latcomsystems

This plugin adds a comprehensive suite of security measures to WordPress. Simply install, activate, and rest assured that your site is now protected against most common attacks.
We attempted to create the “Goldilocks” of WordPress security by finding a happy medium between the really complicated plugins that seem to slow down your site and often break functionality because they are too restrictive, and the piece-meal ones that only address one or two vulnerabilities at a time.
The following areas of security weakness are addressed:
<ul>
<li>XML RPC Protection – stops unauthorized content injection.</li>
<li>Author Scanning Prevention – prevents revealing of user login names.</li>
<li>Malicious Script Blocking – stops execution of scripts in specific vulnerable directories.</li>
<li>Comment Spam Prevention – adds a CAPTCHA to the comment form.</li>
<li>User Login Protection – includes automatic timed failed login attempt lockouts and CAPTCHA for login page.</li>
<li>Automatic IP Ban – bans IP’s from the entire site based on number of failed login attempts.</li>
<li>IP Blacklist – allows adding known bad IP’s and bans them from the entire site.</li>
<li>IP Whitelist – allows adding known good IP’s.</li>
</ul>
This plugin also provides a log of all login attempts including geographical IP data.
Temporarily locked IP’s can be unlocked by the administrator.
Permanently banned IP’s can be un-banned by the administrator.
CAUTION: Do not use this plugin with other security plugins to avoid conflicts and other site issues. Use only one active security suite at a time.
<h3>Support</h3>
<ul>
<li><a href="mailto:sysdev@latcomsystems.com" rel="nofollow ugc">sysdev@latcomsystems.com</a></li>
</ul>

LCS Security

This plugin adds a comprehensive suite of security measures to WordPress.

Beej

The greatest hack focus on a WordPress site seems to be trying to log in with 
the default username “admin”. This plugin detects all login attempts with that 
username and exits with a 403 Forbidden header. This should eventually 
discourage login bots from continuing to pound your site.
All attempts are logged inside the /wp-content/plugin-data folder, just in case 
you need the info. Logs are kept for up to 30 days.

Block Default Login Attempts

Completely block default admin user login attempts in WordPress.

LCS Security vs Block Default Login Attempts