BotZoom
| 开发者 | wned |
|---|---|
| 更新时间 | 2026年10月1日 07:32 |
| PHP版本: | 7.0 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
.env files, exposed Git folders, old admin tools and weak passwords. BotZoom recognises these bots and blocks them before they find anything.
What the free version does
- Blocks IPs that request files only attackers look for, such as
.env,.git,wp-config.phpbackups and database dumps. - Blocks known scan and attack tools such as sqlmap, Nikto and WPScan.
- Stops brute-force attacks on the login page and XML-RPC.
- Stops bots that hammer your site with requests for pages that do not exist (404 flood).
- Keeps a local log and lets you block or unblock IP addresses yourself.
- Never blocks logged-in users or verified search engines (Google, Bing, Apple, Yandex, DuckDuckGo), so your SEO is safe.
- Everything runs on your own site. Nothing is sent to an external service.
安装:
- Install BotZoom from Plugins > Add New, or upload the plugin folder to
/wp-content/plugins/. - Activate the plugin.
- Click BotZoom in the admin menu to check the settings. The defaults work for most sites.
常见问题:
Can I lock myself out?
No. Logged-in users are never blocked. If you are blocked while logged out, for example after mistyping your password too often, wait until the block expires or ask someone with access to unblock your IP under BotZoom > Blocked IPs. You can also add your own IP address under "Never block".
Does BotZoom block Google?
No. Visitors that claim to be a search engine are verified with a reverse and forward DNS check. Verified crawlers are never blocked.
My site runs behind Cloudflare or another proxy
Set "Visitor IP from" to the header your proxy uses, for example HTTP_CF_CONNECTING_IP for Cloudflare. Only change this if your site really runs behind that proxy, otherwise attackers can fake their IP address.
Does BotZoom protect against DDoS attacks?
No. Protection against DDoS attacks is handled by the firewall of your hosting provider. BotZoom is an extra layer against bots that search your site for leaks and vulnerabilities.
What data does BotZoom store?
For each blocked request: the IP address, time, requested URL and user agent. This data stays in your own database, is used only for security and is deleted automatically after the retention period you set (30 days by default). BotZoom adds a suggested text to your privacy policy under Settings > Privacy.
Is all data removed when I delete the plugin?
Yes. Deleting the plugin removes its database tables and settings.
更新日志:
- First release.