Feature suggestion: block users after "X or more" 404 attempts

Hi BR Mike, if you go to WP Security -> Firewall -> 404 Detection you can enable the following features…..

• Enable IP Lockout For 404 Events:
• Time Length of 404 Lockout (min):

After a user has been locked you can then Blacklist them.

Hi,

thanks for the feedback…

I know about the two mentioned features, but this requires a MANUAL action. Additionally, this manual action happens “delayed” at all, because it is very unlikely that one is checking the 404 events at the very same time as the events itself are triggered, so there is no immediate blocking possible.

Plus, I do NOT want to immediately block any IP-address if it triggers just one (1) 404-event, i.e. by accidentially entering a misspelled permalink.

It would be nice if one could define that an IP-address is AUTOMATICALLY blocked (at least temporarily) as soon as the plugin detects MULTIPLE (configurable) 404-events from the same IP-address, and one can decide LATER to block the IP-address permanently via .htaccess.

Sorry if my initial post was not precise enough about the AUTOMATIC blocking request…

Mike

P.S.: “BR” in my initial post stands for “Best Regards” and is not part of my name… ;-))

Hi ?? sorry about the letters BR I thought it was part of your name…

In regards to your request one of the plugin developers will assess your request further.

Thank you

Any follow-ups on this?

Hi bios4,
Thanks for the feature suggestion – it is a good idea.
We are currently busy with a lot of other things needing our immediate attention but we will put your suggestion on our list for future deployment.

Upvote from me, but it gets complex because you’d have to sort the 404 list before you can analyse the number of hits (and you’d need to specify a window). Some hackers are smart enough to drip feed these attempts, so you don’t get the list of hits in a nice row unless you do some filtering.

Anyway, if you manage I’d be interested (and in how you did it ?? ).

Hi there,

are there any plans for future versions regarding this feature suggestion or are you letting it go on that one?

Thanks

*bump*

I need this too. Seems that the authors are not keen on implementing it somehow. Maybe too difficult.

There are some complexities (as @batteriesinc alluded to earlier) in the implementation side of things which we are currently thinking about and how best to design such a feature.

It is still on the drawing board….