sHub-Log

sHub-Log strengthens WordPress site security.

Main features:

• Login attempt logging
• Category-based detection (config scans, backdoors, plugin vulnerability scans, admin hacking, spam, and more)
• Optional detection for malicious queries, high-volume requests, and REST API abuse
• Attack summary and detailed logs for a configurable period
• Attack trend charts with selectable period and aggregation interval
• CSV export and AJAX category filtering
• Configurable attack log retention with WP-Cron cleanup
• Attack spike email alerts with cooldown
• Optional signed remote alert and scoring definitions from syn-c.jp
• IP blocking after repeated failures
• Configurable block duration and redirect URL
• Admin dashboard for logs and IP management
• Customizable rate-limit thresholds and windows
• Optional attack-signal-only rate counting
• Exclusion of logged-in users and verified search/AI bots from rate counting
• Verified bot access logging (14-day retention, disabled by default)
• Suspicious 404 flood detection
• IP whitelist and trusted proxy support (auto-trust private proxies and Cloudflare)
• Per-IP risk scoring (disabled by default)
• Administrator IP memory to reduce self-lockouts
• Durable rate/score counters that survive object-cache flushes