Anti Browser DDoS Protection for WordPress

The Anti Browser DDoS Protection plugin provides robust protection against denial-of-service (DoS) attacks on your WordPress site. It implements IP-based rate limiting, with configurable settings for subscribers, non-logged-in users, and verified bots, while excluding administrators and other non-subscriber roles. It features advanced bot detection to identify and limit suspicious bots, immediate blocking of malicious bots by User Agent, and supports Cloudflare for accurate client IP detection. Static assets (e.g., CSS, JS, images) are excluded to maintain site performance. An intuitive admin panel allows you to configure rate limits, bot exclusions, trusted bot IP ranges (with automatic duplicate removal), blocked bots by User Agent, log expiration settings, and view logs for blocked IPs, banned IPs, and high traffic bots with auto-refresh every 30 seconds, all with User Agent details and timestamps. You can export Excluded Bots, Bot IP Ranges, and Blocked Bots lists to .txt files and import new entries to append to existing lists without duplicates. Daily bar charts for Blocked IPs, Banned IPs, and High Traffic Bots are displayed above the logs for quick visual insights.

Key Features:

Rate limiting based on IP for subscribers and non-logged-in users, with configurable maximum requests and time window.

Excludes non-subscriber logged-in users (e.g., administrators, editors) from rate limiting.

Advanced bot detection to identify suspicious bots (bots using trusted User Agents but from unverified IPs).

Suspicious bots are subject to the same rate limiting as regular users and logged with User Agent in the Blocked IPs Log.

Immediate blocking of malicious bots by User Agent (e.g., MJ12bot, SemrushBot, DotBot by default) with customizable settings and logging.

Configurable rate limiting for verified excluded bots (default: 100 requests per minute), with logging for bots exceeding this limit.