PluginScout

ReportedIP Hive — WordPress Security Plugin

ReportedIP Hive: Firewall, Brute Force Protection, 2FA and Anti-Spam

by Patrick Schlesinger · WordPress.org page · Website

v3.0.4 Tested up to WP 7.1.3 PHP 8.1+

ReportedIP Hive has 100+ active installs on WordPress.org and 1,002 downloads all time. It was downloaded 599 times in the last 30 days. The last update was on October 22, 2026, tested up to WordPress 7.1.3.

ReportedIP Hive at a glance

Active installs
100+
was fewer than 10 30 days ago
Total downloads
1,002
Downloads, last 30 days
599
30-day growth
–
downloads vs the previous 30 days

Is ReportedIP Hive well maintained?

Support threads resolved
No open threads
nothing waiting on the WordPress.org forum
WordPress compatibility
Current
tested up to WordPress 7.1.3, the current release is 7.1.3

Features

The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.

  • Limit login attempts. Failed sign-ins are counted per IP address. The default blocks an address after 5 failures in 15 minutes
  • Progressive IP blocking. Six steps from 5 minutes to 7 days. The ladder resets after 30 quiet days, so a typo never costs a day
  • Password spraying detection. Many usernames tried from one address are caught separately
  • Application password protection. Failed Basic Auth sign-ins count like failed logins, so the REST API is no way around the limit
  • Hide Login. Move wp-login.php to a custom login URL
  • User enumeration protection. Author archives, the users REST route, the user sitemap and login error messages no longer reveal usernames
  • Login anomaly detection. A sign-in from a new country is logged and asks for the second factor again
  • WooCommerce login protection. My Account sign-in and registration are counted like wp-login.php
  • Password policy with minimum length, character classes and an optional breach check (off by default)

Download and install history

632 downloads over the last 49 days. Snapshots taken daily from WordPress.org.

Downloads per day
ReportedIP Hive downloads per day050100150200Sep 5Sep 29Oct 23Downloads per day
Active installs
ReportedIP Hive active installs0255075100Sep 5Sep 29Oct 23Active installs
Rating out of 5
ReportedIP Hive rating00.30.50.81Sep 5Sep 29Oct 23Rating out of 5
Reviews
ReportedIP Hive review count00.30.50.81Sep 5Sep 29Oct 23Reviews

Details

Firewall, limit login attempts, 2FA with passkeys and anti-spam for comments and forms without CAPTCHA. Optional IP blocklist. GDPR-first.

The full description, screenshots and every review live on the WordPress.org page.

Rankings ReportedIP Hive competes in

Tags

  • 2FA
  • anti-spam
  • Brute Force
  • firewall
  • security

More from Patrick Schlesinger

Version
3.0.4
Last updated
Oct 22, 2026
First published
May 17, 2026
Requires WordPress
5.9
Tested up to
7.1.3
Requires PHP
8.1
Pricing
Free on WordPress.org

ReportedIP Hive FAQ

What does ReportedIP Hive do?

According to its WordPress.org readme, ReportedIP Hive offers Limit login attempts. Failed sign-ins are counted per IP address. The default blocks an address after 5 failures in 15 minutes, Progressive IP blocking. Six steps from 5 minutes to 7 days. The ladder resets after 30 quiet days, so a typo never costs a day, Password spraying detection. Many usernames tried from one address are caught separately, Application password protection. Failed Basic Auth sign-ins count like failed logins, so the REST API is no way around the limit and Hide Login. Move wp-login.php to a custom login URL.

How many active installs does ReportedIP Hive have?

WordPress.org reports 100+ active installs for ReportedIP Hive as of October 23, 2026.

Is ReportedIP Hive still maintained?

Yes. The last release was on October 22, 2026 and it is tested up to WordPress 7.1.3.

Is ReportedIP Hive free?

ReportedIP Hive is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.