Vladimir Marusic

Maroon Horizon Smart Firewall is built for practical WordPress protection: block bad traffic, scan for malware, quarantine suspicious files, and reduce attack surface — without sending your site files off-server.
Advanced Security Check (Quick Scan) gives you an easy-to-understand Overall Security Rating, plus clear details and explanations for each check so you can quickly see what to improve and raise your security level.
This WordPress.org (FREE) build is fully functional for the FREE feature set and is designed to run locally for those features. Advanced capabilities are provided by a separate commercial PRO plugin (not included in this WordPress.org build).
Outbound network requests (if any) are disclosed under “External Services” and “Privacy”.
<h4>What you get in the FREE plugin (local-only)</h4>
<ul>
<li>Advanced Security Check (Quick Scan) with an Overall Security Rating and easy-to-follow explanations so you can improve your security level step by step.</li>
<li>Manual IP blocking and IP management.</li>
<li>Security patch toggles for common hardening actions.</li>
<li>Malware scanning of uploads and theme directories using local pattern detection (no external signatures).</li>
<li>Quarantine management (restore / delete quarantined files).</li>
<li>Quick file integrity checks (where supported in the FREE workflow).</li>
</ul>
<h4>Local-first design (privacy & control)</h4>
<ul>
<li>Malware scans run on your server.</li>
<li>Scanned file contents are not uploaded by the plugin.</li>
<li>External requests (if any) are limited and disclosed below.</li>
</ul>
<h4>Who it’s for</h4>
<ul>
<li>Site owners who want simple, practical protection without complex configuration.</li>
<li>Agencies and developers who need a clean hardening + scanning toolkit.</li>
<li>Anyone who wants a transparent FREE build, with an optional PRO upgrade path.</li>
</ul>
<h4>PRO features (separate commercial plugin, optional)</h4>
<ul>
<li>AI-Powered Threat Feed (encrypted subnet feed) and automatic sync.</li>
<li>Real-Time AI Threat Detection (AI model signatures).</li>
<li>AI-Powered Deep Scan and scheduled email reports.</li>
</ul>
<h4>Commercial PRO plugin</h4>
The PRO edition is a separate commercial plugin (not included in this WordPress.org build). 
Learn more: <a href="https://mh.ie/maroon-horizon-smart-firewall/" rel="nofollow ugc">https://mh.ie/maroon-horizon-smart-firewall/</a>
<h3>External Services</h3>
This plugin may perform outbound network requests in the following cases:
1) WordPress.org Core Checksums API (FREE: Core Integrity Scan) 
* Service provider: WordPress.org 
* Endpoint: https://api.wordpress.org/core/checksums/1.0/ 
* When: Only when you manually run the Core Integrity Scan from Maroon Horizon -> Scanner. 
* Data sent: WordPress version and locale via URL query parameters. Your server IP address is inherently shared as part of the HTTPS request. 
* Data received: Official JSON containing WordPress core file checksums, used to verify your local core files. No site files or content are uploaded. 
* Privacy: https://wordpress.org/about/privacy/
2) Freemius (optional: licensing, updates, opt-in telemetry) 
* Service provider: Freemius (freemius.com) 
* When: Only if you opt in to Freemius (for example, to manage licensing and receive updates). 
* Data sent: Technical information required for licensing and updates (and, if you opt in, diagnostic/usage metadata), as described by Freemius. 
* Data received: License status and update metadata needed to deliver plugin updates. 
* Terms: https://freemius.com/terms/ 
* Privacy: https://freemius.com/privacy/
3) Maroon Horizon service (mh.ie) (PRO only: encrypted threat-feed / AI signature bundles) 
* Service provider: Maroon Horizon Ltd – <a href="https://mh.ie" rel="nofollow ugc">https://mh.ie</a> 
* When: Only in the separate PRO plugin, when you use PRO features that require server-side data (e.g., Threat Feed sync / AI signature updates). 
* Data sent: Site URL, install ID, product/plan identifiers, license identifiers/keys, plugin/WP/PHP versions, plus standard HTTPS request metadata (including your server IP). 
* Data received: A JSON response containing metadata and a time-limited download URL, followed by encrypted bundles used by the PRO engine. No site files or content are uploaded. 
* Terms: https://mh.ie/terms 
* Privacy: https://mh.ie/privacy-policy
<h3>Privacy</h3>
Maroon Horizon Smart Firewall is designed to minimize data sharing.
<ul>
<li>Most FREE features run locally and do not transmit your site content.</li>
<li>Malware scanning runs locally on your server; scanned file contents are not uploaded by the plugin.</li>
<li>Any outbound requests (and the data exchanged) are disclosed in the “External Services” section above.</li>
<li>PRO-only services are not included in this WordPress.org build.</li>
</ul>

Maroon Horizon Smart Firewall – Malware Scanner & IP Blocking

Firewall, malware scan & IP blocking for WordPress, with Quick Scan Overall Security Rating, hardening, quarantine and integrity checks. PRO adds AI.

sourcecode347

The Anti Browser DDoS Protection plugin provides robust protection against denial-of-service (DoS) attacks on your WordPress site. It implements IP-based rate limiting, with configurable settings for subscribers, non-logged-in users, and verified bots, while excluding administrators and other non-subscriber roles. It features advanced bot detection to identify and limit suspicious bots, immediate blocking of malicious bots by User Agent, and supports Cloudflare for accurate client IP detection. Static assets (e.g., CSS, JS, images) are excluded to maintain site performance. An intuitive admin panel allows you to configure rate limits, bot exclusions, trusted bot IP ranges (with automatic duplicate removal), blocked bots by User Agent, log expiration settings, and view logs for blocked IPs, banned IPs, and high traffic bots with auto-refresh every 30 seconds, all with User Agent details and timestamps. You can export Excluded Bots, Bot IP Ranges, and Blocked Bots lists to .txt files and import new entries to append to existing lists without duplicates. Daily bar charts for Blocked IPs, Banned IPs, and High Traffic Bots are displayed above the logs for quick visual insights.
Key Features:
<ul>
<li>Rate limiting based on IP for subscribers and non-logged-in users, with configurable maximum requests and time window.</li>
<li>Excludes non-subscriber logged-in users (e.g., administrators, editors) from rate limiting.</li>
<li>Advanced bot detection to identify suspicious bots (bots using trusted User Agents but from unverified IPs).</li>
<li>Suspicious bots are subject to the same rate limiting as regular users and logged with User Agent in the Blocked IPs Log.</li>
<li>Immediate blocking of malicious bots by User Agent (e.g., MJ12bot, SemrushBot, DotBot by default) with customizable settings and logging.</li>
<li>Configurable rate limiting for verified excluded bots (default: 100 requests per minute), with logging for bots exceeding this limit.</li>
<li>High Traffic Excluded Bots Log to track verified bots with excessive requests, including IP, User Agent, and timestamp.</li>
<li>Admin panel to configure maximum requests, time window, excluded bots, trusted bot IP ranges, blocked bots (User Agents), blocks before ban, ban duration, high traffic bot limits, and log expiration (days).</li>
<li>Export Excluded Bots, Bot IP Ranges, and Blocked Bots lists to .txt files for backup or transfer.</li>
<li>Import .txt files for Excluded Bots, Bot IP Ranges, and Blocked Bots to append new entries to existing lists, with automatic duplicate removal.</li>
<li>Automatic removal of duplicate IP ranges in the Bot IP Ranges field on save, keeping the first occurrence.</li>
<li>Support for Cloudflare real IP detection using <code>CF-Connecting-IP</code> and <code>X-Forwarded-For</code> headers.</li>
<li>Excludes static assets (CSS, JS, images, fonts, etc.) from rate limiting to optimize performance.</li>
<li>Logs blocked IPs, banned IPs, and high traffic bots with IP, User Agent, and timestamps using the WordPress timezone, viewable in the admin panel with options to clear logs and auto-refresh every 30 seconds.</li>
<li>Daily bar charts for Blocked IPs, Banned IPs, and High Traffic Bots displayed above the logs in the admin panel for visual statistics.</li>
<li>Automatic log expiration (Blocked IPs, Banned IPs, High Traffic Bots) after a configurable number of days (default: 5 days), with hourly cleanup via WordPress Scheduler.</li>
<li>All error messages and logs prefixed with “Anti Browser DDoS Protection: ” for clarity.</li>
<li>Donate link in the admin panel to support the project.</li>
<li>Automatic cleanup of transients, blocked IPs, banned IPs, high traffic bots, blocked bots, bot IP ranges, and log expiration settings on plugin deactivation to prevent database bloat.</li>
</ul>
Ideal for WordPress sites seeking enhanced security against automated attacks, with seamless integration for Cloudflare users, advanced bot management, efficient log management, visual charts for statistics, and easy export/import for bot lists.
<h3>Plugin Assets img/</h3>
<h3>Icon Image</h3>
Normal: icon-128×128.png 
High-DPI (Retina): icon-256×256.png
<h3>Bugs</h3>
Caching plugins such as WP Super Cache, W3 Total Cache, and others may bypass the DDoS protection provided by Anti Browser DDoS Protection, serving cached pages without triggering the plugin’s checks for blocked bots, rate limiting, or banned IPs. 
– Solution: Disable all WordPress caching plugins to ensure full DDoS protection. Instead, enable Browser Caching using a service like Cloudflare to improve performance without compromising security. 
 Enable standard type Caching and Configure Cloudflare Browser Cache TTL (e.g., 8 days) via Caching > Configuration in the Cloudflare dashboard.- Cloudflare Compatibility: Ensure Cloudflare is configured to pass <code>CF-Connecting-IP</code> headers for accurate IP detection. Check your Cloudflare dashboard if logged IPs are incorrect. 
– Bot IP Ranges: Update the Bot IP Ranges field every 6 months (next update: March 2026) using official sources (e.g., Google, Bing, Yandex documentation). Duplicate ranges are automatically removed on save. Export to .txt for backup or import from .txt to append new ranges. 
– Blocked Bots: Add malicious bots to the Blocked Bots (User Agents) field (e.g., MJ12bot, SemrushBot, DotBot) to block them immediately. Blocked bots are logged with their IP and User Agent. Export to .txt for backup or import from .txt to append new entries. 
– Excluded Bots: Add trusted bots (e.g., Googlebot, Bingbot) to the Excluded Bots field to exempt them from regular rate limiting (if from verified IPs). Export to .txt for backup or import from .txt to append new entries. 
– High Traffic Bots: Verified bots exceeding the configured limit (default: 100 requests per minute) are logged for monitoring but not blocked. Check the High Traffic Excluded Bots Log regularly. 
– Log Expiration: Set the Log Expires (Days) setting to control how long logs are retained (default: 5 days). Cleanup runs hourly via WordPress Scheduler. Logs older than the specified days are automatically deleted. 
– Timezone: Set the WordPress timezone correctly (e.g., <code>Europe/Athens</code> for Greece) in Settings > General > Timezone to ensure accurate timestamp display in logs and charts. 
– Performance: For high-traffic sites, clear the Blocked IPs Log, Banned IPs Log, and High Traffic Excluded Bots Log regularly, or set a lower Log Expires (Days) value to prevent database growth. 
– Customization: Contact the author for additional features like custom error pages, email notifications for high traffic bots, or advanced logging. 
– Support the Project: If you find this plugin useful, consider supporting its development via the <a href="https://buy.stripe.com/bIY5o70SSfam8Qo7ss" rel="nofollow ugc">donation link</a> in the admin panel or plugin page.

Anti Browser DDoS Protection


I hope it helps Wordpress users protect themselves from DDoS attacks, it also protects you from Javascript Based DDoS Attacks that exploit the Subresource Integrity (SRI) vulnerability, from which neither Crowdsec, nor Mod_Evasive, nor IP_Tables Rules nor Cloudflare protect you.I struggled until I fortified my page and I have all the above services enabled, finally I succeeded by creating this Wordpress Security Plugin.I am very satisfied that I made it available for other users to use completely free of charge, it is open source software with License GPL 2.0.


It also protects you from Javascript Based DDoS Attacks

Protects WordPress from DDoS with rate limiting, bot detection, blocking, Cloudflare support, logs, charts, and bot list export/import.

Maroon Horizon Smart Firewall – Malware Scanner & IP Blocking vs Anti Browser DDoS Protection