Most security plugins try to do everything \u2014 firewall, blocking, malware scanning, email alerts \u2014 and end up bloated, slow, and full of upsells. Attack Monitor does one thing: it watches your site for common attack patterns and quietly logs them, so you always know what's being thrown at your site.\nWhat it detects<\/p>\n\n
Brute force login attempts\nXML-RPC abuse (including system.multicall floods)\nUser enumeration via ?author= and the REST API\nAdmin area probing by unauthenticated visitors\nPath and plugin scanning (phpinfo.php, .env, phpmyadmin, wp-config.php and more)\nSQL injection attempts in URLs and POST data\nXSS attempts in URLs and POST data\nComment flooding<\/p>\n\n
What you get<\/p>\n\n
A dashboard widget showing this week's attacks by category at a glance\nA full log page with day \/ week \/ 30-day \/ all-time views\nA bar chart of attack volume over time\nTop attacking IPs ranked by hit count\nFilterable event log with timestamps, IPs, URLs and detail\nSafe IP whitelist \u2014 exclude your own monitoring tools, cron jobs or office IP ranges\nCIDR range support (e.g. 192.168.1.0\/24) for the whitelist\nA single lightweight database table \u2014 nothing else added to your WordPress installation<\/p>\n\n
Philosophy\nDetection and blocking are separate concerns. This plugin handles detection only, leaving you free to choose how you respond \u2014 whether that's Fail2ban, Cloudflare, a companion blocking plugin, or simply reviewing the data. No firewall rules are added, no requests are blocked or slowed down, and no data is sent anywhere outside your own database.\nIdeal for developers, agencies and site owners who want visibility without handing over control to an all-in-one security suite.<\/p>\n\n\n
\/wp-content\/plugins\/janric-simple-attack-monitor\/<\/code> directory, or install the plugin through the WordPress plugins screen directly.<\/li>\n- Activate the plugin through the 'Plugins' screen in WordPress.<\/li>\n
- That's it \u2014 no configuration needed unless you want to ignore IP addresses.<\/li>\n
- To ignore known safe probes, e.g. regular jobs you run, go to the Attack Monitor in the Navigation bar, then Safe IPs and simply add 1 IP address per line for all you wish to ignore.<\/li>\n<\/ol>\n\n\n
1.0.0<\/h4>\n\n\n- Initial release.<\/li>\n<\/ul>","raw_excerpt":"Lightweight attack detection for WordPress. Logs brute force, XML-RPC abuse, SQL injection, XSS attempts and more. No bloat, no blocking \u2014 just data.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/317506","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=317506"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/keithlunt"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=317506"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=317506"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=317506"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=317506"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=317506"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=317506"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}