sHub-Log

sHub-Log strengthens WordPress site security.

Main features:

• Login attempt logging
• Category-based detection (config scans, backdoors, plugin vulnerability scans, admin hacking, spam, and more)
• Optional detection for malicious queries, high-volume requests, and REST API abuse
• Attack summary and detailed logs for a configurable period
• Attack trend charts with selectable period and aggregation interval
• CSV export and AJAX category filtering
• Configurable attack log retention with WP-Cron cleanup
• Attack spike email alerts with cooldown
• Optional signed remote alert and scoring definitions from syn-c.jp
• IP blocking after repeated failures
• Configurable block duration and redirect URL
• Admin dashboard for logs and IP management
• Customizable rate-limit thresholds and windows
• Optional attack-signal-only rate counting
• Exclusion of logged-in users and verified search/AI bots from rate counting
• Verified bot access logging (14-day retention, disabled by default)
• Suspicious 404 flood detection
• IP whitelist and trusted proxy support (auto-trust private proxies and Cloudflare)
• Per-IP risk scoring (disabled by default)
• Active administrator sessions are not auto-blocked, but a past login IP is not trusted
• Daily comparison of plugin, theme, and must-use plugin folders. The email names the component, says whether a plugin or theme update could explain new PHP/ZIP files, and lists what to check next
• Email and an integrity log for plugin install/activation, theme install/switch, new users, role changes, and administrator logins from a new IP
• Optional paid license (offline signed code) for 90-day log retention and page-level analytics