WordPress sites, no matter how small, are actually exposed to hacking attacks on a daily basis. We will explain how to detect this WordPress hacking and block IPs.
WordPress sites being attacked at random
It is estimated that WordPress accounts for 30% of the world’s sites, and hackers use a methodology where they obtain a list of thousands or tens of thousands of WordPress sites from search engines and then try to attack multiple vulnerabilities at random.
Monitoring and blocking these hackers’ IPs (like an online address) and preventing them from accessing the entire site before a successful attack can take place is a very effective security measure.
Monitoring for hacking attacks on WordPress and blocking the IPs doing the hacking
Use the [Free] WordPress:Malware Scan & Security Plugin [Malware and Virus Detection and Removal] to monitor and log hacking attacks.
After installing and activating the plugin, go to the “Malware Scan” tab on the administration page, click on the “Hack Monitor & IP Block” tab, check the “Enable Hack Monitor” checkbox, and save the settings.
The Hack Monitor can detect
Vulnerability attacks
WPSCAN execution
Brute force attacks
The Hack Monitor detects
Block the hacker’s IP
Click on the IP of a hacker recorded in the Hack Monitor to find out if the IP is a compromised IP with other hacks recorded at abuseipdb.com.
If the IP is a dangerous IP with many other reported hacking activities, you can use the Block IP button to block access from that IP, making it completely impossible to conduct vulnerability attacks or brute force attacks in the future.