01 · Operator
Who operates WebDataStats
- Company
- WebDataStats
- Type
- Other bot
- Official docs
- webdatastats.com
02 · Behavior
What WebDataStats does
The bot reads a site's HTML and checks CSS and JavaScript files for CMS signatures. Its policy page says it does not probe for vulnerabilities, send POST requests or attempt logins. It publishes no IP list and does not mention robots.txt.
03 · Impact
Why WebDataStats matters for your site
If you allow it
- Requests are limited to reading public pages and assets
- Contributes to public CMS usage statistics
If you block it
- Brings no traffic or visibility to your site
- No documented robots.txt support or IP list
04 · Allow
How to allow WebDataStats
robots.txt
User-agent: WebDataStats
Allow: /Cloudflare
# Security › WAF › Custom rules › Create rule
Expression: (http.user_agent contains "WebDataStats")
Action: Skip › All Super Bot Fight Mode rules
# Also check Security › Bots: "Block AI bots" can block it regardless of robots.txt.WordPress
# WordPress serves a virtual robots.txt. Edit it with your SEO plugin:
# Yoast: SEO › Tools › File editor · Rank Math: General Settings › Edit robots.txt
User-agent: WebDataStats
Allow: /nginx
# nginx serves every user agent by default.
# Make sure no rule like this blocks it:
# if ($http_user_agent ~* "WebDataStats") { return 403; }Apache
# Apache serves every user agent by default.
# Make sure .htaccess has no rule like this:
# RewriteCond %{HTTP_USER_AGENT} WebDataStats [NC]
# RewriteRule .* - [F,L]05 · Block
How to block WebDataStats
Start with robots.txt. If WebDataStats keeps showing up in your logs, block it at your CDN or web server.
robots.txt
User-agent: WebDataStats
Disallow: /Cloudflare
# Security › WAF › Custom rules › Create rule
Expression: (http.user_agent contains "WebDataStats")
Action: BlockWordPress
# WordPress serves a virtual robots.txt. Edit it with your SEO plugin:
# Yoast: SEO › Tools › File editor · Rank Math: General Settings › Edit robots.txt
User-agent: WebDataStats
Disallow: /nginx
# In your server { } block:
if ($http_user_agent ~* "WebDataStats") {
return 403;
}Apache
# .htaccess
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} WebDataStats [NC]
RewriteRule .* - [F,L]
</IfModule>06 · User agents
User agents we see for WebDataStats
The user agent published by the operator:
Mozilla/5.0 (compatible; WebDataStats/1.0 ; +https://webdatastats.com/policy.html)07 · Verification
Is it really WebDataStats?
WebDataStats’s operator publishes no IP ranges or hostnames, so requests cannot be verified. Treat the user agent as a claim, and watch your logs for unusual request rates.
FAQ
Questions about WebDataStats
What is WebDataStats bot?
It is a crawler from webdatastats.com that detects the CMS a website uses. The results feed CMS popularity statistics.
Is WebDataStats bot a security scanner?
Its policy page says it does not look for vulnerabilities, submit forms or try to log in. It only reads HTML, CSS and JavaScript.
How do I block WebDataStats?
Robots.txt support is not documented, so blocking the user agent token WebDataStats at the server or firewall is the reliable option.
Last reviewed Oct 8, 2026