Linux 软件免费装

在这里免费安装WordPress以及其他软件

Anonympins Bot Mitigation with Proof-of-Work

开发者 anonympins
更新时间 2026年10月15日 13:51
PHP版本: 8.0 及以上
WordPress版本: 7.1
版权: MIT
版权网址: 版权信息

标签

security firewall bot protection proof of work anti scraping

下载

0.8.5

详情介绍:

Anonympins Bot Mitigation with Proof-of-Work is a high-performance, privacy-friendly bot mitigation engine for WordPress. It combines behavioral telemetry, TLS/HTTP2/QUIC transport inspection (JA3, JA4), passive TCP/IP stack analysis, and asynchronous Proof-of-Work (PoW) verification. Features

安装:

  1. Upload the plugin files to the /wp-content/plugins/anonympins-bot-mitigation-pow directory, or install the plugin through the WordPress plugins screen directly.
  2. Activate the plugin through the 'Plugins' screen in WordPress.
  3. Navigate to Settings -> Anonympins Bot Mitigation to review security profiles, threshold adjustments, and Prometheus metrics.

常见问题:

Does this plugin require an external cloud service?

No. All evaluations, challenges, and validations occur directly on your WordPress server and client browser.

Is HTTPS required?

HTTPS is strongly recommended. Under unencrypted HTTP, modern browsers disable the Web Cryptography API (crypto.subtle), which reduces challenge verification performance.

How do I scrape the Prometheus metrics endpoint?

Metrics can be accessed in standard Prometheus text exposition format via:

  1. The REST API endpoint: GET /wp-json/fingerprint/v1/metrics (Requires manage_options permission or a custom authorization callback hooked into the fingerprint_metrics_access filter).
  2. Direct path endpoint: GET /metrics (Evaluated in early execution lifecycle; filterable with fingerprint_metrics_authorization).
  3. The admin dashboard: Settings -> Anonympins Bot Mitigation -> Prometheus Stream.

How can I monitor incoming request suspicion scores in real time?

Under Settings -> Anonympins Bot Mitigation -> Sandbox / Test Mode, the plugin provides real-time observability interfaces for all challenged visitors across the website:

  1. Server-Sent Events (SSE): GET /wp-json/fingerprint/v1/sandbox/sse Streams timestamped telemetry objects containing id, timestamp, ip, uri, action, suspicionScore, and suspicionVector for every challenged visitor.
  2. REST Telemetry Polling: GET /wp-json/fingerprint/v1/sandbox/telemetry Returns the latest list and evaluated challenge payloads across all visitors in JSON format.
  3. Client-side JavaScript event: Every page emits a DOM CustomEvent('fingerprint:suspicion') and sets window.__FINGERPRINT_VECTOR__ when Sandbox mode is active or when an administrator is authenticated.