內容簡介
STOP BAD BOTS
★★★★★
Stop Bad Bots，防止 DNS Cloud 或 API（EndPoint）流量重定向且不使網站變慢，即可阻止壞機器人、垃圾郵件機器人、Crawlers 和 spiders。不會有 Google 懲罰。支援多語言，還包括荷蘭語、法語、德語、義大利語和葡萄牙語語言文件。
.
Italian: Blocca bot dannosi, bot SPAM, crawler e spider senza DNS Cloud o reindirizzamento del traffico API（EndPoint），且不會使你的網站變慢。不會有 Google 的懲罰。譯成義大利文。
.
Português: Bloqueia Bots、SPAM bots、Crawlers 和 spiders，不使用DNS Cloud 或 API（EndPoint）重定向流量，也不會使你的網站變慢。不會有 Google 的懲罰。譯成葡萄牙文。
壞機器人會消耗頻寬、在評論和聯繫表格中放置垃圾郵件、減慢和超載你的服務器，還可能攻擊你的服務器，竊取你的內容，並尋找漏洞來破壞你的服務器。
Stop Bad Bots 是完全自包含的，無需連接到任何外部API或服務。沒有DNS、API或Cloud Traffic重定向。不會使網站變慢！
不需要建立 robots.txt 或更改你的 .htaccess 文件。
當壞機器人嘗試打開你的WordPress頁面時，我們會顯示403 Forbidden頁面。然後，在你的統計報告中，例如webalizer或訪客統計數據，你可以看到狀態403（禁止）和 0 位元組。有關詳細信息，請訪問我們的在線指南和FAQ頁面。
你不需要創建 robots.txt 或更改你的 .htaccess 文件。
不使用 WordPress 嗎？請查看免費版的StopBadBots（也有Docker）
壞機器人表會定期免費在線更新
付費選項有防火牆保護。
付費選項有每週從我們的服務器自動更新表，而不是免費版每3年更新一次。
也包括壞機器人IP表。該插件還可以通過使用假或空白用戶代理阻止蝙蝠機器人。
還包括Reference/Referral spam表。
還包括帶有白名單按鈕的訪問日誌。
反黑客：還可防止黑客攻擊（具有免費的反黑客插件擴展）
反垃圾郵件：還可保護來自壞機器人的評論表單
反垃圾郵件：還可保護來自壞機器人的聯繫表單7和WP表單插件
保護登錄表單免受機器人和暴力攻擊
防止數據竊賊竊取你
壞機器人列表
超過4800個機器人，8400個壞的引薦者和3300個壞的IP地址！
可以添加更多...
**不使用 DNS 或 Cloud Traffic Redirection。不会使网站变慢！没有因网站变慢而被 Google 惩罚。**
阻止用戶枚舉
阻止 PingBack 请求
限制機器人訪問（速率限制）（付費版）
白名單表（付費版）
阻止HTTP工具表（付費版）
**該插件不會阻止主要Google、Yahoo和Bing（Microsoft）機器人。**
容易管理列表。你可以添加更多的機器人、IP和推薦方，或停用任何機器人
節省帶寬。
可選地接收電子郵件警報
阻止虛假的 Google/Microsoft（假 Google Bot）機器人（付費版）
阻止ahrefs
阻止semrush
防止Spider
演示影片
有付費版可用
在線文檔
外掛標籤
開發者團隊
② 後台搜尋「Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection」→ 直接安裝（推薦）
📦 歷史版本下載
原文外掛簡介
STOP BAD BOTS
★★★★★
🚀 In a Hurry? See the Essentials and Get Protected in Less than 2 Minutes.
What it does:
Protects your WordPress site from bad bots, crawlers, spam, and malicious traffic. It also prevents server overload and safeguards your SEO (avoid delay in loading the page and it doesn’t allow content theft, preventing duplications of your content).
Why it matters:
Roughly 30% of all internet traffic is from bots, and 2.5% is malicious (data theft, brute-force attacks, slowing down sites). According to Cloudflare, that’s nearly 2 million attacks every second.
Main Protections:
* Blocks bad bots, fake Google/Microsoft bots, scrapers, and spammers.
* No DNS, Cloud, or external API required → The plugin is self-contained, fast, and lightweight.
* **Doesn’t block legitimate bots from Google, Bing, Yahoo, Twitter, or Facebook.
Features:
* Quick Start: Install in under 2 minutes (smart installer). Just a few clicks and your site is protected.
* Visits Log: See who’s visiting your site.
* Real-time Analytics: Get detailed insights, with traffic neatly separated into bots and humans.
* Attack Charts: Visualize blocked threats with daily charts showing the number of blocks by type.
* Instant Support: Get 24/7 AI-powered support (included in the free version).
* Intuitive Dashboard: A clear, user-friendly interface to manage your security.
* Languages: Available in Dutch, French, German, Italian, Spanish, and Portuguese.
🔎 Want All the Details? Read the Full Explanation Below
Bad Bots: A Growing Danger
Can you imagine the sheer volume of data crossing the internet every second? It’s truly monstrous, isn’t it? Millions of interactions, searches, and transactions…
Well, brace yourself for a staggering statistic: according to Cloudflare, the online security giant, about one-third (approximately 30-33%) of all this global traffic is generated by bots – that is, by computer programs, not humans.
And even more alarming: from this immense volume of bot traffic, Cloudflare identified that 8.6% have malicious purposes (Q1 2024 data). This means that approximately 2.5% of ALL internet traffic consists of malicious bots constantly active, searching for loopholes, stealing data, or trying to take down sites! That’s nearly 2 million attacks every second sweeping across the web.
But the news doesn’t stop there: this malicious bot activity is constantly evolving and increasing. A key reason for this alarming trend is that: Artificial Intelligence (AI) is empowering even less-skilled attackers to create bots to steal information, while ready-made attack kits are sold on the dark web, amplifying both the volume and sophistication of threats.
Furthermore, the emergence of many new Artificial Intelligence websites means they now deploy their own bots for web crawling and data gathering, contributing significantly to overall bot traffic.
Bots can have a negative impact on your website in a number of ways. They can overload your server, which can cause performance problems such as slowness and longer response times. They can also look for vulnerabilities in your website and steal your content, which can damage your SEO.
Amplify Your Server’s Defenses! Optional. When StopBadBots blocks a threat, it automatically sets up Fail2Ban to intercept and block that IP on all future attempts before they even reach your WordPress site. So, if you manage your own VPS, Cloud, or Dedicated server with Fail2Ban installed, this is a game-changer!
Optional Fail to ban Monitor with GUI: The SBB Fail2Ban Monitor brings your server’s powerful Fail2Ban protection into a clear, visual WordPress dashboard – the user-friendly GUI many have been waiting for!
Currently, you can track key Fail2ban details like the offending IP, when the last attempt occurred, the specific Security Rule (jail) triggered, the number of attempts, and how long the ban lasts. This is your first step towards richer insights like daily totals, activity graphs, and more detailed ban reasons.
Stop Bad Bots, SPAM bots, Crawlers and spiders without DNS Cloud or API (EndPoint) Traffic Redirection and without slow down your site. No google penalties. Multilanguage ready. Included also Dutch, French, Germany, Italian, Spanish and Portuguese language files.
Get Stop Bad Bots protecting your site in moments!
Our easy installer handles everything, configuring essential settings so your site is secured instantly. Even first-time users can launch their protection with just a few clicks.
Introducing our new comprehensive visits log page with Ajax-powered traffic monitoring. Analyze and dive deep into the visits your website receives, including hack attempts. And yes, you will know when Googlebot visits you (googlebot, big, Twitter, Facebook and other bots). Take full control by effortlessly adding visitors to the blacklist or whitelist with a single click when needed.
New Feature: Our plugin now offers a comprehensive set of analytics tools, providing insightful data on your website’s performance. With daily and monthly visit counts, referral sources, page visit metrics, and visitor engagement statistics, you gain a clear understanding of your site’s traffic patterns and user behavior. Additionally, interactive charts and summaries highlight the reasons behind blocked attempts, empowering you with actionable insights. Explore our analytics suite to track human visitors and distinguish them from bots, providing a holistic view of your website’s performance and ensuring an accurate assessment of its impact.
With the exponential increase of AI tools, expect the increase of sophisticated bot attacks. Protect your site from advanced bots and AI-powered attacks with our comprehensive bot protection solution.
Stop Bad Bots is completely self-contained and does not need to connect to any outside API or service. No DNS, API or Cloud Traffic Redirection. No Slow Down Your Site!
No .htaccess neither robots.txt required.
When a bad bot try to open any your WordPress page we show a 403 Forbidden page. Then, in your statistics like webalizer or visitor metrics, for example, you can see status 403 (forbidden) and 0 bytes. For more details, visit our online guide and FAQ page.
You don’t need create robots.txt neither touch your .htaccess file.
Easily integrated with our anti hacker plugin to add an extra layer of protection and prevent also hacker bots. You can find more details about Anti Hacker below.
Not using WordPress? Check out the free standalone PHP version of StopBadBots (also Docker)
Your Bad Bots Table is updated with periodic free online automatic updates
Premium Option with Firewall protection.
Premium Option with weekly automatic table updates from our server instead 3x year in free version.
Included also Bad Bots IP Table. The plugin can block also the bat bots by IP using fake or blank User Agent.
Included also Bad Bots Referer/Referral spam Table. More than 8.400 bad bots included
Included also Visits Log with Whitelist and Blacklist Buttons
Anti Hacker: Protect also Against Hacker Attacks (with free Anti Hacker Plugin extension)
Anti Spam: Protect also Comments Form from bad bots
Anti Spam: Protect also Contact Form 7 and WP Form Plugins from bad bots
Protect Login Form Against Bots and Brute force Attacks
Stop Data Thieves From Stealing You and harm your SEO
list of bad bots
More than 4800 Bots, 8400 bad referer/referral and 3300 bad IPs Included!
You Can Add more …
**No DNS or Cloud Traffic Redirection. No Slow Down Your Site! No Google penalties for slow sites.**
Block User Enumeration
Block PingBack Request
Limit Bot Visits (Rate Limiting) (Premium)
Whitelist Table (Premium)
Block HTTP tools table (Premium)
**The Plugin doesn’t block main Google, Yahoo and Bing (Microsoft), twitter and Facebook bots.**
Easy to manage the list. You can add more bots, IPs and referrer or deactivate any bot
Save bandwidth.
Optionally receive an email alert
Block False Google/Microsoft (Fake Google Bot) Bots (Premium Version)
Block ahrefs bot
Block semrush bot
Block Screaming Frog
Block Moz
Block IA powered bots
Spider blocker
Supercharge and update Your ModSecurity Comodo WAF 2025 with Free StopBadBots Custom Rules
Optional.
Learn More…
Get Real: Unleash the Power of Bot-Free Visitor Analytics:
Demo Video
Demo Video Ajax-powered Traffic Monitoring
Online Documentation
Fail2Ban Automatic Integration
StartUp Guide
FAQ Page
Plugin Site
Compatible With Anti Hacker Plugin
Check Page Load Time (speed test website)
This plugin allows you to monitor the average load time for each page (page speed test) on your site, generate a chart showcasing the load times for the past 7 days, and identify the 20 slowest-loading pages.
wpTools free plugin
reCAPTCHA V3 (and Turnstile Cloudflare) for all pages of your site
If you want protect ALL pages of yoursite with invisible reCAPTCHA or Turnstile Cloudflare, try this new free plugin:
reCAPTCHA For All free plugin
Block spammers, hackers, crawlers, spiders and malicious traffic.
Block visitors from China, Cuba and North Korea
If you are getting a lot of spam and malicious traffic from China, Cuba and North Korea, with our plugin
you can block them without worry about install (and mantain) huge databases of IP address.
Just let our plugin take care that (Premium).
Optional Fail2ban integration with GUI
Please ensure Fail2Ban is installed and operational on your server, VPS or Cloud VPS for this monitor to function. Our support doesn’t include the installation or configuration of Fail2Ban on your server.All Fail2ban features are available only in our Pro (or premium) version.
Ban spammers, crawlers, spiders, hackers and bad behavior
This plugin let you ban users by IP, user agent and referrer url.
Anti Hacker Protection
If you want protect ALL pages of yoursite against hackers and their bots, try this free plugin:
Anti Hacker free plugin
We recommend and facilitate the installation of this free plugin, with just one click, on our plugin dashboard, visible immediately after installing Stop Bad Bots.
Prevent unauthorized access to your account by protect your login page also against bots and brute force.
Firewall to Block Malicious Requests, Queries, User Agents and URLS. 100% Plug-n-play, no configuration required.
View Table of the Blocked Visits and add IP to Whitelist from table and logs failed login attempts.
Option to disable Json WordPress Rest API (also new WordPress 4.7 Rest API) or disable WordPress Rest API (disable WordPress API)
You can also disable the WordPress xml-rpc (xmlrpc) (or disable only Pingback) API with just one click.
WordPress Debug enabled warning.
Disable file editing within the WordPress dashboard.
Replace insecure login error message.
Hide WordPress version number.
Disable Application Passwords: Block external applications to request permission to connect to a site and generate a password (WordPress 5.6 new feature)
Limit Visits, Limit Bots Attempts (Premium Version)
limit only 404 requests (Premium Version)
Check Google Safe Browsing Blacklist
Multilingual ready.
Disable WordPress native sitemap (for user’s) creation.
Disable xml-rpc
Disable Pingback
Malware Scanner
Security Malware scanner (one click scan) for 797 malwares also in free version (unlimited files).
Scans every folder and inspects every file on a website (deep scanner) for traces of malware, exploits, trojans, worms, viruses, backdoors as well as JavaScript code obfuscation, exploits, malicious iframes, malicious code injection, malicious code obfuscation, auto-generated malicious content, redirects, hidden eval code and more.
Scan all Pages, Posts and Comments against malwares.
Alert for plugins and themes without updates for long time or with old versions.
Scan your site now before Google blacklists it or your web host takes it down.
Block
User enumeration. (is one of the most popular attacks to identify the valid user names)
Comments in media page.
Bad Queries.* Block All Feeds (Optional).
Creation of new Administrators from plugins and themes with vulnerabilities.
Fake Google and Bing (MSN) bots (Premium Version)
Search for Theme’s vulnerabilities (Premium Version)
Search for Plugin’s vulnerabilities (Premium Version)
Tor (The Onion Router) Traffic – Optional – (Premium Version) Tor anonymity provides value to online attackers.
HTTP Tools (you can manage the strings)
Blank User Agent
Spider (Spider Block)
AI Crawl
LLM Bot
User Agent
Scraper
Indexing Bot
AI Traffic
Health Check
Content Harvester
Referral
Generative Bot
Analytics Spam Referrals
This plugin is not about Analytics Spam referrals.
For more details about that, please, visit our FAQ page:
http://stopbadbots.com/faq/
and look for Analytics SPAM referral
Free plugins from the same author:
WordPress Memory Management
Anti Hacker and Security
WordPress Tools
Stop == Changelog.txt
The changelog.txt contains changelog entries, so we can keep the size of the standard WordPress readme.txt file reasonable.
External service (1)
If the settings is “Standard or Maximum Block”, we can test some visitors Ip
from the RIPE database. We send only the IP number of your visitor.
The RIPE will provide information about your visitor’s IP that will allow us to identify their hosting.
This is free. Ripe is a not-for-profit association.
RIPE NCC Privacy Statement:
https://www.ripe.net/about-us/legal/ripe-ncc-privacy-statement
domain: https://rdap.db.ripe.net/ip/
External service (2)
If the ‘Receive bot’s table updates by participating in the Real-Time Bad Bots Security Network’
option in the StopBadBots plugin settings is enabled, your site can share information about bots with StopBadBots.
In return, your site will receive bot’s table updates.
The collected data includes: bot ip, bot user agent, time
Domain: https://stopbadbots.com/api/httpapi.php
We will update our database with bot information and release it to you by updating your database every 4 months.
This plugin is a service. If you choose the premium version, your site will receive weekly updates for tables.
Only in this case, when applying your purchase code, it will be sent to our server, which will return whether it is valid.
External service (3)
When using our chat, only some information about issues, such as your language and data from the Diagnose tab, may be sent to our server. We do not share, publish, or disclose any information with third parties.
domain: https://BillMinozzi.com/chat/api/api.php
External service (4)
The Stop Bad Bots plugin will retrieve tips and news from BillMinozzi.com. This information will be displayed in the plugin dashboard, under the title “Tips and News.” No data is sent to our server. Learn about the terms of use for our plugins and themes at this link:
https://siterightaway.net/terms-of-use-of-our-plugins-and-themes/
domain: https://billminozzi.com/API/bill-api.php
Advanced Site Health
WordPress’s built-in Site Health feature provides a great baseline for your site’s well-being. However, in today’s digital landscape, true “health” goes beyond server configuration. A site can have a perfect score and still be slow, vulnerable, or plagued by critical errors.
Our plugin extends the core Site Health concept to provide a truly holistic analysis of what keeps your site fast, stable, and secure. We don’t just check the basics; we diagnose critical issues that directly impact your visitors’ experience and your site’s operational integrity.
Our enhanced checks include:Performance & Memory Analysis, Proactive Error Detection, Modern Security Monitoring.
That involves querying public, authoritative services like rdap.db.ripe.net with visitor IP addresses for security analysis.
domain: https://rdap.db.ripe.net/ip/
and
domain: https://BillMinozzi.com/API/api.php
info send: Domain, plugin and WordPress version, status (string) 98.
For a complete overview of all features, our data handling practices, and the full terms governing our software, please visit our official website:
https://siterightaway.net/terms-of-use-of-our-plugins-and-themes/
To learn more details and look the bots table, visit the plugin site.
