Anti-Brute Force, Login Fraud Detector WordPress plugin
Anti-Brute Force, Login Fraud Detector WordPress plugin is a security plugin that detects and blocks malicious IP addresses attempting to log into WordPress sites with real-time intelligence data from Criminal IP. Hackers attempting brute-force attacks on WordPress sites do not use normal IP addresses. Rather, they use VPN, Proxy, Tor, Hosting IP, etc. to avoid tracking. Criminal IP is an IP address-based intelligence search engine platform that scans worldwide IP addresses daily and collects such malicious information. The number of detectable login attempts varies depending on the plan being used by the connected Criminal IP account. Users of the Free membership plan can use up to 500 login IP detections per month for free. Block Login IP Address Options VPN IP – When attempting to log in using a VPN Tor IP – When attempting to log in from a Tor browser Proxy IP – When attempting to log in using Proxy Hosting IP – When attempting to log in from the IP address of a hosting server Additional Features Whitelist: Specific IP addresses can be added to the whitelist to allow login. Login Wait Time: Users who are eventually restricted from logging in can try again after the set login wait time. Blocked IP List: Allows you to view a list of all IP addresses subject to login restrictions. The items that may be seen are as follows. IP address Geographic Information (Country) Reason for Login Restriction (Tor/VPN/Proxy/Hosting) Detected Date and Time Installation Installing the Criminal IP Anti-Brute Force, Login Fraud Detector plug-in is very simple. 1. Go to the ‘Plugin’ menu on the WordPress dashboard. 2. Search ‘Criminal IP’ or ‘Criminal IP Brute Force’ in the search window. 3. Click the ‘Install and activate’ button. 4. When the plugin is activated, an icon with the Criminal IP logo will be displayed on the WordPress dashboard sidebar. Click the icon to go to the dashboard and click the ‘Issue API Key’ button to go to Criminal IP. 5. Create a Criminal IP account, log in, and create an API key in My Page. 6. Copy and paste the issued API key into the ‘Criminal IP API key’ input column on the plugin settings tab. 7. On the Settings tab, set the login limit target and login wait time. Click ‘Save Changes’ to finish setting up the plugin. Please report any new features or bugs of the plugin through Criminal IP’s Customer Support. You can also contact support@aispera.com.
Protector – Malware Removal, Firewall & Core Repair
Every day, thousands of WordPress sites are hacked. Most security plugins offer protection, but they come with a massive cost: they slow down your server with bloated features and complex settings. Protector is different. It is a lightweight, AI-ready security layer that turns your WordPress site into a digital fortress without compromising speed. Whether you are trying to recover a hacked site or proactively defend your business, Protector delivers enterprise-grade security that anyone can configure. With our new 1-Click Security Overview Dashboard, you can activate all recommended protections and block 98% of automated attacks in under 8 seconds. 📖 Read the Official Documentation here 🦠 Malware Threat Scanner & Auto-Repair Don’t just find malware; destroy it. Our deep, recursive local scanner verifies your WordPress integrity without crashing your server: * Core Integrity Verification: Cross-references all Core files against the official WordPress.org checksums. * Advanced Pattern Detection: Detects suspicious code patterns (like eval, base64_decode, shell_exec) hidden in your files. * 1-Click Auto-Repair: Found a modified core file? Click “Repair” and Protector will automatically fetch a clean, original version directly from the official WP SVN and overwrite the infected file. 🛡️ Login Fortress (Brute-Force Protection) Hackers relentlessly target the wp-login.php page. We make it disappear. * Secret Login URL: Hide wp-login.php completely. Any unauthorized attempt will be instantly redirected to a custom URL of your choice. * Smart Honeypots: Inject invisible fields into your login and comment forms to trap and block spam/brute-force bots automatically. * Block Username Scanning: Prevent attackers from discovering your admin usernames via ?author=1 enumeration. 🔒 1-Click Site Hardening Lock down common vulnerabilities instantly: * Security Headers: Protect against XSS, Clickjacking, and MIME-Sniffing attacks with a single toggle. * XML-RPC Control: Disable XML-RPC completely to eliminate one of the biggest brute-force attack vectors on WordPress. * Version Obfuscation: Hide your WordPress version from the source code so hackers can’t target known exploits. * Restrict REST API: Block public access to endpoints that expose sensitive user data. 📊 Live Attack Log Peace of mind you can actually see. Monitor every blocked attack, triggered honeypot, and deleted malware in real-time straight from your dashboard. 🚀 Upgrade to KloxStudios Pro Need absolute maximum power? Protector integrates seamlessly with the KloxStudios Cloud AI. Pro users unlock Cloud AI Malware Verification for 3rd-party plugins/themes, Automatic IP Lockouts, Instant Admin Login Alerts (Email & Webhook), and 2FA.
