Protect Your WordPress Website

IP Blacklist Cloud plugin protects your WordPress based website from spam comments, gives details about login attacks which you don't even know are happening without this plugin!

IPBLC Server

With IPBLC Server and plugin, you can synchronize blacklisted IP addresses among multiple WordPress websites. No need to import and export file among them.

Read More
Start protecting your website now! Download

Spam Protection

There are many servers with static IP addresses around the globe and they spam WordPress sites with comments to get backlinks. Once you detect any spam comment, you can blacklist that IP and it will not be able to see your website content.

Limit Login Attempts

You can set login attempts limit for anyone which includes time frame of that limit. If anyone reaches that limit, plugin will block IP address itself and send you email with details about attempts. You can delete such IP addresses later on after resolving the issue.

Stops Brute Force Attacks

Without this plugin, you will not be able to detect who is trying to login admin panel with brute force attacks. You can stop them by blacklisting IP addresses and you can add "usernames" to Auto Block option.

Manage Multiple Websites

With IPBLC Server, you can manage multiple websites from one place. Synchronize IP addresses, details about failed login attempts, recommended blacklist IP addresses and much more.

Weekly IP Blacklist Chart

This chart shows number of IP addresses blacklisted in last week using this plugin.

  • 21
    Feb
  • 22
    Feb
  • 23
    Feb
  • 24
    Feb
  • 25
    Feb
  • 26
    Feb
  • 27
    Feb

Recent Comments

  • 78.135.62.138

    Attempted to log in with non-existent user name on 8th December 2016 at 09:53

    by Steve GS Feb 27, 2017 11:16:52
  • 2.27.188.233

    Attempted to log in using non-existent account name on 25th December 2016 at 21:15

    by Steve GS Feb 27, 2017 11:13:08
  • 89.242.123.209

    Attempted to log in as 'admin' (non-existent user) on 3rd January 2017 at 12:16

    by Steve GS Feb 27, 2017 11:10:54
  • 86.170.67.42

    Used same (non-existent) login name and within 4 hours of similar attack from 92.18.181.222.

    One of our administrators is also with BT, so I have to allow BT's IPs in my .htaccess files.

    Snippet from access log follows:

    themarkettheatre.com 86.170.67.42 - 2017-01-26 16:26:17 POST /xmlrpc.php - 403 506 - Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:40.0)+Gecko/20100101+Firefox/40.1
    themarkettheatre.com 86.170.67.42 - 2017-01-26 16:26:17 GET /wp-login.php - 200 4011 - Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:40.0)+Gecko/20100101+Firefox/40.1
    themarkettheatre.com 86.170.67.42 - 2017-01-26 16:26:18 POST /wp-login.php - 200 4912 - Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:40.0)+Gecko/20100101+Firefox/40.1

    Note: I don't allow blogs, so I deny access to xmlrpc.php from everyone.

    by Steve GS Feb 27, 2017 11:07:41
  • 92.18.181.222

    Log snippet:

    themarkettheatre.com 92.18.181.222 - 2017-01-26 13:10:18 POST /xmlrpc.php - 403 506 - Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:40.0)+Gecko/20100101+Firefox/40.1
    themarkettheatre.com 92.18.181.222 - 2017-01-26 13:10:18 GET /wp-login.php - 200 4011 - Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:40.0)+Gecko/20100101+Firefox/40.1
    themarkettheatre.com 92.18.181.222 - 2017-01-26 13:10:22 POST /wp-login.php - 200 4912 - Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:40.0)+Gecko/20100101+Firefox/40.1

    Tried logging into our Wordpress back end using non-existent user account. I only allow back-end access to a number of IP addresses in my .htaccess file, but since I'm with TalkTalk myself, I cannot block any of TalkTalk's in case I block myself! (Note: I don't allow blogs on this website, so have disallowed access to xmlrpc.php from anyone.)

    by Steve GS Feb 27, 2017 10:57:11
  • 178.217.231.163

    This is brute force attack

    by Jorge Feb 27, 2017 9:19:21
  • 144.172.103.28

    Spammed my site with comment spam.

    by Name Feb 27, 2017 6:51:15
  • 121.54.58.246

    no comment

    by afga Feb 25, 2017 13:50:35

Follow Us

Google+