May 08, 2013, 2:22 PM — Here's how you can get a free plugin called Wordfence to protect your WordPress blog.
1. Go to the Wordfence site.
2. Click the Download and Install Wordfence button (or simply install it from the plugin page on your WordPress blog).
Here's a brief sample of Wordfence features:
"Repair infected core, theme and plugin files
Show you what has changed in your infected files
Constantly scans your posts, pages, comments and plugins for malware URL’s
Shows you all your traffic in real-time giving you situational awareness to help your security decision making.
Separate human and crawler traffic intelligently.
Show you detailed data on traffic including reverse DNS lookups and city level geolocation."
The plugin itself is free, but Wordfence also offers premium API keys that let you block countries and schedule scans for specific times.
Here's a list of prices for the API keys:
1 API Key: $17.95 per year
3 API Keys: $35.95 per year
10 API Keys: $89.95
Here are more details on what you get as a paid customer:
"Scan as frequently and whenever you like using our comprehensive scan scheduling feature.
Use our commercial country to IP database to block malicious traffic. This database has a 99.5% accuracy rate and is frequently updated by us. It’s useful in the event of an emergency where a hacker based in a specific country is targeting your site.
Have access to new premium features as we release them.
Get priority email support from our team"
I highly recommend paying for the premium API keys if your Wordpress blogs are plagued by bots from various countries. You can easily pick and choose the countries you want to block. This will save on server resources, and it will help restrict traffic to your blogs to countries that work best for your business model. It has helped my own blogs immensely by blocking traffic and bots from troublesome countries.
Here's a much longer description of what Wordfence can do to make your Wordpress blog more secure:
"Scans core files, themes and plugins against WordPress.org repository versions to check their integrity.
Includes a firewall to block common security threats like fake Googlebots, malicious scans from hackers and botnets.
Includes advanced IP and Domain WHOIS to report malicious IP's or networks and block entire networks using the firewall.
See how files have changed.