Title: Banhammer – Monitor Site Traffic, Block Bad Users and Bots Author: Jeff Starr Published: 2018 年 1 月 19 日 Last modified: 2026 年 3 月 27 日 --- 搜尋外掛 ![](https://ps.w.org/banhammer/assets/icon-256x256.png?rev=2798558) # Banhammer – Monitor Site Traffic, Block Bad Users and Bots 由 [Jeff Starr](https://profiles.wordpress.org/specialk/) 開發 [下載](https://downloads.wordpress.org/plugin/banhammer.3.5.1.zip) * [詳細資料](https://tw.wordpress.org/plugins/banhammer/#description) * [使用者評論](https://tw.wordpress.org/plugins/banhammer/#reviews) * [安裝方式](https://tw.wordpress.org/plugins/banhammer/#installation) * [開發資訊](https://tw.wordpress.org/plugins/banhammer/#developers) [技術支援](https://wordpress.org/support/plugin/banhammer/) ## 外掛說明 > ⚡ Banhammer: Protect your site against enemy hordes! Banhammer gives you full control over who and what may access your site. Visit the Armory to monitor traffic and review suspicious visitors. If you find some user or bot that is causing problems, you can ban them with a click. Or, if you just want to keep an eye on someone, you can flag them with a warning. Any banned users will be denied access to your site, until you restore access via the Tower. Check out the video and screenshots to get a better idea of how it works. > 👉 Important: Not yet compatible with WP Multisite! **Core Features** * Ban or Warn any WP user or IP address * Restore access to any banned targets * Monitor site traffic in the Armory * Monitor logged users in the Admin Area * Monitor all visitors on the front-end * Manage banned targets in the Tower * Complete Ajax-powered navigation * Useful tools like jump, sort, search * Complete documentation via Help tab * Automatically clear logged data * Sound effects for Ban, Warn, et al * NEW: manually block any IP address **Options Galore** * Optionally ignore logged-in users * Optionally protect Login Page and Admin Area * Customize the banned response and status code * Display banned message or redirect the request * Choose the interval to clear logged data * One-click restore plugin default options * All collected data may be deleted easily **More Features** * Easy to use * Clean code * Fast and secure * Built with WP API * Lightweight and flexible * Regularly updated and “future proof” * Works great with any WordPress theme * Comprehensive search of all logged data * Works great with other WordPress plugins * Works with or without Gutenberg Block Editor * Focused on usability, performance, and security Banhammer is perfect for site owners, admins, and developers who want to keep an eye on traffic and block any unwanted visitors. It is a simple, flexible, and powerful security solution. Perfect for the best WordPress sites. **Exclusive Features in Pro Version** * Ban based on URI request, referrer, or user agent * Whitelist any IP address or user agent * View cookies, POST data, and FILES data * Email Alerts for banned & warned requests * Display custom message to each banned target * Add private notes to warned/banned targets * Customize target strings for user agents, IPs, etc. * Disable logging of banned, warned, and whitelisted targets * Smart bot detection * Paged results in Tower * User avatars in Tower For complete documentation, visit the Help tab on any Banhammer screen. > ⚡ [Banhammer Pro now available »](https://plugin-planet.com/banhammer-pro/) **Privacy** **User Data:** Banhammer collects user data to “do its thing”. The collected data is temporary and automatically deleted every day, or at whatever time interval is specified in the plugin settings. The only time that any data is “remembered” is when you ban something. For each person/thing that you ban, the plugin stores either the IP address OR the username (never both). At any time, all saved data may be deleted permanently via the plugin settings and Armory Tools. **Cookies:** Banhammer does not set any cookies for regular visitors, but does set a few simple cookies for admin-level users. These simple cookies enable dope effects and interactivity in the Armory and Tower UI. But no cookies are set or used for any other visitor/user or purpose. **Services:** Banhammer uses a free lookup service for GeoIP information. This happens only for admin-level users when they are viewing data in the Armory or Tower. No other third-party services are used by this plugin. Banhammer is developed and maintained by [Jeff Starr](https://x.com/perishable), 15-year [WordPress developer](https://plugin-planet.com/) and [book author](https://books.perishablepress.com/). **Support development** I develop and maintain this free plugin with love for the WordPress community. To show support, you can [make a donation](https://monzillamedia.com/donate.html) or purchase one of my books: * [The Tao of WordPress](https://wp-tao.com/) * [Digging into WordPress](https://digwp.com/) * [.htaccess made easy](https://htaccessbook.com/) * [WordPress Themes In Depth](https://wp-tao.com/wordpress-themes-book/) * [Wizard’s SQL Recipes for WordPress](https://books.perishablepress.com/downloads/wizards-collection-sql-recipes-wordpress/) And/or purchase one of my premium WordPress plugins: * [BBQ Pro](https://plugin-planet.com/bbq-pro/) – Blazing fast WordPress firewall * [Blackhole Pro](https://plugin-planet.com/blackhole-pro/) – Automatically block bad bots * [Banhammer Pro](https://plugin-planet.com/banhammer-pro/) – Monitor traffic and ban the bad guys * [GA Google Analytics Pro](https://plugin-planet.com/ga-google-analytics-pro/)– Connect WordPress to Google Analytics * [Head Meta Pro](https://plugin-planet.com/head-meta-pro/) – Ultimate Meta Tags for WordPress * [Simple Ajax Chat Pro](https://plugin-planet.com/simple-ajax-chat-pro/) – Unlimited chat rooms * [USP Pro](https://plugin-planet.com/usp-pro/) – Unlimited front-end forms Links, tweets and likes also appreciated. Thank you! 🙂 ## 螢幕擷圖 * [[ * Banhammer Settings (showing default options) * [[ * Banhammer Armory (showing basic view) * [[ * Banhammer Armory (showing advanced view) * [[ * Banhammer Armory (showing more tools) * [[ * Banhammer Tower * [[ * Default banned message (can customize via settings) * [[ * Help tabs! (available on all Banhammer screens) ## 安裝方式 **Important: PHP Requirement** Before installing, make sure your server has either `cURL` or `file_get_contents()` enabled. Banhammer requires at least one of these functions to do its thing. **Install Banhammer** 1. Upload the plugin and activate 2. Configure the plugin settings as desired 3. Visit the Armory to monitor traffic and ban/warn any unwanted visitors 4. Visit the Tower to manage any banned/warned targets [More info on installing WP plugins](https://wordpress.org/documentation/article/manage-plugins/#installing-plugins-1) **Caching Plugins** Banhammer works with any type of caching plugin where “page caching” is not enabled. There are many types of cache plugins. They provide all sorts of different caching mechanisms and features. All caching features work great with Banhammer except for“ page caching”. With page caching, the required WP `init` hook may not be fired, which means that plugins like Banhammer are not able to log and ban requests dynamically. Fortunately, some of the most popular caching plugins provide settings that enable full compatibility with Banhammer. For a complete list, check out [this article](https://plugin-planet.com/blackhole-pro-cache-plugins/). Note: that article was written for [Blackhole Pro](https://plugin-planet.com/blackhole-pro/), but the compatibility list and general info apply also to Banhammer. **Use Banhammer** Banhammer enables you to monitor traffic and ban any user or bot. To view your site’s traffic, visit the Armory. There you can ban or warn (flag) anything you wish. Once you have banned something, it will be locked in the Tower, where you can manage all banned users and bots. Banhammer is designed to be as intuitive as possible, and provides complete documentation via the Help tab on any Banhammer screen. There are three plugin screens: * Settings – configure options * Armory – monitor site traffic * Tower – manage banned visitors So after configuring options, visit the Armory to monitor site traffic. If you see a visitor that should be banned, click the hammer button to ban them immediately. Or, if you just want to keep an eye on someone, click the horn button to issue a warning. After banning or warning your target, you can visit the Tower to manage as desired. There you can ban, warn, restore, or delete any target with a click. For complete documentation, visit the Help tab of any Banhammer screen. If anything is unclear or if you find a bug, you can [drop a line](https://plugin-planet.com/support/#contact) via my contact form. _+ [Check out Banhammer Pro »](https://plugin-planet.com/banhammer-pro/)_ **With great power..** Please be careful not to ban any important IP addresses. Before banning some target, verify the IP and host name. Verifying the IP address is important because you do not want to accidentally ban major search engines and services. A good way to verify any IP address is to do a reverse lookup. The result should match the host name. For an example of how to verify a bot, check out [this article](https://perishablepress.com/spoofed-search-engine-bot/) at Perishable Press. _Pro Tip: In the Armory, you can click on the IP Address or Host Name to do a quick whois lookup._ **Important! Don’t ban yourself!** Please be careful not to ban yourself when using Banhammer. The Basic Settings are powerful; use them wisely. Here are some things that can help mitigate any accidents: * Be mindful when monitoring traffic; always know your own IP address and WP username. * Disable the setting “Login Page”, so you always have access to the Login Page. * Enable the setting “Ignore Users”, so you always can access the Tower, and your own visits will not be logged in the Armory. **Whoops! How do I get back in?** It’s almost inevitable. Worst-case scenario say you accidentally ban yourself. As site admin, it is easy to restore access. Follow these steps: 1. [Download the Banhammer Unlock plugin](https://plugin-planet.com/wp/addons/banhammer-unlock.zip) 2. Upload the Unlock plugin to your server at: `/wp-content/mu-plugins/` 3. If the mu-plugins directory does not exist, go ahead and create it 4. After uploading the plugin, Banhammer will be disabled, so you can log in and restore access via the Tower 5. Once you have restored access, delete the Banhammer Unlock plugin from the server 6. After deleting the Unlock plugin, Banhammer once again will be enabled Alternately, if you banned yourself by IP address, you can bypass the ban by using a trustworthy proxy service to log in to your site. **Testing** How do you know if the plugin is working? Like if you want to customize the banned response? Well, there are several ways to go about it. Method One (easiest): Configure the following Banhammer settings: * Enable Plugin – enable * Ignore Users – disable * Login Page – disable * Admin Area – disable After saving the changes, you will be able to ban your own visits to the front-end( non-admin) pages on your site, without actually banning yourself from the Admin Area or Login Page. Just remember to restore access via the Tower when you are finished testing. Method Two (moderate): Create a new WordPress user and log in using a second browser. Then as you surf around the site, you can monitor and ban the user via the first browser. Method Three (advanced): Open two browser tabs. Tab 1 is the Armory. Tab 2 is a good proxy service. With Banhammer enabled, visit your site’s homepage via proxy. Then jump over to the Armory and ban the proxy IP address. Then retry the proxy visit to the homepage; it should be denied access. Remember to restore access or delete the banned IP via the Tower when finished testing. **Manually Add IP Address** If you want to ban some IP that has not yet visited your site, you can do so by entering the following URL in your browser’s address bar: ``` https://example.com/wp-admin/?banhammer-key=[KEY]&banhammer-ip=[IP] ``` Replace the following: * Replace [KEY] with your “Target Key” * Replace [IP] with the IP you want to block * Replace `example.com` with your own domain Note: You can find your Target Key in Banhammer Advanced settings. For more info about adding targets, visit the Help tab on the Settings page. _Important! Never share your Target Key, always keep it secret._ **Auto-Clear Data** To prevent collected data from filling up the database, Banhammer automatically clears all Armory data at regular intervals. By default, the interval is 24 hours. So every 24 hours, the Armory data will be flushed, and fresh data will be collected. Of course, any banned targets will remain banned and available in the Tower. To change the auto-clear interval, check out the “Reset Armory” setting. Visit the Armory Help tab for more details. **Performance Tip!** The first time a logged entry is displayed in the Armory, additional data are fetched behind the scenes. So as you navigate pages, you may notice that pages containing new entries take a bit more time to load. Subsequent views should be nice and speedy via Ajax. So with that in mind, it is optimal for performance to keep the number of items per page to a minimum. Try to keep it anywhere under 10 or so and you should be good. To change the number of entries displayed per page, click “Tools” and go to “Display [x] rows”. **Basic View vs. Advanced View** Under the Tools menu you can toggle between “Basic view” and “Advanced view”. Basic view gives you a streamlined summary. Advanced view gives you complete data for each entry. Note that you can toggle each entry individually between Basic and Advanced. So for example, you can monitor traffic in Basic view, and then toggle open (double- click) any entry that may need banning. The default is Advanced view. **Sound Effects!** Banhammer sound effects can be enabled by clicking “Tools” and then “Enable sound fx”. When enabled, the sounds will be played whenever an action button is clicked. This includes the Ban, Warn, Restore, and Delete buttons. The Armory provides Ban and Warn buttons. The Tower provides all four. Note that enabling sound fx in the Armory applies to the Tower as well. Note that the sound effects are a work in progress. Finding quality open source audio is challenging. If you are able to contribute better effects, please let me know. And of course, the sound effects can be disabled entirely by clicking “Disable sound fx”. **License for Sound Effects** Audio used in plugin * [Explosion sound by steveygos93](https://freesound.org/s/80401/): [Attribution 3.0 Unported (CC BY 3.0)](https://creativecommons.org/licenses/by/3.0/) * [Inception Horn sound by Kubatko](https://freesound.org/s/196584/): [CC0 1.0 Universal (CC0 1.0)](https://creativecommons.org/publicdomain/zero/1.0/) * [Shield Guard sound by nekoninja](https://freesound.org/s/370203/): [CC0 1.0 Universal (CC0 1.0)](https://creativecommons.org/publicdomain/zero/1.0/) * [Lettuce Chopping sound by danloss](https://freesound.org/s/412531/): [CC0 1.0 Universal (CC0 1.0)](https://creativecommons.org/publicdomain/zero/1.0/) Audio used in promos * [War Drum Loop by limetoe](https://freesound.org/s/274223/): [CC0 1.0 Universal (CC0 1.0)](https://creativecommons.org/publicdomain/zero/1.0/) * [Warrior Drums by Sclolex](https://freesound.org/s/209546/): [CC0 1.0 Universal (CC0 1.0)](https://creativecommons.org/publicdomain/zero/1.0/) **Uninstalling** This plugin cleans up after itself. All plugin settings and data will be removed from the WordPress database when the plugin is deleted via the WP Plugins screen. **Like the plugin?** If you like Banhammer, please take a moment to [give a 5-star rating](https://wordpress.org/support/plugin/banhammer/reviews/?rate=5#new-post). It helps to keep development and support going strong. Thank you! ## 常見問題集 ### Will this plugin slow down my site? No, Banhammer is developed with a focus on performance, so your site will be as fast as possible. For example, Banhammer does all of its “heavy lifting” of data only when the admin is viewing the Armory, so normal site traffic remains as fast as possible. This is why the first pass thru the Armory data can take a second or two longer than subsequent passes; Banhammer is looking up Geo/IP information, hostname information, and also performing other important tasks only when the admin is viewing the Armory. ### I can’t change the Row Limit setting? To change the Row Limit, enter a number and then press the Enter key on your keyboard. For more information about Row Limits, click the Help tab on the plugin settings page. ### What are Protect Login Page and Admin Area options? In the Banhammer settings, there are two options: * Login Page – Protect WP Login Page * Admin Area – Protect WP Admin Area When enabled these options tell Banhammer to include the Login Page and Admin Area, respectively. It means that Banhammer will monitor requests made to the Login Page and Admin Area, and block anything that you’ve told it to block. Otherwise only the frontend pages are protected. Conversely, when these options are disabled, Banhammer will ignore the Login Page and/or Admin Area. Further explanation: with WordPress, there is the frontend (like homepage, posts and pages, etc.). Then there also are all the admin-related pages, commonly referred to as the Admin Area. This is what is covered by the “Admin Area” option. Likewise with the Login Page, located at `/wp-login.php`, that is what the “Login Page” option refers to. ### Got a question? Send any questions or feedback via my [contact form](https://plugin-planet.com/support/#contact) ## 使用者評論 ![](https://secure.gravatar.com/avatar/3bec4203837a616c67b3d61e5d62fbf9fec624d35db2236c80a2b92d160c8183? s=60&d=retro&r=g) ### 󠀁[Awesome Sauce!](https://wordpress.org/support/topic/awesome-sauce-41/)󠁿 [sadduck](https://profiles.wordpress.org/sadduck/) 2025 年 3 月 24 日 Installs and configures very easy. Works like a champ! Love the way it’s broken down between the Armory and the Tower! Easy to monitor and see what’s happening or to look back at who’s banned and easily change their status if needed. Very pleased and would highly recommend this plugin to anyone needing the extra security. ![](https://secure.gravatar.com/avatar/8cb7dec3bb96c6a4d92a9e9f3f4bb90073ccbaa2260e4c8fe1a570cbd89bc350? s=60&d=retro&r=g) ### 󠀁[Free version is excellent, Pro is not very good](https://wordpress.org/support/topic/free-version-is-excellent-pro-is-not-very-good/)󠁿 [90demi](https://profiles.wordpress.org/90demi/) 2024 年 3 月 5 日 The free version is very good. It is more fun than processing your server logs on command line. The Pro version is difficult to work with because it doesn’t have a search on the Tower. It also over whitelist many IPs that can be bad bots. I caught already a couple in less than one day. Also you cannot block useragents if they come under a proxy, the best you can do is copy and paste to something else that can block any useragent, like the excellent BBQ Pro. Manage on Tower sends you to the Tower but not the specific item, which you can’t find because no search on Tower. But free version is very very good. ![](https://secure.gravatar.com/avatar/dd635c55d3be28d55938079b6bcc1f46f6c6db24217a2c8b8819a6772a8e7c2d? s=60&d=retro&r=g) ### 󠀁[Excellent plugin](https://wordpress.org/support/topic/excellent-plugin-8852/)󠁿 [rotcod2009@gmail.com](https://profiles.wordpress.org/rotcod2009gmailcom/) 2023 年 10 月 20 日 I use this plugin daily – it works FLAWLESSLY! ![](https://secure.gravatar.com/avatar/3b2c458d6e0dc535f75ba4175f9bf0ed51e601dbb911f1ee9cfd0d42bf83745a? s=60&d=retro&r=g) ### 󠀁[Love this & all Jeff’s plugins](https://wordpress.org/support/topic/love-this-all-jeffs-plugins/)󠁿 [ericbonetti2017](https://profiles.wordpress.org/ericbonetti2017/) 2023 年 8 月 26 日 1 則留言 This is an awesome plugin, and like all Jeff’s plugins, beautifully crafted. But I do agree that a version that works with full-page caching would be awesome—as things stand, I can’t use it with my site. But it fulfills a big need, so I am looking forward to Jeff figuring out how to make this possible 🙂 ![](https://secure.gravatar.com/avatar/e9fbd101fe11070221e281c3a2b68291a6efa3f447d1493d24a93fd291877e83? s=60&d=retro&r=g) ### 󠀁[Not compatible with cache plugins](https://wordpress.org/support/topic/not-compatible-with-cache-plugins/)󠁿 [zepolo](https://profiles.wordpress.org/zepolo/) 2023 年 1 月 30 日 1 則留言  I bought the multi-site pro version. I think that Banhammer should be improved to be fully compatible with all cache plugins. Everybody use cache plugins for wordpress. ![](https://secure.gravatar.com/avatar/8d3e5d13112dedef4502946d76f1d433d170a8b7d28ec4d7726b3fa94fe9c1cf? s=60&d=retro&r=g) ### 󠀁[Perfect WordPress Ban and Security plugin](https://wordpress.org/support/topic/perfect-wordpress-ban-and-security-plugin/)󠁿 [Gomle](https://profiles.wordpress.org/gomle/) 2022 年 11 月 3 日 Awesome plugin – easy to use. Does what it is supposed to. I can recommend it! I’m using this plugin like so: See a list of all the ip’s visiting with flags that shows me what country they come from. I also see which internal pages they visit on my site. Then I either click the IP (right from the plugins list) to get more info about it, or I search the IP on abuseipdb to make sure it’s a bad IP. Then i click ONE button: BANHAMMER. And now, 0 requests from that ip in the future. Just how I like it. Perfect plugin from a well known developer in the wordpress community. [ 閱讀全部 18 則使用者評論 ](https://wordpress.org/support/plugin/banhammer/reviews/) ## 參與者及開發者 以下人員參與了開源軟體〈Banhammer – Monitor Site Traffic, Block Bad Users and Bots〉 的開發相關工作。 參與者 * [ Jeff Starr ](https://profiles.wordpress.org/specialk/) 〈Banhammer – Monitor Site Traffic, Block Bad Users and Bots〉外掛目前已有 1 個本地 化語言版本。 感謝[全部譯者](https://translate.wordpress.org/projects/wp-plugins/banhammer/contributors) 為這個外掛做出的貢獻。 [將〈Banhammer – Monitor Site Traffic, Block Bad Users and Bots〉外掛本地化為台灣繁體中文版](https://translate.wordpress.org/projects/wp-plugins/banhammer) ### 對開發相關資訊感興趣？ 任何人均可[瀏覽程式碼](https://plugins.trac.wordpress.org/browser/banhammer/)、查看 [SVN 存放庫](https://plugins.svn.wordpress.org/banhammer/)，或透過 [RSS](https://plugins.trac.wordpress.org/log/banhammer/?limit=100&mode=stop_on_copy&format=rss) 訂閱[開發記錄](https://plugins.trac.wordpress.org/log/banhammer/)。 ## 變更記錄 If you like Banhammer, please take a moment to [give a 5-star rating](https://wordpress.org/support/plugin/banhammer/reviews/?rate=5#new-post). It helps to keep development and support going strong. Thank you! **3.5.1 (2026/02/04)** * Updates plugin settings page * Improves readme.txt documentation * Generates new language template * Tests on PHP 8.4 and 8.5 * Tests on WordPress 6.9 + 7.0 (nightly) Full changelog @ [https://plugin-planet.com/wp/changelog/banhammer.txt](https://plugin-planet.com/wp/changelog/banhammer.txt) ## 中繼資料 * 版本 **3.5.1** * 最後更新 **2 週前** * 啟用安裝數 **1,000+** * WordPress 版本需求 ** 4.7 或更新版本 ** * 已測試相容的 WordPress 版本 **7.0** * PHP 版本需求 ** 5.6.20 或更新版本 ** * 語言 * [English (US)](https://wordpress.org/plugins/banhammer/) 及 [Korean](https://ko.wordpress.org/plugins/banhammer/). * [將這個外掛本地化為你的母語版本](https://translate.wordpress.org/projects/wp-plugins/banhammer) * 標籤 * [ban](https://tw.wordpress.org/plugins/tags/ban/)[block](https://tw.wordpress.org/plugins/tags/block/) [bots](https://tw.wordpress.org/plugins/tags/bots/)[monitor](https://tw.wordpress.org/plugins/tags/monitor/) [security](https://tw.wordpress.org/plugins/tags/security/) * [進階檢視](https://tw.wordpress.org/plugins/banhammer/advanced/) ## 評分 4.4 星，滿分為 5 星 * [ 12 個 5 星使用者評論 ](https://wordpress.org/support/plugin/banhammer/reviews/?filter=5) * [ 1 個 4 星使用者評論 ](https://wordpress.org/support/plugin/banhammer/reviews/?filter=4) * [ 5 個 3 星使用者評論 ](https://wordpress.org/support/plugin/banhammer/reviews/?filter=3) * [ 0 個 2 星使用者評論 ](https://wordpress.org/support/plugin/banhammer/reviews/?filter=2) * [ 0 個 1 星使用者評論 ](https://wordpress.org/support/plugin/banhammer/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/banhammer/reviews/#new-post) [查看全部使用者評論](https://wordpress.org/support/plugin/banhammer/reviews/) ## 參與者 * [ Jeff Starr ](https://profiles.wordpress.org/specialk/) ## 技術支援 最近 2 個月解決的問題: 總計 1 個問題，已解決 1 個 [檢視技術支援論壇](https://wordpress.org/support/plugin/banhammer/) ## 贊助 想要支援這個外掛的發展嗎？ [ 贊助這個外掛 ](https://monzillamedia.com/donate.html)