Wordfence Security is a free enterprise class security and performance plugin that makes your site up to 50 times faster and more secure.
Been using this plugin for a while now. It's a decent firewall for identifying visitors and possible malicious drive-bys, invalid login attempts by hackers, etc. Paired with Cloudflare, it does a pretty admirable job of securing web sites. Though it has its quirks and some places it could be improved... Overall, pretty happy with it. More feature-rich than many other similar firewalls. Certainly worth looking into if you don't have any site security plugin(s).
Show me the IP addresses of website visitors who try and use exploits to access me site (page not found, etc.) I than systematically ban that Ip from ever accessing the site ever again. This is the only popular plugin i use. It's kept me safe so far. Just wish I had the 40 dollars a year the bee able to fully protect my site (e.g Country Blocking would be a great advance) but the free version does keep you on your toes.
One exploit? I've seen a lot of lately is this one <blockquote>contact/+++++++++++++++++++++++++++Result:+chosen+nickname+%22dafmpquc39%22;+success;, over the past month I seen this on the page not found tab, with the same page not found from the same IP up to 33 times. If it was and out data sitemap, it would tell me was refarred by one of the search engines, but these are direct connects from the IP's.
The thinking behind this is BLOCK HACKERS NOW so you not upset later
If any other user has seen this happening in the LIVE TRAFFIC view of there site and have more information on it, let me know
The page requests are from various countries and cities around the word, and I assume (rightly or wrongly) it's an exploit on one of the contact form plugins that hasn't been discovered yet.
Still triying WP world, but this plugin works and help you a lot. Thanks
Only scratched the surface of functionality and it may take months or longer just to fully get to a point of appreciating and understanding all that it can do. A massive and apparently thorough development effort. amazing all of this is free...
can't wait to check out the professional version as well!
In a fast changing web it is good to know that Wordfence is on your side. The warning emails allow you to take action to correct a security flaw. It is one of the very few "must have" plugins for all installations in my view.
I install this plugin on every site I run now. It is simple, easy to configure and use. And it works.
I get notifications of pending security problems as well as checks on each of my sites and the plugins they run.
Just remember that you still need to be vigilant in protecting your sites. WordFence is a great tool to help you do that.
Very helpful plugin to know the status of your wordpress instalations in terms of security.
This plugin is one that we use on every install of WordPress that we have.
Very nice plugin!
You must log in to submit a review. You can also log in or register using the form near the top of this page.