Linux 软件免费装

在这里免费安装WordPress以及其他软件

Wonderful Repeated Hit Blocker for Wordfence

开发者 wonderfulplugins
更新时间 2026年8月24日 23:49
PHP版本: 7.4 及以上
WordPress版本: 7.1
版权: GPLv3
版权网址: 版权信息

标签

security firewall brute force ip blocking wordfence

下载

1.0.0

详情介绍:

Wordfence records every request its firewall classifies as an attack. A single attack rarely justifies a block — but the same address showing up again and again within a few minutes almost always does. Wonderful Repeated Hit Blocker watches that attack log and blocks the repeat offenders for you. You decide how many logged attacks within how many minutes are enough, and how long the resulting block lasts. How the blocks are created Blocks are created through Wordfence's own public blocking API (wfBlock::createIP()), not by writing into its database tables. That matters: Safety rails Optional alerts Set a webhook URL (Slack, Discord, Mattermost, or your own endpoint) and you get a message for every new block. Leave the field empty and the plugin makes no outbound connections whatsoever.

安装:

  1. Install and activate Wordfence Security. This plugin has no effect without it.
  2. Install and activate Wonderful Repeated Hit Blocker.
  3. Go to Settings → Repeated Hit Blocker.
  4. Check that your own IP address appears in the allowlist. The plugin adds it on activation; if you administer the site from several networks, add those addresses too.
  5. Adjust the time window, the hit threshold and the block duration to taste. The defaults block an address for 30 days after 5 logged attacks within 10 minutes.
  6. Optionally add a webhook URL to be notified about new blocks.

常见问题:

Do I need Wordfence?

Yes. The plugin reads Wordfence's attack log and uses Wordfence's blocking API. Without an active Wordfence installation it stays completely inactive and shows an admin notice.

Can I lock myself out?

The plugin is built so that you cannot do so by accident. Your IP address is added to the allowlist when you activate the plugin, Wordfence's own allowlist is respected as well, and only addresses that Wordfence has already flagged as attackers are ever considered. Should you still end up blocked, remove the block in the Wordfence Blocking screen — every block created here is a normal Wordfence IP block.

Will normal visitors get blocked?

No. Only requests that Wordfence's firewall has recorded as an attack are counted. A visitor who mistypes a password does not appear in that log.

How do I recognise blocks created by this plugin?

The block reason in Wordfence starts with "Repeated Hit Blocker" and states how many attacks were logged in which time window.

Does it work on multisite?

Yes. Wordfence keeps a single, network-wide attack log and block list, and the plugin uses Wordfence's own table resolution, so it works the same way.

How often does it scan?

Every 5 minutes by default, configurable between 1 and 60 minutes. Scanning runs on WP-Cron, which only fires when your site receives traffic — on a very quiet site scans may happen less often than configured.

Is any data sent anywhere?

Not unless you configure a webhook URL yourself. See the "External services" section above.

更新日志:

1.0.0