ThreatPoint UK

<p>This plugin protects WordPress Sites from unwanted malicious access attempts by leveraging IP reputation data provided by the ThreatPoint IP reputation service.</p>
<h3>External Service</h3>
<p>This plugin allows administrators to protect their WordPress Sites from unwanted access attempts by leveraging IP reputation data provided by the ThreatPoint IP reputation service. This plugin invokes a restAPI call to the ThreatPoint API, consumes the response and acts based on configuration options in the plugin. This allows ip reputation data to be placed in front of pages (wp-admin and custom pages for example) – without interrupting normal access.<br />
To communicate with the restAPI an API KEY is required from ThreatPoint.</p>
<p>The plugin calls the rest API (requires an API KEY) at <a href="https://verify.threatpoint.co.uk/api/v1/resources/" rel="nofollow ugc">this ThreatPoint api endpoint</a><br />
The rest API is only passed the IP address from the client or X-Forwarded-For address(es) is present.<br />
This external service is called during any login attempts to the admin page. The plugin allows any page to be protected by simply entering the slug name on the setting page in the correct field (comma separated). Any custom page can be protected in this manner.<br />
An API key is required to utilise the service, although the plugin will operate without one it will not be able to pass the IP or call any data from the API. Your pages are NOT protected without a valid API key.</p>
<h3>Privacy Policy</h3>
<p>The privacy policy for the api services is viewable here <a href="https://threatpoint.co.uk/privacy-policy" rel="nofollow ugc">privacy policy</a><br />
This plugin only passes IP information – no other PII is transferred. The IP address is analysed across the aggregated data within the ThreatPoint IP reputation service and a risk score with geo location information is returned to the plugin. Simple rules within the plugin dictate whether traffic should be allowed to continue as normal or be redirected to an information URL of your choice (set by through the plugin settings). The IP address is stored in the IP aggregated data and used as part of the consortium. No other data such as originating website is stored. Only the IP address and geo location information is held, with date, time and risk scores associated with the request.</p>
<h3>Plugin Features</h3>
<ul>
<li>Detects activity and IP reputation from the following sources:</li>
<li>Tor exit node traffic</li>
<li>Proxy (paid)</li>
<li>Proxy (free)</li>
<li>VPN (paid)</li>
<li>VPN (free)</li>
<li>Known Malicious Behaviour (Consortium)</li>
<li>Brute force detection</li>
<li>API Documentation is available here: <a href="https://threatpoint.co.uk/documentation" rel="nofollow ugc">documentation</a></li>
<li>Video is here <span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/Mub-Oa24b10?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></li>
</ul>
<h3>Special Features</h3>
<ul>
<li>Provide risk based decisions through configuration to allow an administrator the correct flow for their site.</li>
<li>Consortium model of malicious IP’s created from activity seen across the ThreatPoint network</li>
<li>Detect and block bots, malware, trojans and aggregators as well as malicious human traffic</li>
</ul>
<h3>Configuration Items</h3>
<ul>
<li>API Key – An API key is required to access the IP reputation service as explained above – (info@threatpoint.co.uk)</li>
<li>Country Blacklist – 2 Character ISO country code csv format. Country codes in this list will cause IP addresses from those countries to issue a redirection. Allows you to block access from countries</li>
<li>Country Whitelist – 2 Character ISO country code csv format. Country codes in this list will cause only IP addressed from these countries to be allowed. All others will be redirected. Allow all from UK for example.</li>
<li>Country Blacklist is evaluated first – it makes little sense to have both blacklists and whitelists set although it is a supported option due to demand.</li>
<li>Redirection URL – The web page you wish traffic to be redirected to – please feel free to use <a href="https://threatpoint.co.uk/threatpoint-ip-failure" rel="nofollow ugc">Redirection URL</a></li>
<li>Reject IP Risk >= – Redirect IP risk scores marked as Consider or High. Allow low risk only if consider is selected. The risk score is created by the IP reputation service based on the source, location, previous use and history across the IP consortium (velocity, reputation, tor, vpn, proxy)</li>
<li>Pages to protect – a comma separated list of custom pages that you want to use the IP reputation service</li>
<li>Disable XMLRPC endpoint by adding entry to .htaccess</li>
<li>Add malicious IP’s directly to .htaccess to protect wp-login from brute force</li>
</ul>
<h3>Localization</h3>
<ul>
<li>English (default) – only language currently supported</li>
</ul>
<h3>Feedback</h3>
<ul>
<li>Many thanks for taking the time to look at the plugin</li>
<li>Drop the ThreatPoint team a line <a href="http://twitter.com/#!/threatuk" rel="nofollow ugc">@threatuk</a> on Twitter</li>
<li>Email questions or suggestions via (info@threatpoint.co.uk)</li>
<li>Api key requests via info@threatpoint.co.uk</li>
</ul>
<h3>Translations</h3>
<ul>
<li>English – default, currently the only language supported</li>
</ul>
<h3>Contributors & Developers</h3>
<ul>
<li>The ThreatPoint team are often asked to investigate attacks on web sites and other services. More often than not these attacks begin from IP addresses that should be considered before access is granted. The IP reputation API provides the intelligence to protect such services, simply and effective. The WordPress plugin framework allows this to be easily introduced into WordPress sites as an additional layer of protection.</li>
<li>This is not a silver bullet, but it is a useful deterrent. Best efforts to redirect IP addresses based on IP reputation are made. The service should be used in conjunction with other layers of detection and with defined authentication and access rules as part of an overall security policy.</li>
<li>ThreatPoint UK also provide email verification, device reputation, dark web monitoring and password monitoring services as part of the API service layer. Please contact info@threatpoint.co.uk to find out more about these additional services.</li>
</ul>
<h3>Credits</h3>
<ul>
<li>Many credits go to the fraud and analytics team at ThreatPoint UK and the team behind the API services</li>
<li>Credits to numerous wordpress tutorials used to understand the plugin creation process. notably this article https://www.sitepoint.com/real-world-example-wordpress-plugin-development/</li>
</ul>


ThreatPoint IP Reputation

This plugin protects WordPress Sites from unwanted malicious access attempts by leveraging IP reputation data provided by the ThreatPoint IP reputatio …

Ash Ganda

<p><strong>Supan Reputation is a WordPress reviews plugin</strong> that helps you collect more 5-star reviews on Google, Yelp, and Facebook. Send branded review request emails to customers (manually or automatically after WooCommerce orders), draft AI responses to incoming reviews, and log received reviews from any platform — all from inside wp-admin.</p>
<p>Most customers who loved your service will never leave a review — not because they didn’t want to, but because no one asked at the right moment.</p>
<p>Supan Reputation fixes that. Configure your Google, Yelp, and Facebook review links once, write a personalised email template, and the plugin handles the rest — sending polite, perfectly-timed review requests automatically when WooCommerce orders complete, or manually with two clicks. Add an AI response drafter for replying to reviews and a Reviews Inbox for logging incoming feedback.</p>
<p>More reviews. Less chasing. All from wp-admin.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Automated review request emails</strong> — trigger on WooCommerce order completion with a configurable delay (default: 24 hours after purchase)</li>
<li><strong>Google, Yelp, and Facebook integration</strong> — set your review profile URLs once; every email links directly to your preferred platform</li>
<li><strong>Manual send in two clicks</strong> — enter a customer name and email to send a request instantly, no WooCommerce required</li>
<li><strong>AI response drafter</strong> — paste any customer review and get a professional, personalised reply drafted in seconds</li>
<li><strong>Reviews inbox</strong> — log received reviews with platform, rating, and sentiment tags for easy tracking</li>
<li><strong>Custom email templates</strong> — personalise the message with your brand voice using <code>{name}</code> merge tags</li>
<li><strong>Request tracking dashboard</strong> — see total sent, this month, delivered, and response rate in real time</li>
<li><strong>WooCommerce review schema</strong> — AggregateRating + Review JSON-LD for Google rich snippets</li>
</ul>
<p><em>About the name: “Supan” (スパン) is a Japanese loanword meaning “span” — the arc or spectrum of connections. It reflects the family of Supan plugins for WordPress site management.</em></p>
<h4>Source Code</h4>
<p>The full React/TypeScript source for the compiled JavaScript assets is included directly in this plugin under the <code>src/</code> directory. Build tooling configuration is in <code>vite.config.ts</code>.</p>
<p>To regenerate the compiled assets from source:</p>
<ol>
<li>Install Node.js and pnpm</li>
<li>Run <code>pnpm install</code> in the plugin root</li>
<li>Run <code>pnpm build</code> to produce <code>build/suparep.js</code></li>
</ol>
<h3>External services</h3>
<p>This plugin connects to the <strong>Supan API</strong>, a third-party service hosted on Google Cloud Run, to send review request emails, draft AI responses to customer reviews, log received reviews, and (when WooCommerce is installed) schedule automatic review requests after order completion. The Supan API is operated by Ganda Tech Services Pty Ltd, the same author as this plugin.</p>
<p>The plugin cannot send review request emails, draft responses, or log reviews without this connection because the email delivery, AI drafting, and storage all happen server-side on the Supan API. No outbound email or AI logic runs locally inside WordPress.</p>
<p><strong>Endpoint:</strong> <code>https://gts-seo-engine-711239021998.australia-southeast1.run.app</code></p>
<p><strong>Fields the plugin transmits (every request):</strong> <code>api_key</code> (your Supan API key, stored encrypted in wp_options), and — only on Settings save — <code>api_url</code>, <code>license_key</code> (optional paid-tier identifier), and <code>woo_auto_request</code> (boolean for WooCommerce auto-send). Per-request fields are listed below by action.</p>
<p><strong>What is sent, and when:</strong></p>
<ul>
<li>When you click <strong>Send Request</strong> in the dashboard (or fill the Send Request form): the plugin sends the customer’s first name, the customer’s email address, the platform you selected (Google / Yelp / Facebook), and your API key. This is needed so the Supan API can send a personalised review request email to that customer with a link to your review page.</li>
<li>When a <strong>WooCommerce order completes</strong> and Auto-send is enabled: the plugin sends the customer’s first name, email, and your API key after the configured delay (default 24 hours). The order line items, prices, and payment data are NEVER transmitted — only the customer’s name and email.</li>
<li>When you click <strong>Draft AI Response</strong> on a received review: the plugin sends the review text, the reviewer’s name, your business name, and your API key. The Supan API forwards this to Claude Haiku and returns a draft reply for you to edit before sending. The drafted reply is not stored remotely.</li>
<li>When you click <strong>Save Review</strong> in the Reviews Inbox: the plugin sends the review text, platform, rating, sentiment tag, and your API key. The review is stored against your API key on the Supan API so the Reviews Inbox tab can re-render it later.</li>
<li>When you save <strong>Settings</strong>: the plugin sends your selected platform URLs (Google review URL, Yelp business URL, Facebook page URL), the email template content, and the auto-send delay hours, plus your API key. This is needed so the Supan API can use the right links and copy when sending review requests on your behalf.</li>
</ul>
<p>No request is sent automatically from a public-facing page. Every API call is triggered either by an explicit admin action in wp-admin or by a backend WooCommerce hook firing on order completion (which is itself opted-in via Settings).</p>
<p><strong>Data that is NOT sent:</strong> WordPress user accounts (other than the recipient’s name + email), passwords, comments, post content, IP addresses, payment data, order line items, or any customer who has not been explicitly selected to receive a review request.</p>
<p><strong>Third-party service:</strong> Supan API by Ganda Tech Services Pty Ltd.<br />
<strong>Terms of service:</strong> <a href="https://spectra.cchk.info/terms" rel="nofollow ugc">https://spectra.cchk.info/terms</a><br />
<strong>Privacy policy:</strong> <a href="https://spectra.cchk.info/privacy" rel="nofollow ugc">https://spectra.cchk.info/privacy</a></p>


Supan Reputation – Review Requests & Customer Feedback

Get more customer reviews on autopilot — branded review request emails, WooCommerce auto-send, AI response drafting, and a reviews inbox.

ThreatPoint IP Reputation vs Supan Reputation – Review Requests & Customer Feedback