polarmass

<p><strong>Automatically Block Malicious IPs with Cloudflare</strong><br />
Protect your WordPress site from hackers and brute-force attacks. This free plugin automatically blocks malicious IPs detected by Wordfence and integrates with Cloudflare for real-time security.</p>
<h4>Features</h4>
<ul>
<li>🔒 <strong>Automatic IP Blocking</strong> – Blocks malicious IPs detected by Wordfence.</li>
<li>⚡ <strong>Cloudflare Integration</strong> – Uses Cloudflare’s API for real-time threat mitigation.</li>
<li>📉 <strong>Reduces Server Load</strong> – Shifts security tasks from WordPress to Cloudflare.</li>
<li>🏆 <strong>Lightweight & Fast</strong> – Security without slowing down your site.</li>
<li>🛠️ <strong>Easy Setup</strong> – Just enter your Cloudflare API key and Zone ID.</li>
<li>🆓 <strong>Free & Open Source</strong> – Transparent and continuously improved.</li>
</ul>
<h3>License</h3>
<p>This plugin is licensed under the <a href="https://www.gnu.org/licenses/gpl-2.0.html" rel="nofollow ugc">GPL v2 or later</a>.</p>
<h3>Support</h3>
<p>For support, feature requests, or bug reports, open an issue or reach out via <a href="mailto:contact@polarmass.com" rel="nofollow ugc">email</a>.</p>
<h3>External Services</h3>
<p>To improve the user experience, <strong>Polar Mass Advanced IP Blocker</strong> may use the following third-party services:</p>
<h4>Cloudflare API (https://api.cloudflare.com/client/v4/)</h4>
<p>This plugin integrates with <strong>Cloudflare’s API</strong> to manage IP rules and firewall settings, helping block malicious traffic in real-time.<br />
– Users must manually enter their <strong>Cloudflare API Key</strong> and <strong>Zone ID</strong> in the plugin settings to enable this feature.<br />
– No automatic data collection occurs without user input.<br />
– When configured, the plugin securely sends user-defined IPs and rules to Cloudflare’s servers.<br />
– Cloudflare Privacy Policy: <a href="https://www.cloudflare.com/privacypolicy" rel="nofollow ugc">https://www.cloudflare.com/privacypolicy</a></p>
<h4>Polar Mass API (https://polarmass.com/wp-json/pmip/v1/newsletter/signup)</h4>
<p>This plugin provides an <strong>optional</strong> newsletter signup form within the admin panel.<br />
– The <strong>only</strong> data collected is the email address entered by the user.<br />
– This data is securely transmitted to our server at <strong>polarmass.com</strong>.<br />
– No personal information is shared or processed without explicit user consent.<br />
– Privacy Policy: <a href="https://polarmass.com/privacy-policy/" rel="nofollow ugc">https://polarmass.com/privacy-policy/</a></p>
<p>For more details, please review our <a href="https://polarmass.com/terms-and-conditions/" rel="nofollow ugc">Terms and Conditions</a> and <a href="https://polarmass.com/privacy-policy/" rel="nofollow ugc">Privacy Policy</a>.</p>


Polar Mass Advanced IP Blocker

Automatically block threats at the network level by forwarding Wordfence-detected IPs to Cloudflare.

POTAR

<p><strong>Checkout Origin Guard</strong> protects your WooCommerce store from fake, fraudulent, or automated checkout attempts by identifying and blocking unknown origins before they reach your order table.</p>
<p>The plugin runs <strong>client-origin heuristics</strong>, <strong>IP reputation checks</strong>, and <strong>dwell-time and sequence analysis</strong> to detect non-human traffic and suspicious behavior at checkout. It maintains a <strong>single-page control center</strong> for viewing logs, adjusting sensitivity, and unblocking valid users when necessary.</p>
<h3>Key Features</h3>
<ul>
<li>🛡️ <strong>Bot Block</strong> — Detects and blocks automated bots by analyzing user agents, referrers, and checkout behavior patterns.</li>
<li>⚡ <strong>Rapid Sequence Detection</strong> — Monitors frequency and timing between checkout attempts to identify scripted attacks.</li>
<li>🧠 <strong>Company Shield</strong> — Flags suspicious or AI-generated business names, email domains, and mixed-character spam entries.</li>
<li>🌎 <strong>Allowlist Controls</strong> — Preserve access for search engines, uptime monitors, and known geographic zones.</li>
<li>🔒 <strong>Hard / Soft / Monitor Modes</strong> — Choose between logging only, soft warning blocks, or hard blocking by IP.</li>
<li>🗂️ <strong>Log Viewer</strong> — See all checkout activity including timestamps, IPs, user agents, paths, and detection outcomes.</li>
<li>🧩 <strong>One-Page Dashboard</strong> — Configure settings, review logs, and manage allow/deny lists from a single screen.</li>
<li>🚫 <strong>Manual Block / Unblock</strong> — Instantly remove or restore access for specific IPs.</li>
<li>💾 <strong>CSV Export</strong> — Download complete activity logs for security review or record keeping.</li>
</ul>
<h3>Why It Matters</h3>
<p>WooCommerce checkouts are frequent targets for card testers, spammers, and fake business registrations. Checkout Origin Guard stops those attempts <strong>before orders are created</strong>, saving time, chargeback risk, and administrative cleanup.</p>
<p>This plugin works alongside any existing firewall or CDN and does not require external APIs or subscriptions. Lightweight and privacy-safe — all data stays on your server.</p>
<h3>Use Cases</h3>
<ul>
<li>Prevent card testing or order spam</li>
<li>Stop bots using random company names or domains</li>
<li>Detect rapid repeat checkout attempts from the same IP</li>
<li>Block POST requests without valid referrer or nonce</li>
<li>Maintain clean order logs for legitimate customers only</li>
</ul>
<h3>Credits</h3>
<p>Developed by <strong>Michael Winchester</strong><br />
For documentation and updates, visit <a href="https://michaelwinchester.com" rel="nofollow ugc">https://michaelwinchester.com</a></p>


Checkout Origin Guard

One-page WooCommerce checkout hardening: bot blocking, rate/sequence checks, and business/email heuristics. Single-page logs & controls.

Polar Mass Advanced IP Blocker vs Checkout Origin Guard