Anton Aleksandrov

<p>Every failed login is counted and if configurable threshold is hit, plugin will block access to wp-login.php in .htaccess, so<br />
that hijackers won’t be able to try anymore and at the same time – won’t use server resources.</p>
<p>If the same IP keeps trying after first block has expired, it is possible to block it from accessing website completely.</p>
<p>Blocking visitor in .htaccess is the most simple and most resource friendly way of stopping webpage abuse and wasting server resources.</p>
<p>Since v0.6 plugin should also log and stop XML-RPC abusers.</p>


.htaccess Login block

Simple plugin to block login hijackers using apache and .htaccess. Simple and resource efficient way to protect your blog. Works with Apache from 1.

Lester Chan

<p>It will display a custom ban message when the banned IP, IP range, host name or referrer url that tries to visit you blog. You can also exclude certain IPs from being banned. There will be statistics recorded on how many times they attempt to visit your blog. It allows wildcard matching too.</p>
<h3>Development</h3>
<ul>
<li><a href="https://github.com/lesterchan/wp-ban" title="https://github.com/lesterchan/wp-ban" rel="nofollow ugc">https://github.com/lesterchan/wp-ban</a></li>
</ul>
<h3>Translations</h3>
<ul>
<li><a href="http://dev.wp-plugins.org/browser/wp-ban/i18n/" title="http://dev.wp-plugins.org/browser/wp-ban/i18n/" rel="nofollow ugc">http://dev.wp-plugins.org/browser/wp-ban/i18n/</a></li>
</ul>
<h3>Credits</h3>
<ul>
<li>Plugin icon by <a href="http://fontawesome.io" rel="nofollow ugc">Dave Gandy</a> from <a href="http://www.flaticon.com" rel="nofollow ugc">Flaticon</a></li>
</ul>
<h3>Donations</h3>
<ul>
<li>I spent most of my free time creating, updating, maintaining and supporting these plugins, if you really love my plugins and could spare me a couple of bucks, I will really appreciate it. If not feel free to use it without any obligations.</li>
</ul>
<h3>Upgrading</h3>
<ol>
<li>Deactivate <code>WP-Ban</code> Plugin</li>
<li>Open <code>wp-content/plugins</code> Folder</li>
<li>Put/Overwrite: <code>Folder: wp-ban</code></li>
<li>Activate <code>WP-Ban</code> Plugin</li>
</ol>


WP-Ban

Ban users by IP, IP Range, host name, user agent and referrer url from visiting your WordPress's blog.

.htaccess Login block vs WP-Ban