Advanced IP Blocker

Description:

Advanced IP Blocker is an enterprise-grade Web Application Firewall (WAF) and perimeter defense suite engineered to shield your WordPress website from sophisticated cyber threats. Powered by intelligent real-time inspection, it automatically neutralizes distributed DDoS attacks, zero-day exploit attempts, brute-force intrusions, vulnerability scanners, and automated malicious bots before they ever reach your core application.

From built-in Two-Factor Authentication (2FA) and File Integrity Monitoring (FIM) to Cloudflare Cloud Edge integration, server-level (.htaccess) hardening, and full WP-CLI terminal control, Advanced IP Blocker delivers defense-in-depth protection. Whether you are managing a single business site or scaling high-traffic networks, it gives you absolute visibility and uncompromising security.

Key Features:

Advanced IP Blocker delivers an enterprise multi-layered defense architecture designed to protect your WordPress site at the cloud edge, server level, and application core.

• • Intelligent Web Application Firewall (WAF) & Zero-Day Cloud Defense: Proactively neutralizes SQLi, XSS, LFI/RFI, and remote code execution exploits. Features automated daily synchronization with the AIB Central Cloud to deploy zero-day mitigations (e.g., staging-path exploits, wp2shell) instantly without waiting for plugin updates. More info

• • Distributed Attack Protection (Auto-Panic Mode): Automatically shields your entire site with global Proof-of-Work JavaScript challenges during sudden traffic spikes or coordinated DDoS campaigns, keeping your server responsive while whitelisting verified search bots. More info
  • Granular Bot Challenges (Managed, Invisible & Turnstile/hCaptcha): Seamlessly deploy interactive checkbox challenges or completely invisible Proof-of-Work checks. Includes native Cloudflare Turnstile and hCaptcha support with automatic fallback to prevent false positives and lockouts. More info
  • Endpoint Lockdown Mode: Automatically triggers localized anti-bot challenges on critical attack surfaces like wp-login.php and xmlrpc.php during sustained brute-force attacks, stopping botnets without inflating permanent block lists. More info

• • High-Performance Server-Level Firewall (.htaccess): Executes blocking rules directly in Apache before WordPress or PHP even initialize, slashing TTFB and eliminating server load during attack floods. Features automated backups and anti-lockout safeguards. More info
  • Cloud Edge Defense (Cloudflare API Integration): Synchronize local blacklists directly to Cloudflare Edge access rules. Stop malicious traffic globally at Cloudflare’s network before requests consume any origin hosting resources. More info
  • WordPress Core Hardening & File Protection: One-click protections to disable PHP execution in the uploads/ directory, lock down sensitive system files (wp-config.php, .git, backup archives), turn off the file editor, and disable application passwords. More info
  • HTTP Security Headers Manager: Easily deploy critical security headers (HSTS with Preload, Content-Security-Policy with Report-Only mode, X-Frame-Options, Permissions-Policy, nosniff) directly at the server level to defeat clickjacking, MIME-sniffing, and browser exploits.

• • Native Two-Factor Authentication (2FA): Secure administrator and user accounts with standard TOTP (Google Authenticator, Authy). Features secure backup recovery codes, centralized user reset tools, and role-based enforcement. More info
  • Admin Access Control (Authorized Administrators): Restrict access to the Advanced IP Blocker dashboard exclusively to designated administrator accounts. Prevents rogue or compromised admin accounts from altering security policies. More info
  • Country Whitelisting for Logins: Restrict wp-login.php and XML-RPC access exclusively to specified countries, neutralizing foreign credential-stuffing and unauthorized login attempts on contact. More info
  • Active Session Manager: Inspect all authenticated user sessions in real-time, view geographic origins, and terminate suspicious or orphaned sessions instantly.

• • Threat Scoring Engine with Dynamic Decay: Moves beyond rigid thresholds by scoring suspicious behaviors (404 probing, 403 access, honeypots). Blocks IPs only when cumulative risk thresholds are reached and automatically decays scores over time to eliminate false positives. More info
  • Global Intelligence Feeds (AbuseIPDB & AIB Community Network): Query incoming traffic against crowdsourced abuse databases and share real-time anonymized telemetry to benefit from a global network of protected sites. More info
  • Ghost IP & Impostor Crawler Blocking: Automatically reject traffic with missing ASN / Reverse DNS records, and verify authentic search engines (Googlebot, Bingbot) via reverse DNS to neutralize fake User-Agent impersonators. More info
  • Granular Geoblocking & Local MaxMind Offline DB: Block entire high-risk countries or ASNs with offline MaxMind GeoLite2 databases to ensure zero latency overhead and eliminate external lookup dependencies. More info

• Complete WP-CLI Command Suite: Comprehensive terminal controls (wp advaipbl status, panic, hardening, cache, admin, cloudflare, whitelist) built for developers, system administrators, and automated deployment pipelines.
• Security Dashboard & Visual Threat Map: Real-time situational awareness with interactive attack charts, geographic threat clustering, audit logging, and automated diagnostic summaries delivered straight to your inbox.
• Hardened Configuration Import/Export: Create sanitized templates (excluding API keys and whitelisted IPs) or full site backups with automated admin anti-lockout guarantees for seamless migrations.
• Site Health & Vulnerability Scanner: Audits the WordPress core, installed plugins, themes, and PHP runtime against a database of 30,000+ known vulnerabilities. More info

Advanced IP Blocker gives you absolute visibility over who accesses your site and stops threats before they impact your infrastructure.

Recommended Setup

For optimal, out-of-the-box perimeter protection, we recommend following these essential steps after activating Advanced IP Blocker:

1. Run the Onboarding Setup Wizard: Upon activation, launch the built-in Setup Wizard from the top notification banner or access it via Security > Settings > Setup Wizard. The wizard will automatically detect your client IP, your server IP, and apply standard baseline protections in seconds.
2. Priority #1: Verify Your Whitelist: Navigate to Security > Dashboard > System Status. Ensure both your current administrative IP and your hosting server’s IP are added to the whitelist. This guarantees you and critical internal automated cron jobs will never be challenged or locked out.
3. Activate Server-Level Protection & Core Hardening:
   • Server-Level Firewall (.htaccess): Go to Security > Settings > Server-Level Firewall and enable .htaccess writes. This halts threats in Apache before PHP or WordPress execute, reducing server resource consumption during traffic spikes.
   • Core Hardening: In Settings > Core Protections > Hardening, enable Block PHP Execution in Uploads and Protect Sensitive Files (guards wp-config.php, .git, and backup files).
4. Enable Intelligent WAF & Zero-Day Cloud Defense: Under Security > Settings > Core Protections > Web Application Firewall (WAF):
   • Toggle on the Web Application Firewall (WAF).
   • Enable Intelligent Zero-Day WAF Sync to automatically download and apply critical cloud rules (neutralizing emerging threats and core zero-days without needing plugin updates).
   • Enable the suggested Honeypot URLs and Malicious User-Agents lists to immediately trap automated vulnerability scanners.
5. Deploy Distributed Attack Defense (Auto-Panic) & Captchas: Go to Security > Settings > Challenge Settings:
   • Enable Distributed Attack Protection (Auto-Panic) to automatically trigger transparent JavaScript challenges if your server encounters sudden HTTP flood spikes.
   • Configure Cloudflare Turnstile or hCaptcha for a modern, user-friendly verification experience with automatic invisible fallback.
6. Harden Authentication & User Access:
   • Two-Factor Authentication (2FA): Navigate to Security > 2FA Management or your user profile to activate TOTP 2FA (Google Authenticator, Authy) and generate backup emergency codes.
   • Login & XML-RPC Protection: In Settings > Core Protections > Advanced Login Protection, ensure Auto-Whitelist Admins, REST API User Protection, and Author Scan Protection are checked. Keep XML-RPC Protection set to Smart Protection for maximum compatibility.
   • Admin Access Control: In Settings > Admin Access, specify which administrators are authorized to configure the security suite.
7. Enable Threat Feeds, Geoblocking & Alerts:
   • AIB Community Network & AbuseIPDB: Enable the Community Defense Network and configure an AbuseIPDB key to preemptively block known malicious IPs on their very first request.
   • Geoblocking & Offline MaxMind DB: Restrict high-risk countries or lock the login page to trusted countries. For high-traffic sites, download the offline MaxMind GeoLite2 database to eliminate external latency.
   • Notifications: In Settings > Email Notifications, set your recipient email and choose between instant critical alerts or weekly security digests.

That’s it! Your WordPress site is now fortified by a multi-layered defense perimeter capable of stopping automated botnets, zero-day exploits, and brute-force attacks at every tier.

**Live Security Feed Shortcode:** Display a real-time, terminal-style feed of block events on any page or post using the `[advaipbl_live_feed]` shortcode. “Advanced IP Blocker”  Required – WordPress Security Plugin