statistics \u2014 total blocked traffic over time and a breakdown by type."},{"src":"https:\/\/ps.w.org\/sentraip\/assets\/screenshot-3.png?rev=3690553","caption":"Blockable Traffic \u2014 traffic that was allowed through but matches a dataset you could block, with per-category counters and top-10 tables."},{"src":"https:\/\/ps.w.org\/sentraip\/assets\/screenshot-4.png?rev=3690553","caption":"Countries \u2014 block visitors by country, grouped by continent; your own country is always excluded."},{"src":"https:\/\/ps.w.org\/sentraip\/assets\/screenshot-5.png?rev=3690553","caption":"Bots \u2014 block well-known crawlers, scanners and attack tools by User-Agent."},{"src":"https:\/\/ps.w.org\/sentraip\/assets\/screenshot-6.png?rev=3690553","caption":"Geolocation database \u2014 choose a free IP-to-country provider (DB-IP, MaxMind or IP2Location) and download it locally."},{"src":"https:\/\/ps.w.org\/sentraip\/assets\/screenshot-7.png?rev=3690553","caption":"Settings \u2014 master on\/off switches per category, response code, proxy headers, IP whitelist and emergency recovery."}],"raw_content":"\n
SentraIP filters unwanted visitors before they reach your WordPress application layer. Blocking runs on the WordPress The plugin is free and open source (GPLv2 or later), maintained by Move Forward Limited. It works out of the box and no account and no paid plan is ever required<\/strong> to use it.<\/p>\n\n Additional IP-reputation datasets \u2014 VPN, TOR, PROXY, THREAT and Datacenter blocking, per-provider VPN blocklists, and composed AND\/OR rules \u2014 are available through a separate companion plugin, SentraIP PRO<\/strong>, which connects to a SentraIP account. This free plugin is fully functional on its own and never requires the add-on. See https:\/\/sentraip.com for details.<\/p>\n\n Choose a geolocation provider on the Geolocation<\/strong> page and download the country database (a monthly WordPress cron keeps it fresh). Configure your rules under Countries<\/strong>, Bots<\/strong> and Settings \u2192 Blocking Controls<\/strong>. Every request is then checked locally against the offline database files \u2014 there is no per-request external call.<\/p>\n\n To keep visitor lookups fast and offline, this plugin downloads database files from a few third-party services. Understanding which services are contacted, and what data is sent, is important for your privacy and legal compliance. No external request is made on normal visitor page loads \u2014 only when a database is downloaded or refreshed, and only for the features you opt into.<\/p>\n\n Free SPAM dataset (opt-in, no account required)<\/strong><\/p>\n\n The free version can download a SentraIP SPAM reputation database to block known spam sources. This is entirely opt-in and needs no API token or account.<\/p>\n\n Sharing spam-comment IPs with SentraIP (opt-in, off by default)<\/strong><\/p>\n\n You can optionally let SentraIP collect the IP addresses of comments you mark as spam, to help improve protection for every site using SentraIP.<\/p>\n\n Geolocation database providers (opt-in)<\/strong><\/p>\n\n Country blocking needs an IP geolocation database, which you download from one free third-party provider that you choose on the SentraIP \u2192 Geolocation<\/strong> page. No provider is selected by default and no geolocation download happens until you explicitly opt in by choosing one. Once a provider is configured, its database is also refreshed automatically once a month by a WordPress cron job. The database is queried locally on your server; no visitor data is sent to these providers at request time.<\/p>\n\n See the attribution notes below for the data licences of each provider.<\/p>\n\n Depending on the geolocation provider you choose, this product includes data that requires attribution:<\/p>\n\n The bundled MaxMind DB reader library is distributed under the Apache License 2.0.<\/p>\n\n The admin charts are drawn by a small self-contained SVG renderer bundled with the plugin (admin\/js\/wp-sentraip-charts.js) \u2014 no third-party JavaScript charting library is used.<\/p>\n\n\n Manual installation: extract the Requirements: PHP 7.4+ and WordPress 6.8+. IP lookups use the MaxMind DB reader, which is bundled with the plugin.<\/p>\n\n\n The plugin is free and open source (GPLv2 or later) and fully functional on its own. Country blocking, bot blocking (with a large built-in list), automatic spam-comment IP blocking, the IP whitelist and the opt-in free SPAM reputation dataset all work with no account at all<\/strong>. Additional IP-reputation datasets (VPN, TOR, PROXY, THREAT, Datacenter and composed rules) are available through the separate SentraIP PRO<\/strong> companion plugin, which connects to a SentraIP account \u2014 but this free plugin never requires it.<\/p><\/dd>\n No. The plugin auto-excludes your server's country and your saved admin country. The WordPress admin area, the login page ( The plugin gracefully skips any check whose database file is missing. Your site keeps working normally until the files are available.<\/p><\/dd>\n No. All IP lookups run against local binary database files in your uploads directory. External connections are made only when downloading or refreshing a database file (on a monthly schedule, or when you trigger it manually) \u2014 the geolocation database, or the opt-in free SPAM dataset.<\/p><\/dd>\n In Yes. The plugin detects whether the visitor's IP is IPv4 or IPv6 and uses the matching database file, when that version is available for the dataset.<\/p><\/dd>\n When a comment is marked as spam, the commenter's IP is recorded and blocked for 24 hours. This works entirely locally, with no external data or account.<\/p><\/dd>\n Open init<\/code> hook, before your theme and most plugins load, and every lookup is performed locally against offline MMDB database files in your uploads directory \u2014 so no external request is made on normal page loads.<\/p>\n\nWhat it blocks<\/h4>\n\n
\n
\/wp-admin<\/code>), \/wp-login.php<\/code> and \/wp-register.php<\/code> are never blocked, logged-in users are never blocked, and an emergency kill switch (WP_SENTRAIP_DISABLE_BLOCKING<\/code>) can disable all blocking from wp-config.php<\/code>.<\/li>\n.htaccess<\/code> and index.php<\/code>.<\/li>\n<\/ul>\n\nAdvanced datasets (optional add-on)<\/h4>\n\n
How it works<\/h4>\n\n
External services<\/h3>\n\n
\n
app.sentraip.com<\/code>), and signs each download request; the private key never leaves your server. No visitor IP address or personal data is sent.<\/li>\n\n
\n
download.db-ip.com<\/code>. No credential is sent. Terms: https:\/\/db-ip.com\/tos.php<\/li>\ndownload.maxmind.com<\/code>; your MaxMind license key is sent to authenticate the download. Privacy: https:\/\/www.maxmind.com\/en\/privacy-policy<\/li>\nwww.ip2location.com<\/code>; your IP2Location download token is sent to authenticate the download. Terms: https:\/\/www.ip2location.com\/terms<\/li>\n<\/ul>\n\nAttributions<\/h3>\n\n
\n
\n
sentraip.zip<\/code> file and click Install Now<\/strong>, then Activate<\/strong>.<\/li>\nsentraip<\/code> folder into \/wp-content\/plugins\/<\/code> and activate it from the Plugins<\/strong> menu.<\/p>\n\n\n
Is the plugin free? Do I need an account?<\/h3><\/dt>\n
Will this block my own access?<\/h3><\/dt>\n
\/wp-login.php<\/code>) and the registration page are never blocked, and logged-in users are never blocked \u2014 so you can always sign in and fix a rule. As a last resort you can add define( 'WP_SENTRAIP_DISABLE_BLOCKING', true );<\/code> to wp-config.php<\/code> to disable all blocking.<\/p><\/dd>\nWhat happens if the database files are not downloaded yet?<\/h3><\/dt>\n
Does the plugin make external requests on every page load?<\/h3><\/dt>\n
Where are the database files stored?<\/h3><\/dt>\n
wp-content\/uploads\/wp-sentraip\/<\/code>. The directory is protected by a .htaccess<\/code> (Deny from all<\/code>) and an index.php<\/code> to prevent direct web access.<\/p><\/dd>\nDoes it support IPv6?<\/h3><\/dt>\n
What is the spam comment IP blocking?<\/h3><\/dt>\n
How do I recover if a rule locks me out?<\/h3><\/dt>\n
\/wp-login.php<\/code> and sign in \u2014 login and \/wp-admin<\/code> are never blocked. Then edit the rule that caught you and remove your country\/datacenter\/IP. If you cannot reach the admin at all, add define( 'WP_SENTRAIP_DISABLE_BLOCKING', true );<\/code> to wp-config.php<\/code>.<\/p><\/dd>\n\n<\/dl>\n\n\n1.1.6<\/h4>\n\n
\n
1.1.4<\/h4>\n\n
\n
1.1.3<\/h4>\n\n
\n
1.1.2<\/h4>\n\n
\n
1.1.1<\/h4>\n\n
\n
1.1.0<\/h4>\n\n
\n
1.0.25<\/h4>\n\n
\n
<script><\/code> (Ultra rules data) to wp_add_inline_script().<\/li>\n1.0.24<\/h4>\n\n
\n
1.0.23<\/h4>\n\n
\n
full<\/code> dataset (fields vpn_provider \/ organization), while the light<\/code> file used for blocking carries just a membership flag. The plugin now downloads the full<\/code> v4 file for VPN and Datacenter and enumerates names from it (IPv4 only).<\/li>\n<\/ul>\n\n1.0.22<\/h4>\n\n
\n
1.0.21<\/h4>\n\n
\n
ip_versions<\/code>) and only fetches files that exist.<\/li>\n\/wp-admin<\/code>, \/wp-login.php<\/code> and \/wp-register.php<\/code> are never blocked, even when your IP is in a blocklist; the site frontend stays protected.<\/li>\n1.0.9<\/h4>\n\n
\n
1.0.2<\/h4>\n\n
\n
1.0.0<\/h4>\n\n
\n