Omajemite Don

<p>BotFend Anti-Bot Firewall is a professional-grade WordPress security suite designed to stop automated attacks, malicious bots, and brute-force attempts before they consume your server resources. Built with a high-performance V4 architecture, it features a smart aggregation engine and an early-loading Web Application Firewall (WAF) that neutralizes threats at the server level.</p>
<p>Developed by Omajemite Don, BotFend protects your site without slowing it down.</p>
<h3>Core Features:</h3>
<ul>
<li><strong>Advanced Web Application Firewall (WAF):</strong> Uses <code>auto_prepend_file</code> via <code>.htaccess</code> or <code>.user.ini</code> to block attacks before WordPress even loads.</li>
<li><strong>Intelligent Bot Detection:</strong> Identifies and blocks malicious bots, crawlers, and scrapers using advanced signature detection.</li>
<li><strong>Behavioral Analysis:</strong> Monitors visitor behavior patterns to detect and block automated threats that mimic human activity.</li>
<li><strong>Browser Fingerprinting:</strong> Generates unique browser fingerprints to track and identify persistent attackers across sessions and IP changes.</li>
<li><strong>Advanced 404 Detection:</strong> Detects and blocks malicious path scanning, vulnerability probing, and excessive 404 abuse patterns.</li>
<li><strong>WordPress Protection:</strong> Comprehensive protection against XML-RPC attacks, REST API abuse, author scanning, and WordPress-specific vulnerabilities.</li>
<li><strong>Signature Detection:</strong> Real-time pattern matching against known attack signatures and malicious payloads.</li>
<li><strong>Smart Log Aggregation:</strong> High-performance database architecture that centralizes logging to prevent database bloat and memory crashes, even under heavy attack.</li>
<li><strong>Perpetual Offender Tracking:</strong> Automatically upgrades temporary bans to permanent blocks for IPs that repeatedly attack your site.</li>
<li><strong>Real-Time Threat Intelligence:</strong> Integrates with external databases to verify IP reputations on the fly.</li>
<li><strong>Tor Node Blocking:</strong> Automatically detects and blocks malicious traffic originating from the Tor anonymity network.</li>
<li><strong>Comprehensive UI:</strong> Clean, intuitive WordPress admin interface with bulk actions, detailed threat analysis timelines, and visual statistics.</li>
</ul>
<h3>Pro Features (Available with License):</h3>
<ul>
<li><strong>Full Firewall Auto Prepend:</strong> Execute firewall protection at the earliest possible stage of WordPress execution</li>
<li><strong>Cloudflare Integration:</strong> Synchronize blocked IPs to Cloudflare firewall rules at the edge, blocking attacks before they reach your server</li>
</ul>
<h3>External Services</h3>
<p><strong>IMPORTANT: All external services are DISABLED BY DEFAULT. You must explicitly enable each service in the plugin settings before any data is sent.</strong></p>
<p>This plugin can connect to the following external services to provide enhanced threat protection. No data is sent unless you explicitly enable these features.</p>
<h3>1. AbuseIPDB API</h3>
<ul>
<li><strong>Purpose:</strong> Checks the reputation of suspicious IP addresses against a global database of reported abusers</li>
<li><strong>Data sent:</strong> The IP address of the visitor being checked</li>
<li><strong>When:</strong> When AbuseIPDB integration is enabled AND an IP address needs verification (cached for 24 hours)</li>
<li><strong>How to disable:</strong> Set “Enable AbuseIPDB” to OFF in plugin settings (default: OFF)</li>
<li><strong>Terms of Service:</strong> https://www.abuseipdb.com/legal</li>
<li><strong>Privacy Policy:</strong> https://www.abuseipdb.com/privacy</li>
</ul>
<h3>2. IPHub API</h3>
<ul>
<li><strong>Purpose:</strong> Detects VPNs, proxies, and non-residential IP addresses</li>
<li><strong>Data sent:</strong> The IP address of the visitor being checked</li>
<li><strong>When:</strong> When IPHub integration is enabled (default: OFF)</li>
<li><strong>How to disable:</strong> Set “Enable IPHub” to OFF in plugin settings (default: OFF)</li>
<li><strong>Terms of Service:</strong> https://iphub.info/legal/terms</li>
<li><strong>Privacy Policy:</strong> https://iphub.info/legal/privacy</li>
</ul>
<h3>3. IP Geolocation Services</h3>
<ul>
<li><strong>Purpose:</strong> Determine the country of origin for IP addresses to apply geographic blocking rules</li>
<li><strong>Data sent:</strong> The IP address of the visitor being geolocated</li>
<li><strong>When:</strong> When geolocation is enabled (default: OFF) AND an IP needs geolocation (results cached)</li>
<li><strong>How to disable:</strong> Set “Enable IP Geolocation” to OFF in plugin settings (default: OFF)</li>
<li><strong>Services used:</strong></li>
</ul>
<h4>ip-api.com</h4>
<ul>
<li><strong>Purpose:</strong> Primary geolocation service</li>
<li><strong>Terms:</strong> https://ip-api.com/terms</li>
<li><strong>Privacy:</strong> https://ip-api.com/privacy</li>
</ul>
<h4>ipapi.co</h4>
<ul>
<li><strong>Purpose:</strong> Fallback geolocation service</li>
<li><strong>Terms:</strong> https://ipapi.co/terms/</li>
<li><strong>Privacy:</strong> https://ipapi.co/privacy/</li>
</ul>
<h4>ipwhois.io</h4>
<ul>
<li><strong>Purpose:</strong> Secondary fallback geolocation service</li>
<li><strong>Terms:</strong> https://ipwhois.io/terms</li>
<li><strong>Privacy:</strong> https://ipwhois.io/privacy</li>
</ul>
<h3>4. Tor Project Exit List</h3>
<ul>
<li><strong>Purpose:</strong> Downloads the official list of active Tor exit nodes to block anonymous attacks</li>
<li><strong>Data sent:</strong> None (only downloads a public list)</li>
<li><strong>When:</strong> Every 6 hours when Tor blocking is enabled (default: OFF)</li>
<li><strong>How to disable:</strong> Set “Enable Tor Blocking” to OFF in plugin settings (default: OFF)</li>
<li><strong>Service URL:</strong> https://check.torproject.org/torbulkexitlist</li>
<li><strong>Terms of Use:</strong> https://www.torproject.org/about/trademark/</li>
<li><strong>Privacy Policy:</strong> https://www.torproject.org/about/privacy_policy/</li>
</ul>
<h3>5. dan.me.uk Tor List (Alternative Source)</h3>
<ul>
<li><strong>Purpose:</strong> Alternative source for Tor exit node list when primary source is unavailable</li>
<li><strong>Data sent:</strong> None (only downloads a public list)</li>
<li><strong>When:</strong> Only used as fallback when primary Tor list fails and Tor blocking is enabled</li>
<li><strong>How to disable:</strong> Disable Tor blocking in plugin settings (default: OFF)</li>
<li><strong>Service URL:</strong> https://www.dan.me.uk/torlist/</li>
<li><strong>Terms/Privacy:</strong> This is a public service with no formal terms or privacy policy. Use is governed by standard HTTP protocol.</li>
</ul>
<h3>6. Threat Intelligence Feeds</h3>
<ul>
<li><strong>Purpose:</strong> Download curated lists of known malicious IP addresses</li>
<li><strong>Data sent:</strong> None (only downloads public blocklists)</li>
<li><strong>When:</strong> When threat intelligence is enabled (default: OFF) and feeds need refreshing</li>
<li><strong>How to disable:</strong> Set “Enable Threat Intelligence” to OFF in plugin settings (default: OFF)</li>
<li><strong>Feeds used:</strong>
<ul>
<li><strong>FireHOL:</strong> https://firehol.org/ (Public domain blocklists)</li>
<li><strong>Blocklist.de:</strong> https://www.blocklist.de/ (Terms: https://www.blocklist.de/en/terms.html)</li>
<li><strong>Emerging Threats (Proofpoint):</strong> Real-time threat intelligence feeds</li>
<li><strong>Terms:</strong> https://www.proofpoint.com/us/legal/license</li>
<li><strong>Privacy:</strong> https://www.proofpoint.com/us/legal/privacy-policy</li>
</ul>
</li>
</ul>
<h3>7. Google reCAPTCHA</h3>
<ul>
<li><strong>Purpose:</strong> Provides bot verification on login, registration, and comment forms</li>
<li><strong>Data sent:</strong> Browser interaction data sent to Google’s servers</li>
<li><strong>When:</strong> When reCAPTCHA is enabled AND a user interacts with a protected form</li>
<li><strong>How to disable:</strong> Set reCAPTCHA site key and secret key to empty in plugin settings</li>
<li><strong>Terms of Service:</strong> https://policies.google.com/terms</li>
<li><strong>Privacy Policy:</strong> https://policies.google.com/privacy</li>
</ul>
<h3>8. Cloudflare API Integration (PRO VERSION)</h3>
<ul>
<li><strong>Purpose:</strong> Synchronize blocked IPs to Cloudflare firewall rules at the edge, blocking attacks before they reach your server</li>
<li><strong>Data sent:</strong> IP addresses, threat scores, authentication credentials, and configuration parameters during API calls</li>
<li><strong>When:</strong> During manual sync operations, scheduled automatic syncs, and license validation</li>
<li><strong>How to disable:</strong> Available only in Pro version with valid license</li>
<li><strong>Terms of Service:</strong> https://www.cloudflare.com/terms/</li>
<li><strong>Privacy Policy:</strong> https://www.cloudflare.com/privacypolicy/</li>
</ul>
<h3>Data Handling Summary</h3>
<ul>
<li><strong>No data is sent to any external service unless you explicitly enable that feature</strong></li>
<li><strong>All API results are cached</strong> to minimize external requests</li>
<li><strong>Regular visitor IPs are never sent</strong> – only suspicious or attacking IPs trigger external lookups</li>
<li><strong>You can disable ALL external services</strong> in the plugin settings</li>
<li><strong>Plugin works perfectly with all external services disabled</strong></li>
</ul>
<h3>Privacy</h3>
<p>This plugin respects user privacy:<br />
– No tracking of regular site visitors<br />
– No analytics or usage data collected<br />
– All external services are opt-in (disabled by default)<br />
– Full transparency: All external service calls are documented above</p>


BotFend Anti-Bot Firewall

Professional security plugin protecting WordPress from malicious bots, spam, and server attacks using an advanced Web Application Firewall.

neosoft

<p>Protect your WordPress blog with our amazing bot&SPAM blocker. Don’t let hackers get your website down, prevent spam and content scraping, block all hacking attempts and boost your blog performance.</p>
<h3>Bot Attack & SPAM Blocker</h3>
<p>This module determines whether a bot or real visitor is on your site in real time and blocks the activity of bots, while accelerating the loading of pages for real visitors, thereby improving the user experience. This reduces the load on hosting and on the server, saves on traffic and increases page load several times over.</p>
<p>The necessary bots (google, yahoo, Msn, etc) will easily get on your site and index pages, just like real users. The required search bots are determined based on the User-Agent and PTR records. All the rest are checked by the module’s algorithm and only complete browsers that have passed the model’s algorithm check are let through.</p>
<h3>Content Scraping Protection</h3>
<p>Content scraping can bring the most serious consequences for your site. Every day, hundreds of bots go from site to site to copy content and pictures to publish them on their site. As soon as your content is published on third-party sites, Google does not consider it as useful content for users, which means it lowers the position of your site in search results. Our module will protect your content, your pictures, and position in Google.</p>
<h3>Performance Optimization</h3>
<p>Our research shows that 70% of the server load comes from bots, scrapers, and hacker scripts that visit your site to steal content, search for vulnerabilities, or try to find your users’ passwords. Our module blocks all types of bots even before they try to load your site, thus, the server load is reduced by 30-40 percent, which will significantly speed up the loading of the website for real visitors, and thus improve their user experience.</p>
<h4>Cyber Attack Prevention</h4>
<p>Searches for vulnerabilities on a site, as a rule, are performed automatically. Hackers scan millions of sites daily with specially designed utilities. Once a vulnerability has been found on your site, the hacker uses it to gain access to restricted information on your site. Our module blocks all possible vulnerability scan utilities. Thus, it does not allow 99% of all vulnerability scanners to your site, and therefore reduces the likelihood of hacking the site.</p>
<h4>SPAM Prevention</h4>
<p>Our module stops all automatic spam utilities. It blocks such types of spam as: comment spam, user registration, spam through a feedback form, and spam on forums. Thanks to the algorithm for determining who are real visitors, all spam bots are blocked when they try to enter your site</p>
<h4>Fraud Prevention</h4>
<p>Every day, hackers break into hundreds of online stores and get access to customers’ credit cards. The next step is to check credit cards for validity. To do this, automatic bots are used to enter card data into your store in order to check if the credit card works or not. We designed our module in such a way that it blocks 99% of such bots, which means you don’t have to spend time issuing refunds and identifying fraud transactions.</p>
<h4>Price Scraping Protection</h4>
<p>Competitors often use automated scripts to monitor your prices. As soon as you reduce or increase the cost of your goods, they do the same, thereby disrupting your sales with their own. Our module does not allow price scrapers to get information about your discounts, which means competitors will be able to get information about the cost of your goods only by personally visiting your site every day.</p>


Bad Bot Blocker

Protect your Wordpress blog with our amazing bot&SPAM blocker. Don't let hackers get your website down, prevent spam and content scraping, bl …

BotFend Anti-Bot Firewall vs Bad Bot Blocker