[WordPress] 外掛分享： Webboll Security

內容簡介

Webboll Security 是一款先進的安全外掛，透過行為分析來保護您的 WordPress 網站。它能夠提前識別攻擊者的意圖，並提供多種安全防護功能，確保網站的安全性與穩定性。

【主要功能】
• 自訂登入網址，隱藏 wp-admin 和 wp-login.php
• 自動 IP 封鎖，防止暴力破解
• 行為分析引擎，評估七種攻擊類型
• 兩步驟驗證（2FA）功能
• 活動日誌記錄所有安全事件
• 緊急模式一鍵鎖定網站

外掛標籤

開發者團隊

原文外掛簡介

Webboll Security is an advanced security plugin that protects your WordPress site with a behavior-based approach. Instead of looking at individual requests, it reads attacker intent early by examining the visitor’s sequence of actions.
Free features:

Custom login URLs (hide wp-admin and wp-login.php)
Separate admin and member login gates
Brute-force protection with automatic IP blocking
Threat engine analyzing seven attack types with risk scoring
REST API and XML-RPC protection
Two-factor authentication (2FA) for admin and member logins
Honeypot bot traps
Activity log of all security events
Threat report with 24-hour and 7-day summaries
Bot detection with reverse-DNS verification of legitimate search engine bots
Panic mode for one-click lockdown
Email notifications
Multi-language support (7 languages)

Pro features:

Attack-Time Shield — verification gate for suspicious visitors during active attacks
Geo-Blocking — allow or block access by country
IP Reputation Databases — automatic blocking via AbuseIPDB, Spamhaus and other lists
Malware Scanner — scans files for malicious code using heuristics
File Integrity Monitoring — detects file changes with SHA-256 fingerprinting
Adaptive Learning Pool — learns attack patterns and quarantines new threats
IP Trajectory Analysis — tracks attacker movement across your site
Cloudflare Integration — real IP detection and blocking through Cloudflare
SMS Notifications — instant alerts for critical security events

External services
This plugin can connect to the following third-party services. Each one is optional and is only contacted when you enable and configure the corresponding feature. No data is sent to any of them unless you turn the feature on.
Cloudflare Turnstile (CAPTCHA) — Used to verify that a login/form submission is human when you select Turnstile as your CAPTCHA provider. When a protected form is submitted, the visitor’s Turnstile token and IP address are sent to Cloudflare for verification. The Turnstile script is also loaded on protected pages. Terms: https://www.cloudflare.com/terms/ — Privacy: https://www.cloudflare.com/privacypolicy/
hCaptcha (CAPTCHA) — Used to verify that a submission is human when you select hCaptcha as your CAPTCHA provider. On submission, the visitor’s hCaptcha token, secret key and IP address are sent to hCaptcha for verification, and the hCaptcha script is loaded on protected pages. Terms: https://www.hcaptcha.com/terms — Privacy: https://www.hcaptcha.com/privacy
Google reCAPTCHA (CAPTCHA) — Used to verify that a submission is human when you select reCAPTCHA as your CAPTCHA provider. On submission, the visitor’s reCAPTCHA token and IP address are sent to Google for verification, and the reCAPTCHA script is loaded on protected pages. Terms: https://policies.google.com/terms — Privacy: https://policies.google.com/privacy
ip-api.com (IP geolocation) — Used to look up the country and network information of an IP address shown in the IP management and threat screens. When you request details for an IP (or geo-blocking evaluates a visitor), that IP address is sent to ip-api.com. Terms & Privacy: https://ip-api.com/docs/legal
NetGSM (SMS) — Used to send SMS notifications and one-time codes if you enable SMS and enter your NetGSM credentials. When an SMS is triggered, the destination phone number, message text and your NetGSM credentials are sent to NetGSM. Terms & Privacy: https://www.netgsm.com.tr/sozlesme/
Twilio (SMS) — Alternative SMS provider. If you enable Twilio and enter your credentials, the destination phone number, message text and your Twilio credentials are sent to Twilio when an SMS is triggered. Terms: https://www.twilio.com/en-us/legal/tos — Privacy: https://www.twilio.com/en-us/legal/privacy

延伸相關外掛

Wordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security 是一款專為 WordPress 設計的安全外掛，...Security Optimizer – The All-In-One Protection PluginSecurity Optimizer 是一款全方位的 WordPress 安全外掛，能...Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force PreventionLimit Login Attempts Security 是一款專為 WordPress 設計的...All-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) 是一款功能全面的 WordPress 安...Sucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security 外掛旨在保護您的 WordPress 網站，提供全面...NinjaFirewall (WP Edition) – Advanced Security Plugin and FirewallNinjaFirewall (WP Edition) 是一款先進的網頁應用防火牆，專...MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security FirewallMalCare 是一款專為 WordPress 網站設計的安全外掛，提供即時...Login Lockdown & ProtectionLogin Lockdown & Protection 外掛能夠記錄失敗登入嘗試...Hide My WP Ghost – Security & FirewallWP Ghost 是一款專業的 WordPress 安全解決方案，旨在防止駭...Anti-Malware Security and Brute-Force FirewallAnti-Malware Security and Brute-Force Firewall 外掛旨在保...BBQ Firewall – Fast & Powerful Firewall SecurityBBQ Firewall 是一款輕量級且快速的 WordPress 防火牆外掛，...Defender Security – Malware Scanner, Login Security & FirewallDefender Security 是一款易於設置的企業級安全外掛，能有效...Patchstack – WordPress & Plugins SecurityPatchstack 是一個強大的工具，可幫助您識別所有網站的外掛、...Security Plugin, Firewall & Malware Scanner with Auto Removal這款安全外掛專注於消除 WordPress 最常見的安全威脅，並提供...Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File ScanningShield Security 是一款自動化的安全外掛，能夠有效阻擋威脅...