sourcecode347

The Anti Browser DDoS Protection plugin provides robust protection against denial-of-service (DoS) attacks on your WordPress site. It implements IP-based rate limiting, with configurable settings for subscribers, non-logged-in users, and verified bots, while excluding administrators and other non-subscriber roles. It features advanced bot detection to identify and limit suspicious bots, immediate blocking of malicious bots by User Agent, and supports Cloudflare for accurate client IP detection. Static assets (e.g., CSS, JS, images) are excluded to maintain site performance. An intuitive admin panel allows you to configure rate limits, bot exclusions, trusted bot IP ranges (with automatic duplicate removal), blocked bots by User Agent, log expiration settings, and view logs for blocked IPs, banned IPs, and high traffic bots with auto-refresh every 30 seconds, all with User Agent details and timestamps. You can export Excluded Bots, Bot IP Ranges, and Blocked Bots lists to .txt files and import new entries to append to existing lists without duplicates. Daily bar charts for Blocked IPs, Banned IPs, and High Traffic Bots are displayed above the logs for quick visual insights.
Key Features:
<ul>
<li>Rate limiting based on IP for subscribers and non-logged-in users, with configurable maximum requests and time window.</li>
<li>Excludes non-subscriber logged-in users (e.g., administrators, editors) from rate limiting.</li>
<li>Advanced bot detection to identify suspicious bots (bots using trusted User Agents but from unverified IPs).</li>
<li>Suspicious bots are subject to the same rate limiting as regular users and logged with User Agent in the Blocked IPs Log.</li>
<li>Immediate blocking of malicious bots by User Agent (e.g., MJ12bot, SemrushBot, DotBot by default) with customizable settings and logging.</li>
<li>Configurable rate limiting for verified excluded bots (default: 100 requests per minute), with logging for bots exceeding this limit.</li>
<li>High Traffic Excluded Bots Log to track verified bots with excessive requests, including IP, User Agent, and timestamp.</li>
<li>Admin panel to configure maximum requests, time window, excluded bots, trusted bot IP ranges, blocked bots (User Agents), blocks before ban, ban duration, high traffic bot limits, and log expiration (days).</li>
<li>Export Excluded Bots, Bot IP Ranges, and Blocked Bots lists to .txt files for backup or transfer.</li>
<li>Import .txt files for Excluded Bots, Bot IP Ranges, and Blocked Bots to append new entries to existing lists, with automatic duplicate removal.</li>
<li>Automatic removal of duplicate IP ranges in the Bot IP Ranges field on save, keeping the first occurrence.</li>
<li>Support for Cloudflare real IP detection using <code>CF-Connecting-IP</code> and <code>X-Forwarded-For</code> headers.</li>
<li>Excludes static assets (CSS, JS, images, fonts, etc.) from rate limiting to optimize performance.</li>
<li>Logs blocked IPs, banned IPs, and high traffic bots with IP, User Agent, and timestamps using the WordPress timezone, viewable in the admin panel with options to clear logs and auto-refresh every 30 seconds.</li>
<li>Daily bar charts for Blocked IPs, Banned IPs, and High Traffic Bots displayed above the logs in the admin panel for visual statistics.</li>
<li>Automatic log expiration (Blocked IPs, Banned IPs, High Traffic Bots) after a configurable number of days (default: 5 days), with hourly cleanup via WordPress Scheduler.</li>
<li>All error messages and logs prefixed with “Anti Browser DDoS Protection: ” for clarity.</li>
<li>Donate link in the admin panel to support the project.</li>
<li>Automatic cleanup of transients, blocked IPs, banned IPs, high traffic bots, blocked bots, bot IP ranges, and log expiration settings on plugin deactivation to prevent database bloat.</li>
</ul>
Ideal for WordPress sites seeking enhanced security against automated attacks, with seamless integration for Cloudflare users, advanced bot management, efficient log management, visual charts for statistics, and easy export/import for bot lists.
<h3>Plugin Assets img/</h3>
<h3>Icon Image</h3>
Normal: icon-128×128.png 
High-DPI (Retina): icon-256×256.png
<h3>Bugs</h3>
Caching plugins such as WP Super Cache, W3 Total Cache, and others may bypass the DDoS protection provided by Anti Browser DDoS Protection, serving cached pages without triggering the plugin’s checks for blocked bots, rate limiting, or banned IPs. 
– Solution: Disable all WordPress caching plugins to ensure full DDoS protection. Instead, enable Browser Caching using a service like Cloudflare to improve performance without compromising security. 
 Enable standard type Caching and Configure Cloudflare Browser Cache TTL (e.g., 8 days) via Caching > Configuration in the Cloudflare dashboard.- Cloudflare Compatibility: Ensure Cloudflare is configured to pass <code>CF-Connecting-IP</code> headers for accurate IP detection. Check your Cloudflare dashboard if logged IPs are incorrect. 
– Bot IP Ranges: Update the Bot IP Ranges field every 6 months (next update: March 2026) using official sources (e.g., Google, Bing, Yandex documentation). Duplicate ranges are automatically removed on save. Export to .txt for backup or import from .txt to append new ranges. 
– Blocked Bots: Add malicious bots to the Blocked Bots (User Agents) field (e.g., MJ12bot, SemrushBot, DotBot) to block them immediately. Blocked bots are logged with their IP and User Agent. Export to .txt for backup or import from .txt to append new entries. 
– Excluded Bots: Add trusted bots (e.g., Googlebot, Bingbot) to the Excluded Bots field to exempt them from regular rate limiting (if from verified IPs). Export to .txt for backup or import from .txt to append new entries. 
– High Traffic Bots: Verified bots exceeding the configured limit (default: 100 requests per minute) are logged for monitoring but not blocked. Check the High Traffic Excluded Bots Log regularly. 
– Log Expiration: Set the Log Expires (Days) setting to control how long logs are retained (default: 5 days). Cleanup runs hourly via WordPress Scheduler. Logs older than the specified days are automatically deleted. 
– Timezone: Set the WordPress timezone correctly (e.g., <code>Europe/Athens</code> for Greece) in Settings > General > Timezone to ensure accurate timestamp display in logs and charts. 
– Performance: For high-traffic sites, clear the Blocked IPs Log, Banned IPs Log, and High Traffic Excluded Bots Log regularly, or set a lower Log Expires (Days) value to prevent database growth. 
– Customization: Contact the author for additional features like custom error pages, email notifications for high traffic bots, or advanced logging. 
– Support the Project: If you find this plugin useful, consider supporting its development via the <a href="https://buy.stripe.com/bIY5o70SSfam8Qo7ss" rel="nofollow ugc">donation link</a> in the admin panel or plugin page.

Anti Browser DDoS Protection


I hope it helps Wordpress users protect themselves from DDoS attacks, it also protects you from Javascript Based DDoS Attacks that exploit the Subresource Integrity (SRI) vulnerability, from which neither Crowdsec, nor Mod_Evasive, nor IP_Tables Rules nor Cloudflare protect you.I struggled until I fortified my page and I have all the above services enabled, finally I succeeded by creating this Wordpress Security Plugin.I am very satisfied that I made it available for other users to use completely free of charge, it is open source software with License GPL 2.0.


It also protects you from Javascript Based DDoS Attacks

Protects WordPress from DDoS with rate limiting, bot detection, blocking, Cloudflare support, logs, charts, and bot list export/import.

zoyakn

Zaygl IP Blocker and Anti-DDoS is a lightweight WordPress plugin that helps site owners monitor visitor IP activity and block suspicious traffic.
The plugin records visitor requests and displays useful statistics inside the WordPress admin panel. This allows you to quickly identify unusual traffic patterns, repeated requests from the same IP address, or possible bot activity.
If you are looking for a simple way to block IP addresses in WordPress, this plugin provides an easy and effective solution. You can monitor incoming traffic, search for specific IPs, and quickly block IP addresses that show suspicious behavior.
Whether you need a WordPress IP blocker for security, spam prevention, or traffic control, Zaygl helps you identify and block unwanted visitors. The plugin also supports country-based IP detection, making it easier to understand where your traffic comes from and take action when needed.
The plugin is designed to be simple, fast, and safe to run on production sites.
<h3>Main Features</h3>
<ul>
<li>Logs visitor IP addresses and requests</li>
<li>Displays Top IP addresses by activity</li>
<li>Shows traffic statistics for:
<ul>
<li>last 5 minutes</li>
<li>last 1 hour</li>
<li>last 24 hours</li>
<li>last 3 days</li>
<li>last 7 days</li>
</ul>
</li>
<li>View recent requests from visitors</li>
<li>Block or unblock IP addresses with a single click</li>
<li>Bulk block or unblock multiple IPs</li>
<li>Automatically deny access to blocked IP addresses</li>
<li>Optional country detection for IP addresses</li>
<li>Built-in IP notes system to track suspicious visitors</li>
<li>Export IP lists as CSV</li>
<li>Lightweight and optimized for performance</li>
</ul>
<h3>IP Blocking Features</h3>
Zaygl makes it easy to block IP addresses in WordPress without complex setup.
<ul>
<li>Search and filter IP addresses quickly</li>
<li>Block IP address with one click</li>
<li>Bulk block multiple IP addresses</li>
<li>View and manage blocked IP list</li>
<li>Identify suspicious traffic and take action instantly</li>
<li>Use as a simple WordPress IP blocker plugin for daily protection</li>
</ul>
If you are wondering how to block IP address in WordPress, this plugin provides a clean and user-friendly interface to manage everything from one place.
<h3>Dashboard Overview</h3>
The plugin adds a new Zaygl IP Blocker page in the WordPress admin panel.
View traffic statistics
See which IPs generate the most requests
Filter traffic by country
Search for specific IP addresses
Block or unblock IP addresses
Add notes for suspicious IPs
Export reports
<h3>Who Is This Plugin For?</h3>
This plugin is useful for:
<ul>
<li>Website owners who want to monitor traffic activity</li>
<li>WordPress administrators dealing with spam or bot traffic</li>
<li>Sites experiencing suspicious traffic spikes</li>
<li>Developers who want a simple IP logging and blocking tool</li>
</ul>
It is especially helpful for identifying suspicious activity and blocking problematic visitors quickly.
<h3>Blocking Behavior</h3>
When an IP address is blocked:
<ul>
<li>The visitor immediately receives a 403 Forbidden response</li>
<li>The request is stopped before WordPress loads the page</li>
<li>The blocked IP cannot access the site until it is unblocked</li>
</ul>
<h3>Country Detection</h3>
The plugin can optionally detect the visitor’s country.
Available methods include:
<ul>
<li>Cloudflare country header</li>
<li>Local MaxMind GeoLite2 database</li>
<li>Remote IP geolocation API</li>
</ul>
Country detection is optional and can be disabled.
<h3>External Services</h3>
The plugin can optionally use external services to determine the country of a visitor IP address.
These services are used only if the administrator enables remote geolocation in the plugin settings.
The following services may be used:
ipapi.co 
Service: https://ipapi.co/ 
Privacy Policy: https://ipapi.co/privacy/ 
Terms: https://ipapi.co/terms/
ip-api.com 
Service: https://ip-api.com/ 
Privacy Policy and Terms of Conditions: https://ip-api.com/docs/legal
When enabled, the visitor IP address is sent to the selected service to retrieve a country code.
No data is transmitted unless the administrator explicitly enables remote geolocation in the plugin settings.
<h3>Data Storage</h3>
The plugin stores the following information locally in the WordPress database:
<ul>
<li>Visitor IP address</li>
<li>Request time</li>
<li>Requested URL</li>
<li>User agent</li>
<li>Country code (if available)</li>
</ul>
This data is stored only on your own website database.

Zaygl IP Blocker and Anti-DDoS

Log visitor IPs, monitor traffic, and block IP addresses in WordPress with an easy and lightweight IP blocker.

Anti Browser DDoS Protection vs Zaygl IP Blocker and Anti-DDoS