StopBadBots

The easiest way to block bad bots

Author:	Bill Minozzi (profile at wordpress.org)
WordPress version required:	4.0
WordPress version tested:	6.5
Plugin version:	10.14
Added to WordPress repository:	13-05-2016
Last updated:	04-04-2024
Rating, %:	78
Rated by:	103
Plugin URI:	http://stopbadbots.com
Total downloads:	1 264 985
Active installs:	8 000+
Click to start download

STOP BAD BOTS
★★★★★

Bots can have a negative impact on your website in a number of ways. They can overload your server, which can cause performance problems such as slowness and longer response times. They can also look for vulnerabilities in your website and steal your content, which can damage your SEO.

Stop Bad Bots, SPAM bots, Crawlers and spiders without DNS Cloud or API (EndPoint) Traffic Redirection and without slow down your site. No google penalties. Multilanguage ready. Included also Dutch, French, Germany, Italian and Portuguese language files.
.
Italian: Blocca bot dannosi, bot SPAM, crawler e spider senza DNS Cloud o reindirizzamento del traffico API (EndPoint) e senza rallentare il tuo sito. Nessuna sanzione su Google. Tradotto in italiano.
.
Português: Bloqueia Bots, SPAM bots, Crawlers e spiders sem DNS Cloud ou API (EndPoint) redirecionamento de tráfego e sem deixar seu site lento. Sem penalidades do Google. Traduzido em Português.

Introducing our new comprehensive visits log page with Ajax-powered traffic monitoring. Analyze and dive deep into the visits your website receives, including hack attempts. And yes, you will know when Googlebot visits you (googlebot, big, Twitter, Facebook and other bots). Take full control by effortlessly adding visitors to the blacklist or whitelist with a single click when needed.

New Feature: Our plugin now offers a comprehensive set of analytics tools, providing insightful data on your website’s performance. With daily and monthly visit counts, referral sources, page visit metrics, and visitor engagement statistics, you gain a clear understanding of your site’s traffic patterns and user behavior. Additionally, interactive charts and summaries highlight the reasons behind blocked attempts, empowering you with actionable insights. Explore our analytics suite to track human visitors and distinguish them from bots, providing a holistic view of your website’s performance and ensuring an accurate assessment of its impact.

With the exponential increase of AI tools, expect the increase of sophisticated bot attacks. Protect your site from advanced bots and AI-powered attacks with our comprehensive bot protection solution.

Stop Bad Bots is completely self-contained and does not need to connect to any outside API or service. No DNS, API or Cloud Traffic Redirection. No Slow Down Your Site!

No .htaccess neither robots.txt required.

When a bad bot try to open any your WordPress page we show a 403 Forbidden page. Then, in your statistics like webalizer or visitor metrics, for example, you can see status 403 (forbidden) and 0 bytes. For more details, visit our online guide and FAQ page.

You don’t need create robots.txt neither touch your .htaccess file.

Easily integrated with our anti hacker plugin to add an extra layer of protection and prevent also hacker bots. You can find more details about Anti Hacker below.

Not using WordPress? Check out the free standalone PHP version of StopBadBots (also Docker)
Your Bad Bots Table is updated with periodic free online automatic updates
Premium Option with Firewall protection.
Premium Option with weekly automatic table updates from our server instead 3x year in free version.
Included also Bad Bots IP Table. The plugin can block also the bat bots by IP using fake or blank User Agent.
Included also Bad Bots Referer/Referral spam Table. More than 8.400 bad bots included
Included also Visits Log with Whitelist and Blacklist Buttons
Anti Hacker: Protect also Against Hacker Attacks (with free Anti Hacker Plugin extension)
Anti Spam: Protect also Comments Form from bad bots
Anti Spam: Protect also Contact Form 7 and WP Form Plugins from bad bots
Protect Login Form Against Bots and Brute force Attacks
Stop Data Thieves From Stealing You and harm your SEO
list of bad bots
More than 4800 Bots, 8400 bad referer/referral and 3300 bad IPs Included!
You Can Add more …
**No DNS or Cloud Traffic Redirection. No Slow Down Your Site! No Google penalties for slow sites.**
Block User Enumeration
Block PingBack Request
Limit Bot Visits (Rate Limiting) (Premium)
Whitelist Table (Premium)
Block HTTP tools table (Premium)
**The Plugin doesn’t block main Google, Yahoo and Bing (Microsoft), twitter and Facebook bots.**
Easy to manage the list. You can add more bots, IPs and referrer or deactivate any bot
Save bandwidth.
Optionally receive an email alert
Block False Google/Microsoft (Fake Google Bot) Bots (Premium Version)
Block ahrefs bot
Block semrush bot
Block Screaming Frog
Block Moz
Block IA powered bots
Spider blocker

Demo Video
Demo Video Ajax-powered Traffic Monitoring
Online Documentation
StartUp Guide
FAQ Page
Plugin Site
Compatible With Anti Hacker Plugin

Check Page Load Time (speed test website)

This plugin allows you to monitor the average load time for each page (page speed test) on your site, generate a chart showcasing the load times for the past 7 days, and identify the 20 slowest-loading pages.
wpTools free plugin

reCAPTCHA V3 (and Turnstile Cloudflare) for all pages of your site

If you want protect ALL pages of yoursite with invisible reCAPTCHA or Turnstile Cloudflare, try this new free plugin:
reCAPTCHA For All free plugin
Block spammers, hackers, crawlers, spiders and malicious traffic.

Block visitors from China, Cuba and North Korea

If you are getting a lot of spam and malicious traffic from China, Cuba and North Korea, with our plugin
you can block them without worry about install (and mantain) huge databases of IP address.
Just let our plugin take care that (Premium).

Ban spammers, crawlers, spiders, hackers and bad behavior

This plugin let you ban users by IP, user agent and referrer url.

Anti Hacker Protection

If you want protect ALL pages of yoursite against hackers and their bots, try this free plugin:
Anti Hacker free plugin
We recommend and facilitate the installation of this free plugin, with just one click, on our plugin dashboard, visible immediately after installing Stop Bad Bots.

Prevent unauthorized access to your account by protect your login page also against bots and brute force.
Firewall to Block Malicious Requests, Queries, User Agents and URLS. 100% Plug-n-play, no configuration required.
View Table of the Blocked Visits and add IP to Whitelist from table and logs failed login attempts.
Option to disable Json WordPress Rest API (also new WordPress 4.7 Rest API) or disable WordPress Rest API (disable WordPress API)
You can also disable the WordPress xml-rpc (xmlrpc) (or disable only Pingback) API with just one click.
WordPress Debug enabled warning.
Disable file editing within the WordPress dashboard.
Replace insecure login error message.
Hide WordPress version number.
Disable Application Passwords: Block external applications to request permission to connect to a site and generate a password (WordPress 5.6 new feature)
Limit Visits, Limit Bots Attempts (Premium Version)
limit only 404 requests (Premium Version)
Check Google Safe Browsing Blacklist
Multilingual ready.
Disable WordPress native sitemap (for user’s) creation.
Disable xml-rpc
Disable Pingback

Malware Scanner
Security Malware scanner (one click scan) for 797 malwares also in free version (unlimited files).
Scans every folder and inspects every file on a website (deep scanner) for traces of malware, exploits, trojans, worms, viruses, backdoors as well as JavaScript code obfuscation, exploits, malicious iframes, malicious code injection, malicious code obfuscation, auto-generated malicious content, redirects, hidden eval code and more.
Scan all Pages, Posts and Comments against malwares.
Alert for plugins and themes without updates for long time or with old versions.
Scan your site now before Google blacklists it or your web host takes it down.

Block
User enumeration. (is one of the most popular attacks to identify the valid user names)
Comments in media page.
Bad Queries.* Block All Feeds (Optional).
Creation of new Administrators from plugins and themes with vulnerabilities.
Fake Google and Bing (MSN) bots (Premium Version)
Search for Theme’s vulnerabilities (Premium Version)
Search for Plugin’s vulnerabilities (Premium Version)
Tor (The Onion Router) Traffic – Optional – (Premium Version) Tor anonymity provides value to online attackers.
HTTP Tools (you can manage the strings)
Blank User Agent
Spider (Spider Block)

Analytics Spam Referrals

This plugin is not about Analytics Spam referrals.
For more details about that, please, visit our FAQ page:
http://stopbadbots.com/faq/
and look for Analytics SPAM referral

Free plugins from the same author:

Stop == Changelog.txt

The changelog.txt contains changelog entries, so we can keep the size of the standard WordPress readme.txt file reasonable.

External service

If the settings of Stop Bad Bots is “Standard or Maximum Block”, we can test some visitors Ip
from the RIPE database. We send only the IP number of your visitor.
This is a free service. Ripe is a not-for-profit membership association.

RIPE NCC Privacy Statement:
https://www.ripe.net/about-us/legal/ripe-ncc-privacy-statement