WPChef

nikita.global

<p><a href="https://www.limitloginattempts.com" rel="nofollow ugc">Limit Login Attempts Reloaded</a> functions as a robust deterrent against <a href="https://www.limitloginattempts.com/cracking-the-code-unveiling-the-mechanics-behind-brute-force-attacks/" rel="nofollow ugc">brute force attacks</a>, bolstering your website’s security measures and optimizing its performance. It achieves this by <strong>restricting the number of login attempts allowed</strong>. This applies not only to the standard login method, but also to XMLRPC, Woocommerce, and custom login pages. With more than 2.5 million active users, this plugin fulfills all your login security requirements.</p>
<p>The plugin functions by automatically preventing further attempts from a particular Internet Protocol (IP) address and/or username once a predetermined limit of retries has been surpassed. This significantly weakens the effectiveness of brute force attacks on your website.</p>
<p>By default, WordPress permits an unlimited number of login attempts, posing a vulnerability where passwords can be easily deciphered through brute force methods.</p>
<p><strong>Limit Login Attempts Reloaded Premium (Try Free with <a href="https://www.limitloginattempts.com/premium-security-zero-cost-discover-the-benefits-of-micro-cloud/" rel="nofollow ugc">Micro Cloud</a>)</strong><br />
Upgrade to <a href="https://www.limitloginattempts.com/plans/" rel="nofollow ugc">Limit Login Attempts Reloaded Premium</a> to extend cloud-based protection to the Limit Login Attempts Reloaded plugin, thereby enhancing your login security. The premium version includes a range of highly beneficial features, including <a href="https://www.limitloginattempts.com/features/ip-intelligence/" rel="nofollow ugc">IP intelligence</a> to <strong>detect, counter and deny malicious login attempts</strong>. Your <a href="https://www.limitloginattempts.com/failed-login-attempts-in-wordpress/" rel="nofollow ugc">failed login attempts</a> will be safely neutralized in the cloud so your website can function at its optimal performance during an attack.</p>
<p><iframe loading="lazy" title="Why Upgrading to Our Premium Version is a Game-Changer for Brute Force Protection" width="750" height="422" src="https://www.youtube.com/embed/JfkvIiQft14?feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe></p>
<h4>Features (Free Version):</h4>
<ul>
<li><strong>Limit Logins</strong> – Limit the number of retry attempts when logging in (per each IP).</li>
<li><strong>Configurable Lockout Timings</strong> – Modify the amount of time a user or IP must wait after a lockout.</li>
<li><strong>Remaining Tries</strong> – Informs the user about the remaining retries or lockout time on the login page.</li>
<li><strong>Lockout Email Notifications</strong> – Informs the admin via email of lockouts.</li>
<li><strong>Denied Attempt Logs</strong> – View a log of all denied attempts and lockouts.</li>
<li><strong>IP & Username Safelist/Denylist</strong> – Control access to usernames and IPs.</li>
<li><strong>New User Registration Protection (Micro Cloud Accounts)</strong> – Protects default WP registration.</li>
<li><strong>Sucuri</strong> compatibility.</li>
<li><strong>Wordfence</strong> compatibility.</li>
<li><strong>Ultimate Member</strong> compatibility.</li>
<li><strong>WPS Hide Login</strong> compatibility.</li>
<li><strong>MemberPress</strong> compatibility.</li>
<li><strong>XMLRPC</strong> gateway protection.</li>
<li><strong>Woocommerce</strong> login page protection.</li>
<li><strong>Multi-site compatibility</strong> with extra MU settings.</li>
<li><strong>GDPR</strong> compliant.</li>
<li><strong>Custom IP origins support</strong> (Cloudflare, Sucuri, etc.).</li>
<li><strong>llar_admin</strong> own capability.</li>
</ul>
<h4>Features (Premium Version):</h4>
<ul>
<li><strong>Performance Optimizer</strong> – Offload the burden of excessive failed logins from your server to protect your server resources, resulting in improved speed and efficiency of your website.</li>
<li><strong>Enhanced IP Intelligence</strong> – Identify repetitive and suspicious login attempts to detect potential brute force attacks. IPs with known malicious activity are stored and used to help prevent and counter future attacks.</li>
<li><strong>Enhanced Throttling</strong> – Longer lockout intervals each time a malicious IP or username tries to login unsuccessfully.</li>
<li><strong>Deny By Country</strong> – <a href="https://www.limitloginattempts.com/block-logins-by-country-in-wordpress/" rel="nofollow ugc">Block logins by country</a> by simply selecting the countries you want to deny.</li>
<li><strong>Auto IP Denylist</strong> – Automatically add IP addresses to your active cloud deny list that repeatedly fail login attempts.</li>
<li><strong>New User Registration Protection</strong> – Protects default WP registration.</li>
<li><strong>Global Denylist Protection</strong> – Utilize our active cloud IP data from thousands of websites in the LLAR network.</li>
<li><strong>Synchronized Lockouts</strong> –  Lockout IP data can be shared between multiple domains for enhanced protection in your network.</li>
<li><strong>Synchronized Safelist/Denylist</strong> – Safelist/Denylist IP and username data can be shared between multiple domains.</li>
<li><strong>Premium Support</strong> – Email support with a security tech.</li>
<li><strong>Auto Backups of All IP Data</strong> – Store your active IP data in the cloud.</li>
<li><strong>Successful Logins Log</strong> – Store successful logins in the cloud including IP info, city, state and lat/long.</li>
<li><strong>Enhanced lockout logs</strong> – Gain valuable insights into the origins of IPs that are attempting logins.</li>
<li><strong>CSV Download of IP Data</strong> – Download IP data direclty from the cloud.</li>
<li><strong>Supports IPV6 Ranges For Safelist/Denylist</strong></li>
<li><strong>Unlock The Locked Admin</strong> – Easily <a href="https://www.limitloginattempts.com/how-to-unlock-your-site-if-you-are-locked-out-by-limit-login-attempts-reloaded/" rel="nofollow ugc">unlock the locked admin</a> through the cloud.</li>
</ul>
<p>*Some features require higher level plans.</p>
<h4>Upgrading from the old Limit Login Attempts plugin?</h4>
<ol>
<li>Go to the Plugins section in your site’s backend.</li>
<li>Remove the Limit Login Attempts plugin.</li>
<li>Install the Limit Login Attempts Reloaded plugin.</li>
</ol>
<p>All your settings will be kept intact!</p>
<p>Many languages are currently supported in the Limit Login Attempts Reloaded plugin but we welcome any additional ones.</p>
<p>Help us bring Limit Login Attempts Reloaded to even more countries.</p>
<p>Translations: Bulgarian, Brazilian Portuguese, Catalan, Chinese (Traditional), Czech, Dutch, Finnish, French, German, Hungarian, Norwegian, Persian, Romanian, Russian, Spanish, Swedish, Turkish</p>
<p>Plugin uses standard actions and filters only.</p>
<p>Based on the original code from Limit Login Attempts plugin by Johan Eenfeldt.</p>
<h4>Branding Guidelines</h4>
<p>Limit Login Attempts Reloaded™ is a trademark of Atlantic Silicon Inc. When writing about the plugin, please make sure to use Reloaded after Limit Login Attempts. Limit Login Attempts is the old plugin.</p>
<ul>
<li>Limit Login Attempts Reloaded (correct)</li>
<li>Limit Login Attempts (incorrect)</li>
</ul>


Limit Login Attempts Reloaded – Login Security, Brute Force Protection, Firewall

Love that it shows how many attempts are left, so hopefully users don't lock themselves out. Also ought to deter hackers if they see that... and if it doesn't, then they get locked out anyway :)

It works great!


некоторое время работал, потом, видимо, пришло обновление и капец - начало просто всех подряд блокировать. Зайти в админку невозможно


перестал нормально работать

Just excellent

Block excessive login attempts and protect your site against brute force attacks. Simple, yet powerful tools to improve site performance.

miniOrange

miniorange

<p>Limit Login Attempts provides a comprehensive security package to secure your site. We provide  Limit login attempts, Brute force Protection, Google reCAPTCHA, Spam Protection, Rename Login URL, IP blocking, DOS protection, Login Security, Rate Limiting, and traffic blocking to secure your site against bots.<br />
Limit Login Attempts will protect from the advanced brute force by Limit login, Ip blocking, rename login URL, and protection from spam/bot by Google Recaptcha.</p>
<h4>Features :-</h4>
<h4>LIMIT LOGIN ATTEMPTS</h4>
<p>Limit Login Attempts to protect your site from attacks that try to gain access/login to a site with random usernames and passwords. A Brute Force Attack is the simplest kind of method to gain access to a website. You can limit the login attempts made by an IP and block it as well. <a href="https://security.miniorange.com/login-and-spam-protection/" rel="nofollow ugc">Limit Login Attempts</a></p>
<h4>LOGIN SECURITY</h4>
<p>We help you protect your website against brute force login attacks by blocking an IP address of the hacker after a specified limit of failed login attempts.<br />
When using Limit Login Attempts, you can block the user after certainly failed login attempts thus providing extra login security.</p>
<h4>SPAM PROTECTION</h4>
<p><a href="https://security.miniorange.com/login-and-spam-protection/" rel="nofollow ugc">Spam protection</a> protects your site using Google reCAPTCHA.</p>
<h4>Rename Login URL</h4>
<p>Every website has default login URLs, which all hackers, bots, and malicious attackers are aware of. Once they reach your login page, they only need to guess your password to gain access, which is why protecting your site’s login page by Rename login URL is critical for its security.</p>
<h4>Google Recaptcha</h4>
<p>Google Recaptcha secures you from Brute force attacks on the login and registration page.</p>
<h4>BRUTE FORCE ATTACKS PROTECTION</h4>
<p>By default, WordPress allows users to try different passwords as many times as they want, this is also known as a brute force attack. However, you can change this and add an extra layer of login security to protect your site.<br />
Brute Force Limit Login Protection with IP Blocking security help you monitor login attempts from your users and hackers. We keep track of user’s login attempts and we send alerts to administrators for unusual activities if someone exceeds allowed failed login attempts.</p>
<h4>BLOCK REGISTRATIONS FROM FAKE USERS</h4>
<p>Spam protection of Limit Login Attempts helps you detect suspicious email addresses instantly and provides a means for effective spam protection.<br />
* Realtime Global IP blocking  – It protects your website from malicious IPs and lets the genuine traffic on your WordPress.<br />
* Rate Limiting  – It controls the number of incoming requests from a specific IP to your website<br />
* Login Security – Limit Login Attempts and track user login attempts<br />
* Anti Spam Protection: Spam protection protects your website from spammers by using  google Recaptcha for comments<br />
* User Registration Security – Disallow Disposable / Fake email addresses<br />
* Brute Force Login / Attacks Protection (Login Security)  – We keep track of users’ login attempts and we send alerts to administrators for unusual activities if someone exceeds allowed failed login attempts.<br />
* IP Blocking – Manual and automatic blocking of IPs ( Blacklisting and whitelisting included ).<br />
* Protection for WordPress files – We provide you the option to prevent access to users from browsing directory content and editing files from WP Dashboard (Themes and plugins).<br />
* Google reCAPTCHA protection for login, and registration.</p>
<h4>Advanced Features :-</h4>
<ul>
<li>Advanced Blocking  – Block users based on: IP range, Country, Browser / User-Agent, Referer, and HostName (DNS)</li>
<li>Htaccess Website Security Protection- Secure your website from unintended users with access website security protection which blocks user requests on the server(apache) level. <a href="https://security.miniorange.com/htaccess-vs-plugin-level-firewall-on-wordpress/" rel="nofollow ugc">htaccess vs firewall</a></li>
<li>Comment SPAM Filter and Site SPAM Check/Spam Protection – We check if your website is generating SPAM to protect your website from getting blocked by search engines.</li>
<li>SPAM Protection and google reCAPTCHA for comments – Google reCAPTCHA protects your website from spam and abuse. Google reCAPTCHA uses an advanced risk analysis engine and adaptive google reCAPTCHAs to keep automated software from engaging in abusive activities on your site.</li>
<li>Notification to admin and end users  – Send Email Alerts for IP blocking and unusual activities with a user account</li>
<li>DOS (Denial of service) attacks protection   – Protect your resources from DOS attacks by slowing down attackers by delaying response and increasing delay in each of his requests and eventually blocking them entirely.</li>
<li>Country Blocking –   If you have a website that gets inundated with SPAM or hacking attempts from visitors or bots originating from certain countries we can help you block those attempts.</li>
</ul>


Limit Login Attempts

Unable to use this plugin without registration. You should mention it in description. I have to give one star to this app, because that's not a fair play.

Account required

Limit Login Attempts with IP blocking, brute force protection, Google recaptcha on login as well as registration from spam protection, rename login ur …

Limit Login Attempts Reloaded – Login Security, Brute Force Protection, Firewall vs Limit Login Attempts