404 Log

Automatically logs every 404 error on your site. Shows the URL, hit count, last seen date, and where the visitor came from (referrer). No IP addresses or personal data are stored.

Tabs

404s
Logged 404 URLs, sorted by hit count.

Security Probes
404s that match known attack patterns, labeled by risk level

Actions on a 404 Entry

  • Create redirect — opens the redirect form pre-filled with the 404 URL.
  • Delete — removes the entry from the log.
  • Bulk select — select multiple entries to create redirects or delete in one operation

Bulk Redirect

Select one or more 404 entries, click “Create redirects from selected,” enter a destination URL and redirect type. All selected entries become redirects and are removed from the log in one step.

Security Probes

THiS SEO matches all logged 404 URLs against a list of known attack patterns. Matched entries are labeled with a risk level and a brief explanation of what the probe indicates.

Critical

Credential harvesting (wp-config.php, .env) and webshell probes

High

Brute force and remote code execution probes (xmlrpc.php, wp-login.php)

Medium

Server enumeration and known vulnerable plugin paths

Info

Foreign sitemap files and other informational patterns

Notes

The plugin does not block anything automatically. Suggestions are informational. Use your server firewall or a WAF for blocking.

Pro functions: Email alerts

Email alerts for critical and high-risk probes are a Pro feature. Configure recipients in Security > Email Alerts.