Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection



Stop Bad Bots, SPAM bots, Crawlers and spiders without DNS Cloud or API (EndPoint) Traffic Redirection and without slow down your site. No google penalties.

Bad bots consume bandwidth, put SPAM in your comments and contact form, slow down and overload your server and can hack your server, steal your content and look for vulnerability to compromise your server.

Stop Bad Bots is completely self-contained and does not need to connect to any outside API or service. No DNS, API or Cloud Traffic Redirection. No Slow Down Your Site!

No .htaccess neither robots.txt required.

When a bad bot try to open any your WordPress page we show a 403 Forbidden page. Then, in your statistics like webalizer or visitor metrics, for example, you can see status 403 (forbidden) and 0 bytes. For more details, visit our online guide and FAQ page.

You don’t need create robots.txt neither touch your .htaccess file.

  • Stop Bad Bots free Central provides a powerful and efficient way to manage the Stop Bad Bots configuration and pro license of many WordPress sites via a single interface.
  • Not using WordPress? Check out the free standalone PHP version of StopBadBots (also Docker)
  • Your Bad Bots Table is updated with periodic free online automatic updates
  • Premium Option with Firewall protection.
  • Premium Option with weekly automatic table updates from our server instead 3x year in free version.
  • Included also Bad Bots IP Table. The plugin can block also the bat bots by IP using fake or blank User Agent.
  • Included also Bad Bots Referer/Referral spam Table. More than 8.400 bad bots included
  • Included also Visits Log with Whitelist Button
  • Anti Hacker: Protect also Against Hacker Attacks (with free Anti Hacker Plugin extension)
  • Anti Spam: Protect also Comments Form from bad bots
  • Anti Spam: Protect also Contact Form 7 and WP Form Plugins from bad bots
  • Protect Login Form Against Bots and Brute force Attacks
  • Stop Data Thieves From Stealing You
  • More than 4800 Bots, 8400 bad referer/referral and 3300 bad IPs Included!
  • You Can Add more …
  • **No DNS or Cloud Traffic Redirection. No Slow Down Your Site! No Google penalties for slow sites.**
  • Block User Enumeration
  • Block PingBack Request
  • Limit Bot Visits (Rate Limiting) (Premium)
  • Whitelist Table (Premium)
  • Block HTTP tools table (Premium)
  • **The Plugin doesn’t block main Google, Yahoo and Bing (Microsoft) bots.**
  • Easy to manage the list. You can add more bots, IPs and referrer or deactivate any bot
  • Save bandwidth.
  • Optionally receive an email alert
  • Block False Google/Microsoft Bots (Premium Version)
  • Block ahrefs
  • Block semrush

Demo Video
Premium Version Available
Online Documentation
StartUp Guide
FAQ Page
Plugin Site
Compatible With Anti Hacker Plugin
Share 🙂

reCAPTCHA V3 for all pages of your site

If you want protect ALL pages of yoursite with invisible reCAPTCHA, try this new free plugin:
reCAPTCHA For All free plugin
Block spammers, hackers, crawlers, spiders and malicious traffic.

Block visitors from China, Cuba and North Korea

If you are getting a lot of spam and malicious traffic from China, Cuba and North Korea, with our plugin
you can block them without worry about install (and mantain) huge databases of IP address.
Just let our plugin take care that (Premium).

Ban spammers, crawlers, spiders, hackers and bad behavior

This plugin let you ban users by IP, user agent and referrer url.

Anti Hacker Protection

If you want protect ALL pages of yoursite against hackers and their bots, try this free plugin:
Anti Hacker free plugin

  • Prevent unauthorized access to your account by protect your login page also against bots and brute force.
  • Firewall to Block Malicious Requests, Queries, User Agents and URLS. 100% Plug-n-play, no configuration required.
  • View Table of the Blocked Visits and add IP to Whitelist from table and logs failed login attempts.
  • Option to disable Json WordPress Rest API (also new WordPress 4.7 Rest API) or disable WordPress Rest API (disable WordPress API)
  • You can also disable the WordPress xml-rpc (xmlrpc) (or disable only Pingback) API with just one click.
  • You can turn on login alerts with just one click. Also login fails alert.
  • Send alert email when any new plugin is installed. (First thing hackers do when gain access to your site)
  • Send email alert when AntiHacker plugin in deactivated.
  • WordPress Debug enabled warning.
  • Disable file editing within the WordPress dashboard.
  • Replace insecure login error message.
  • Hide WordPress version number.
  • Disable Application Passwords: Block external applications to request permission to connect to a site and generate a password (WordPress 5.6 new feature)
  • Limit Visits, Limit Bots Attempts (Premium Version)
  • limit only 404 requests (Premium Version)
  • Check Google Safe Browsing Blacklist
  • Check and alert for deactivated Plugins and themes
  • Check and alert for extra files and dangerous files on root folder.
  • Multilingual ready.
  • Disable WordPress native sitemap (for user’s) creation.
  • Disable xml-rpc
  • Disable Pingback

    Malware Scanner

  • Security Malware scanner (one click scan) for 797 malwares also in free version (unlimited files).
  • 7 speed options to scan and the scan run on your local computer to not overload your server.
  • Scans every folder and inspects every file on a website (deep scanner) for traces of malware, exploits, trojans, worms, viruses, backdoors as well as JavaScript code obfuscation, exploits, malicious iframes, malicious code injection, malicious code obfuscation, auto-generated malicious content, redirects, hidden eval code and more.
  • Scan all Pages, Posts and Comments against malwares.
  • Alert for plugins and themes without updates for long time or with old versions.
  • Scan your site now before Google blacklists it or your web host takes it down.


  • User enumeration. (is one of the most popular attacks to identify the valid user names)
  • Comments in media page.
  • Bad Queries.* Block All Feeds (Optional).
  • Creation of new Administrators from plugins and themes with vulnerabilities.
  • False Google and Bing (MSN) bots (Premium Version)
  • Search for Theme’s vulnerabilities (Premium Version)
  • Search for Plugin’s vulnerabilities (Premium Version)
  • Tor (The Onion Router) Traffic – Optional – (Premium Version) Tor anonymity provides value to online attackers.
  • HTTP Tools (you can manage the strings)
  • Blank User Agent

Analytics Spam Referrals

This plugin is not about Analytics Spam referrals.
For more details about that, please, visit our FAQ page:
and look for Analytics SPAM referral

Note: If you use the plugin WPFastestCache, looks like they use a bot named “test”.
In this case, you need deactivate this bot in our table. (Dashboard => Stop Bad Bots => Bad Bots Table)
After activate, check the bot’s table frequently, especially in the first days.

Check also the Block Visits Log. You will find one Whitelist button there.

Confirm if you want block all that bots.

Maybe you want unblock Baidu, Yandex, Seznam or another search engine in your language or some social sites, if they are usefull for you.
If you use RSS FEED service, probably they have their bot to read your feeds.Remember to deactivate their bot.
Same thing if you create some smartphone APP.StopBadBots it is a powerfull tool. Then, like all powerfull tools it is necessary to use with care and attention.

Free plugins from the same author:

Imagens de tela

  • Dashboard
  • Dashboard
  • Setting2 Page
  • Default Bot Table


1) Install via
2) Activate the plugin through the ‘Plugins’ menu in WordPress
Extract the zip file and just drop the contents in the wp-content/plugins/ directory of your WordPress installation and then activate the Plugin from Plugins page.


How to Install?
1) Install via
2) Activate the plugin through the ‘Plugins’ menu in WordPress
Extract the zip file and just drop the contents in the wp-content/plugins/ directory of your WordPress installation and then activate the Plugin from Plugins page.

Where is the Startup Guide?

Where is the OnLine Manual?

Where is the Faq page?

How can i get support?

Where is the demo video?
Demo Video


9 de setembro de 2021
This plugin was functioning good at first but later the site became inaccessible for me. After futher investigation I found out it was stopbadbots plugin that prevented access. Had to switch it off completely.
12 de agosto de 2021
I used to received a lot of scam/ad emails, but after installing StopBadBots, they are not bothering me anymore.
30 de julho de 2021
Sometime plugin crash and caused 500 http status error. Gave up on using plugin. Currently using htaccess directly for lighter and easier solution.
23 de maio de 2021
I was desperately trying to save my WP website in the beginning with my hosting's help against the relentless attacks of the intruders by brute force login. At first, without my knowledge, they successfully steal my website and I can not log in to it suddenly. After gaining back the login entry to my site I discovered I was no longer the user of my site it goes by another name. Through my hosting, they were able to take back the ownership of my website from the hands of the intruder for me. After that, they keep on trying to gain entry and blocking me not to be able to log in but my hosting was very helpful to assist me to enable me to log in.. Until I used the Stop Bad bots plugin plus for full protection, I also add the Anti Hacker premium both from the same company. Now I am back to confidence because the fear of losing my website from the intruders is gone. Though still keep trying to gain entry relentlessly by bots brute-force login but Stop Bad bots is knocking them away. Thank you Bill Minozzi. You have an excellent service of your product even though Stop Bad Bot is for free it works amazing.
26 de fevereiro de 2021
Think I recognized a spike in performance. And I see a ton of blocked request from useless resource vampire bots.
Leia todas as 87 avaliações

Colaboradores e desenvolvedores

“Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection” é um software com código aberto. As seguintes pessoas contribuíram para este plugin.


“Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection” foi traduzido para 1 localização. Agradecemos aos tradutores por suas contribuições.

Traduzir “Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection” para o seu idioma.

Interessado no desenvolvimento?

Navegue pelo código, dê uma olhada no repositório SVN ou assine o registro de desenvolvimento via RSS.

Registro de alterações

6.77 – 2022-01-04 Minor Improvements
6.76 – 2021-12-29 Minor Improvements
6.75 – 2021-12-29 Minor Improvements
6.74 – 2021-12-29 Minor Improvements
6.73 – 2021-12-29 Minor Improvements
6.72 – 2021-12-05 improved Help system
6.71 – 2021-11-08 improved Help system
6.70 – 2021-11-08 improved security
6.69 – 2021-10-19 improved Help
6.68 – 2021-10-19 improved Help
6.67 – 2021-10-13 improved security
6.66 – 2021-09-29 Fixed Smal Bug in Menu
6.65 – 2021-09-27 Minor Improvements.
6.64 – 2021-09-27 Minor Improvements.
6.63 – 2021-08-24 Improved security.
6.62 – 2021-08-23 Improved security, updated bootstrap and other minor improvements.
6.61 – 2021-08-17 Improved security in Tables pages.
6.60 – 2021-08-02 Security Improvements.
6.59 – 2021-08-02 Minor Improvements to avoid error 500 on some hosting.
6.58 – 2021-07-13 Added 3 options to block engine management.
6.57 – 2021-07-06 Improved fake browser filter.
6.56 – 2021-06-28 Fixed problem with WordPress missing function wp_get_current_user()
6.55 – 2021-06-28 Added Block by country (China, Cuba, North Korea), Improved bots filter and compatibility with jatpack.
6.54 – 2021-06-27 Improved block of fake browser.
6.53 – 2021-06-24 Minor Bug Fixed.
6.52 – 2021-06-24 Minor Bug Fixed.
6.51 – 2021-06-24 Minor Bug Fixed.
6.50 – 2021-06-24 Added block for fake browser.
6.40 – 2021-06-11 Force WordPress to load plugin.php if not loaded.
6.39 – 2021-06-11 Minor Improvements and new extension (reCAPTCHA for All).
6.38 – 2021-05-31 Improved HTTP Tools and minor other things.
6.37 – 2021-05-12 Removed warning from central.
6.36 – 2021-05-10 Removed CORS header to avoid PHP warning.
6.35 – 2021-05-03 Problem to upload last version.
6.34 – 2021-05-03 Minor Improvements.
6.33 – 2021-05-02 Fixed Minor Bug Error in Functions Line 311
6.32 – 2021-04-27 Added Central to manage many sites.
6.31 – 2021-04-09 Improved charts and Removed Version check.
6.30 – 2021-04-09 Improved Whitelist.
6.29 – 2021-04-06 Improved email Notifications.
6.28 – 2021-04-06 Improved Notifications.
6.27 – 2021-03-29 Improved HTTP Tools.
6.26 – 2021-03-04 Improvements Update of HTTP tools.
6.25 – 2021-03-04 Improvements at HTTP tools.
6.24 – 2021-03-04 Minor Improvements
6.23 – 2021-01-12 Increased Max Execution side to 60, if is minor than 60
6.22 – 2020-12-29 Optimized query.
6.21 – 2020-12-21 Optimized query and added visitors log time control.
6.20 – 2020-12-10 Improved Hacker Block and add more http tools.
6.19 – 2020-11-17 Fixed Improved activation time.
6.18 – 2020-11-11 Fixed Issue with auto update.
6.17 – 2020-11-11 Fixed Issue to Upload to WP Servers.
6.16 – 2020-11-11 Minor improvements.
6.15 – 2020-11-04 Added more BadIps and Bad referrer and other improvements.
6.14 – 2020-10-27 Added Report of Visits Log with whitelist Button
6.13 – 2020-10-14 Minor Improvements.
6.12 – 2020-10-12 Improved dismiss banners button.
6.11 – 2020-08-23 Improved Cron Jobs to keep databases small.
6.10 – 2020-07-21 Fix Uninstall to remove all tables.
6.09 – 2020-07-10 Fix the CloudFlare wrong IP.
6.08 – 2020-04-09 Fix small bug in functions PHP with customized prefix.
6.07 – 2020-04-01 Small Improvements
6.06 – 2020-02-14 Create table fingerprint if not exists
6.05 – 2020-02-10 Improved queries
6.04 – 2020-02-09 Fixed small bug in Cron Jobs
6.03 – 2020-02-08 Small Improvements
6.02 – 2020-01-11 Reinforce the Status code 403 to blocked bots.
6.01 – 2020-01-10 Small Improvements
6.00 – 2020-01-02 Adde Whitelist, Block HTTP tools, Limit Boat Visits, Automatic Plugin Upgrade Option,
Improved Dashboard.
5.59 – 2019-12-22 Improved Memory Management.
5.58 – 2019-12-10 Fixed missed graph file on Dashboard.
5.57 – 2019-12-10 Improved Dashboard.
5.56 – 2019-11-20 Added protection against spam for WP Forms Plugin.
5.55 – 2019-11-11 Added protection against spam for Contact Form 7 Plugin and Comments Form.
5.54 – 2019-11-01 Added protection against spammers.
5.53 – 2019-10-22 False Google Bot check included.
5.52 – 2019-09-10 Improved Help.
5.51 – 2019-09-02 Added User Enumeration and PingBack Request Block.
5.50 – 2019-08-06 Problem to upload previous version.
5.49 – 2019-08-06 Improved speed.
5.48 – 2019-07-11 Improved Compatibility with anothers plugins.
5.47 – 2019-07-04 Prevent zlib warning when debug is active.
5.46 – 2019-07-04 Problem to Upload previous version to WordPress.
5.45 – 2019-07-04 Prevent zlib warning when debug is active.
5.44 – 2019-06-28 Improved Bad Ip Block System
5.43 – 2019-04-17 Improved Site Health information.
5.42 – 2019-04-02 Added block tool to Empty User Agents, Test Mode Status, improved low memory messages and link to setting in plugins page.
5.41 – 2019-03-23 Improved Low Memory Messages.
5.40 – 2019-03-20 Saved some scripts only with Linux end of line and removed windows end of line.
5.39 – 2019-03-13 Improved Low Memory Fix System.
5.38 – 2019-03-05 Load quickly pluggable.php.
5.37 – 2019-03-05 Improved Multisite with super_admin control.
5.36 – 2019-03-01 Improved Dashboard.
5.35 – 2019-02-27 Added Tol to Fix the low memory issue of the site with one click.
5.34 – 2019-02-18 Included Table Bad Referer/referral.
5.33 – 2019-02-13 Table Optimizations 3.
5.32 – 2019-02-12 Table Optimizations 2.
5.31 – 2019-02-12 Table Optimizations.
5.30 – 2019-02-12 Added more 605 bad ips.
5.29 – 2019-02-12 Added more 1050 bots.
5.28 – 2019-01-17 Begin to show 403 Forbidden page to blocked bots.
5.27 – 2019-01-03 Improved Firewall Notifications.
5.26 – 2019-01-02 Improved Firewall Notifications.
5.25 – 2019-01-01 Improved Dashboard Notifications.
5.24 – 2019-01-01 Improved Dashboard Notifications.
5.23 – 2018-12-26 Added Firewall to Pro Version.
5.22 – 2018-12-16 Improved Performance.
5.21 – 2018-12-04 Improved Performance.
5.20 – 2018-11-30 Improved Performance.
5.19 – 2018-11-26 Improvement (dashboard-Layout).
5.18 – 2018-11-22 Improvement (dashboard-Layout).
5.17 – 2018-11-01 Improvement (dashboard-Layout).
5.16 – 2018-10-29 Improvement (dashboard-Layout).
5.15 – 2018-10-28 Stats improvement (graph).
5.14 – 2018-10-28 Included new dashboard.
5.13 – 2018-10-25 Minor bug fixed.
5.12 – 2018-10-25 Minor bug fixed.
5.11 – 2018-10-24 Improved Stats.
5.10 – 2018-10-22 Engine Improvements.
5.09 – 2018-10-11 Start Up Guide Improvements.
5.08 – 2018-10-07 Help Improvements.
5.05 to 5.07 – 2018-10-04 Help Improvements.
5.01 to 5.04 2018-09-21- Small improvements.
5.00 2018-09-14- Included IPs Table.
4.80 2018-09-04- Improved Help and design.
4.79 2018-08-08- Improved Help.
4.78 2018-05-07- Improved low memory checkup and warning.
4.77 2018-03-21- Don’t empty bots table when updated or restarted.
4.76 2018-03-20- Improved bot filter.
4.75 2018-03-13- Minor bug fixed in functions.php.
4.74 2018-03-13- Improved Security.
4.73 2018-01-05- Improved Security.
4.72 2018-01-05- Improved Security.
4.71 2017-12-23- Improved Help.
4.7 2017-12-13 – Removed Debug Notice.
4.6 2017-12-10 – Fixed Minor Bug when update Version to save disabled bots status.
4.5 2017-12-09 – Fixed Minor Bug in activate /deactivate bots.
4.4 2017-12-09 – Improved Security.
4.3 2017-12-07 – Improved Help.
4.2 2017-12-06 – Improved Security.
4.1 2017-12-06 – Internal development.
4.0 2017-11-02 – Created Premium Version with weekly database updates.
3.9 2017-10-31 – Improved speed, removed inactive bots from table.
3.8 2017-08-15 – Help and Feedback improved.
3.7 2017-06-06 – Improved Memory optimization.
3.6 2017-06-05 – Improved Start Up Guide and tested with WordPress 4.8
3.5 2017-06-01 – Add Memory Diagnose Tab.
3.4 2017-05-30 – Improved memory usage and replaced around 300 inactive bots with new actives.
3.3 2017-05-05 – Help text Improvements.
3.2 2017-05-04 – Help Improvements.
3.1 2017-05-03 – Force system to upload new bots
3.0 2017-05-02 – Add more than 1500 new bots bots
2.7 2017-04-12 – Feedback System Improvements
2.6 2017-04-04 – Plugin Management Dashboard Improvements
2.5 2017-04-03 – Night – We got some problem to upload version 2.4 to server, then, we decide created a new one.
2.4 2017-04-03 – Afternoon – Improved Management Panel and Security.
2.3 2017-04-03 – Morning – Start Up Guide Updated and security improvements.
2.2 2017-03-11 – Improvements at Help System and Navigation.
2.1 2017-01-24 – Improvements at bots table and Included help file (english).
2.0 2017-01-15 – Included Bad bot’s table online automatic update and My bad bots table merged with Bot’s table.
1.7 2017-01-05 – Help and get ip improvements.
1.6 2016-12-05 – Tested with WordPress 4.7
1.5 2016-08-16 – Removed Warning Message when WordPress Debug is true
1.4 2016-08-05 – Add Screen Options at bots table and readme.txt message was tested with WordPress 4.6.
1.3 2016-07-28 – Add column Num Blocked at Bad Bots Table. (How many times each bot was blocked)
1.2 2016-07-01 – Improved email notification system.
1.1 2016-05-27 – Add more than 700 new bad bots and included search featured at bad bots table.
1.0 2016-05-13 – Initial Release