IPIntel AI Firewall
IPIntel AI Firewall (WAF) integrates AI-powered IP reputation analysis into WordPress to help site owners detect and mitigate automated abuse, scanners, and malicious traffic. Incoming requests are evaluated using external reputation signals and risk scoring. Based on the assessed risk level, traffic may be allowed, challenged for human verification, or blocked automatically. The plugin is designed to be easy to use and does not require custom code or infrastructure management. Project website: https://ipintel.ai Features AI-powered IP reputation and risk scoring Automatic allow, challenge, or block decisions Human verification challenge for suspicious traffic Compatible with aggressive caching environments (one-time manual configuration required) Optional visual security badge Simple configuration for non-technical users Free API key available with daily request limits Data Privacy This plugin connects to the IPIntel.ai API to analyze visitor IP addresses for security and threat detection purposes. Data transmitted to the external service: – Visitor IP address – API key (used solely for request authentication) No WordPress user account data, cookies, or User-Agent information are transmitted. The external service is used exclusively to determine whether a request should be allowed, challenged, or blocked. A free API key is available with a daily request limit. Get API key: https://ipintel.ai/dashboard Higher request limits require an upgrade. Terms of Service: https://ipintel.ai/terms Privacy Policy: https://ipintel.ai/privacy Page Cache Compatibility IPIntel AI Firewall relies on per-visitor verification. When full-page caching is enabled, the cache must vary by the verification cookie in order for challenges to work correctly. For LiteSpeed Cache: – Go to LiteSpeed Cache → Cache → Vary – Add the following cookie: ipintel_human_ok – Save changes and purge the cache This is a one-time configuration step. Without cache variation, it is technically impossible for any WordPress plugin to reliably challenge unverified visitors. Optional Footer Badge The plugin includes an optional footer badge that can be enabled from the settings page. When enabled, the badge displays a small visual indicator showing that the site is protected by IPIntel.ai. The badge does not collect data, perform tracking, or load external resources. The footer badge is disabled by default and can be turned on or off at any time.
Quttera ThreatSign – Web Malware Scanner for WordPress
Quttera ThreatSign protects your WordPress website with multi-layered security: Malware Detection: Powered by Quttera’s AI-driven heuristic engine, the scanner detects malicious PHP, obfuscated JavaScript, hidden iframes, redirects, spam, SEO malware, and credit-card skimmers targeting checkout pages. The plugin performs on-demand scans directly from your WordPress admin and checks your domain against more than 40 global security authorities, including Google, McAfee, Norton, and Yandex. Detection capabilities are continuously enhanced using insights from Quttera’s worldwide threat intelligence network. Brute Force Protection: Prevents unauthorized login attempts with IP locking, configurable rate limiting, and environment-aware protection policies. Supports both shared hosting (aggressive locking) and dedicated servers (progressive delays). Includes emergency bypass mechanism for critical situations. Bot Protection: Layered defense against automated attacks using multi-stage risk evaluation, token-bucket rate limiting, and legitimate bot recognition (Googlebot, Bingbot, etc.). Protects REST API, XML-RPC, and WooCommerce endpoints with endpoint-specific risk scoring. Admin User Monitoring: Real-time detection and alerting for unauthorized admin additions, removals, and role changes with database audit trail and snapshots. For complete protection—including automated malware removal, scheduled scanning, WAF, and 24/7 monitoring—you can upgrade to a ThreatSign Website Security plan. Malware Detection Features: One-click on-demand scans from WP admin 0-day (unknown threat) detection via heuristic & behavioral analysis Detection of malicious PHP (backdoors, shells, injections) Detection of obfuscated or polymorphic JavaScript Identification of malicious iframes, redirects & hidden links Detection of spam & SEO malware Checkout skimmer detection Inspection of WordPress core file integrity Detection of alien or unauthorized files in core directories External links and outbound reference analysis Blacklist checks across 40+ security authorities Cloud-based scanning to reduce server resource load Detailed investigation reports with severity levels Brute Force Protection Features: IP-based locking with configurable thresholds Multi-stage failure detection with soft and hard locks Environment-aware policies for shared hosting and dedicated servers IP whitelist/blacklist with CIDR notation support Emergency bypass mechanism via constant or filter User account lockout alerts via email Combo-lock (IP + username) detection Rate limiting with progressive delays Bot Protection Features: Multi-stage risk evaluation with heuristic analysis Token-bucket rate limiting across multiple lanes (global, REST, XML-RPC, checkout, cart) Legitimate bot recognition (Googlebot, Bingbot with elevated rate limits) REST API enumeration and authentication protection WooCommerce endpoint protection (checkout & cart) Configurable operation modes (Observe, Balanced, Aggressive) Risk-based challenge mechanisms and exponential backoff Admin User Monitoring Features: Real-time detection of admin user additions and removals Admin role change tracking Database snapshot comparison for audit trail WP-Cron scheduled checks (1-minute intervals) Immediate detection via WordPress hooks Email alerts for unauthorized changes Comprehensive alarm system integration If you need malware removal assistance, contact us at support@quttera.com or sign up for any of our ThreatSign annual plans, which include cleanup & blacklist removal: https://quttera.com/anti-malware-website-monitoring-signup Credits Quttera Plugin’s other home WordPress Malware Scanner
