BotZoom

Every website is visited daily by bots that look for leaks: forgotten backups, .env files, exposed Git folders, old admin tools and weak passwords. BotZoom recognises these bots and blocks them before they find anything.

What the free version does

• Blocks IPs that request files only attackers look for, such as .env, .git, wp-config.php backups and database dumps.
• Blocks known scan and attack tools such as sqlmap, Nikto and WPScan.
• Stops brute-force attacks on the login page and XML-RPC.
• Stops bots that hammer your site with requests for pages that do not exist (404 flood).
• Keeps a local log and lets you block or unblock IP addresses yourself.
• Never blocks logged-in users or verified search engines (Google, Bing, Apple, Yandex, DuckDuckGo), so your SEO is safe.
• Everything runs on your own site. Nothing is sent to an external service.

BotZoom Pro

BotZoom Pro connects all your websites to one central panel: WordPress, Joomla and other PHP sites. An IP that attacks one of your sites is blocked on all of them, suspicious IPs are checked against AbuseIPDB and blocks are applied at server level, before WordPress even loads. Read more at botzoom.nl.

BotZoom is made by WNED, a Dutch web hosting company.