Linux 软件免费装

在这里免费安装WordPress以及其他软件

JTZL's Bot Maze

开发者 jtzl
更新时间 2026年6月4日 22:24
PHP版本: 8.2 及以上
WordPress版本: 7.0
版权: GPL-2.0-or-later
版权网址: 版权信息

标签

honeypot security anti-scraping bot-protection ai-bot

下载

1.0.1

详情介绍:

JTZL's Bot Maze protects your WordPress site from unwanted AI crawlers and scrapers by planting invisible trap links that only bots will follow. When a bot enters the trap maze, it gets lost in an ever-expanding maze of realistic-looking fake pages while it quietly builds a suspicion score based on its behavior. How it works:
  1. Trap link injection — Invisible links are added to your real pages. Legitimate visitors never see them, but bots following every link on the page will enter the trap maze.
  2. Lazy maze generation — Trap pages link to more trap pages, generated on demand. The deeper a bot goes, the more time it wastes.
  3. Bot scoring — Each trap page visit adds suspicion points. Deeper traversal earns bonus points. Once a threshold is reached, the visitor is flagged as a bot.
  4. Blocking and tarpitting — Flagged bots can be blocked outright (403), served decoy pages (light tarpit), or slowed down with a deliberate delay (full tarpit).
  5. Crawler verification — Known search engine crawlers (Googlebot, Bingbot, etc.) are verified via reverse DNS and exempted from scoring.
Features:

安装:

  1. Upload the jtzl-bot-maze folder to /wp-content/plugins/.
  2. Activate the plugin through the Plugins menu in WordPress.
  3. Go to Settings > Bot Maze to configure trap link injection, scoring thresholds, and blocking behavior.
The plugin works out of the box with sensible defaults. Trap pages are generated automatically on first visit.

常见问题:

Will this affect my SEO?

No. Trap links are hidden from humans using CSS and include rel="nofollow". Trap pages send X-Robots-Tag: noindex, nofollow headers. The plugin also adds Disallow rules to robots.txt for the trap path.

Does it work with caching plugins?

Yes. Trap link injection happens during content rendering, so cached pages will include the trap links. The trap pages themselves are served dynamically and should be excluded from page caching (they use custom query vars that most caching plugins ignore by default).

What happens to legitimate crawlers like Googlebot?

Known search engine crawlers are verified via reverse DNS lookup. Verified crawlers are exempted from bot scoring even if they follow trap links.

Can I customize the trap page content?

Trap pages are generated from a built-in content template engine that produces realistic-looking text. The content varies based on a seed value to ensure each page looks different.

What is the difference between the blocking behaviors?

  • Block (403) — Returns a 403 Forbidden response. Lowest server cost.
  • Light tarpit — Serves a decoy trap page with more trap links. No delay.
  • Full tarpit — Same as light tarpit but adds a 1-second delay, holding the PHP worker longer.

How do I know it's working?

Check the Bot Maze analytics dashboard in the WordPress admin. It shows total trap visits, unique bot IPs, score distribution, and top offenders.

更新日志:

1.0.0-rc.6 1.0.0-rc.5 1.0.0-rc.4 1.0.0-rc.3 1.0.0-rc.2 1.0.0-rc.1 1.0.0-alpha.4 1.0.0-alpha.3 1.0.0-alpha.2 1.0.0-alpha.1