cheesefather

<p>After the recent global distributed botnet attack on WordPress installations that took down servers and broke into admin accounts, I thought I’d write a plugin to prevent it happening again.</p>
<p>Distributed botnet attacks can come from multiple IP addresses and locations at the same time, so conventional IP-based lockouts are not effective (e.g. those found in Wordfence and other WordPress security plugins).</p>
<p>For example, if 1,000 different computers (with unique IP addresses) are trying to brute-force your admin password and you lock out each IP address after 5 incorrect attempts then you have still allowed 5,000 attempts. My plugin essentially ignores the different IP addresses and locks out all admin login attempts in a configurable way – so if you have it set to 5 failed attempts (default) then those 1,000 different computers will only have a total between them of 5 attempts.</p>
<p>You can select how many login failures causes the lockout, how much time to allow between failures, how long to block logins for and also you can input a whitelisted IP address (or multiple addresses separated with commas or spaces) which can bypass the lockdown and always log in – so you can still always get into your site even in the middle of an attack. There is also support for partial IP address matching for those with dynamic IP addresses. You can also define a secret key to bypass the lock.</p>
<ul>
<li>Any failed login is counted regardless of username or IP address (unless whitelisted)</li>
<li>Once locked down, nobody can log in except from whitelisted IP addresses or using the secret key</li>
<li>You can specify the number of login failures that triggers a lockdown</li>
<li>You can specify the time between failed attempts that should be counted</li>
<li>You can specify how long the lockdown should last</li>
<li>You can add a secret key that bypasses the lockdown</li>
<li>You can customise the lockout message</li>
<li>You can add whitelisted IP addresses that bypass the lockdown</li>
<li>Partial IP address matching for dynamically-allocated IP addresses</li>
<li>Multisite compatible</li>
<li>Available in English, French, German, Italian and Russian</li>
</ul>


Botnet Attack Blocker

This plugin blocks distributed botnet brute-force attacks on your Wordpress installation.

Svetoslav Marinov

<p>Allows users to send email messages to each other as long as they know their usernames.</p>
<h4>Features / Benefits</h4>
<ul>
<li>Simple to use just insert a shortcode to generate the send message form</li>
<li>Auto suggests users. You the user needs to type just 2 characters and they will be offered usernames to choose from</li>
<li>Users can’t email each other</li>
<li>User’s names are added to the from and to fields.</li>
</ul>
<h4>Usage</h4>
<p>Create a page and paste this shortcode. [orbisius_messenger_contact_form]</p>
<p>Then direct the users to that page. The code will generate a simple form which will accept username and message and then send the message to the recipient.</p>
<h4>Demo</h4>
<p><iframe loading="lazy" title="How to Enable WordPress Users to Email Each Other using Orbisius Messenger WordPress Plugin" width="750" height="422" src="https://www.youtube.com/embed/KBGDeMyuCcs?feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe></p>
<p>Bugs? Suggestions? If you want a faster response contact us through our website’s contact form [ orbisius.com ] and not through the support tab of this plugin or WordPress forums. We don’t get notified when such requests get posted in the forums.</p>
<blockquote>
<p>Support is handled on our site: <a href="http://club.orbisius.com/forums/" title="[new window]" rel="nofollow ugc">http://club.orbisius.com/forums/</a><br />
  Please do NOT use the WordPress forums or other places to seek support.</p>
</blockquote>
<h4>Author</h4>
<p>Svetoslav Marinov (Slavi) | <a href="http://orbisius.com" title="Custom Web Programming, Web Design, e-commerce, e-store, WordPress Plugin Development, Facebook and Mobile App Development in Niagara Falls, St. Catharines, Ontario, Canada" rel="nofollow ugc">Custom Web and Mobile Programming by Orbisius.com</a></p>


Orbisius Messenger

Allows users to send email messages to each other as long as they know their usernames.

Botnet Attack Blocker vs Orbisius Messenger