About this plugin
ScanDeath helps protect WordPress against suspicious and malicious requests.
The plugin works without a paid account or external service. Local protection is available immediately after activation.
Main features:
- Local request protection with bundled security rules.
- Temporary IP blocking with automatic release after the configured block time.
- Security event logging.
- Safe, Balanced, and Aggressive protection modes.
- Trusted IP addresses.
- Optional ScanDeath Cloud rule synchronization.
- Optional advisory IP reputation information.
- Local advisory risk scoring for suspicious events.
- Support for Apache-compatible servers and WordPress/PHP protection behind Nginx.
- Country- and site-specific date/time display based on the WordPress settings.
- Admin-menu counter showing the number of currently blocked IP addresses.
Optional ScanDeath Cloud service
ScanDeath can optionally synchronize additional security rules from the ScanDeath Cloud service.
A ScanDeath Cloud service key is only used to authenticate the optional external service. It does not unlock or enable local plugin features.
Automatic Cloud synchronization is disabled until a valid service key is configured.
Hosted service information:
com/terms/
com/privacy/
The Cloud service returns rule data only. The plugin does not download or execute PHP, JavaScript, or other executable code from the service.
Optional IP reputation checks
The Blocked IPs and Logs pages can display advisory information from public threat and reputation sources.
Administrators may also enable Proxycheck and AbuseIPDB checks under ScanDeath > Settings. These checks are disabled by default.
When enabled, the visitor IP address being checked is sent to the selected provider. AbuseIPDB requires its own API key. Proxycheck can be used with limited keyless requests or with a separate API key.
Reputation information is advisory only. It does not automatically block, unblock, or whitelist an IP address.
Usage
Use ScanDeath > Dashboard to view the current protection status and synchronize optional Cloud rules.
Use ScanDeath > Blocked IPs to view currently blocked addresses.
Use ScanDeath > Logs to review recorded security events.
Use ScanDeath > Settings to configure protection mode, block duration, trusted IPs, Cloud synchronization, and optional reputation services.
Privacy
Without optional external services, ScanDeath keeps its security processing on the WordPress site.
Local event logs may contain visitor IP addresses because IP addresses are required for IP blocking and security analysis. The log-retention period can be configured in ScanDeath settings.
If ScanDeath Cloud is configured, rule synchronization sends the site URL, plugin version, and Cloud service key to the configured Cloud service. Individual visitor logs and blocked IP addresses are not sent as part of Cloud rule synchronization.
If optional Proxycheck or AbuseIPDB checks are enabled, the IP address being checked is sent to the selected provider.
Please review the privacy policies of any external services you enable.
Help & Support
Open ScanDeath > Help in the WordPress administration area for setup information and links to documentation.
com/