There’s an app plugin for that, Limit Login Attempts.
Some more info available in this wp beginner post: http://www.wpbeginner.com/plugins/how-and-why-you-should-limit-login-attempts-in-your-wordpress/
Related Posts:
- WordPress login urls
- Is there any way to rename or hide wp-login.php?
- Increase of failed login attempts, brute force attacks? [closed]
- How to fake a WordPress login?
- Receiving “This content cannot be displayed in a frame” error on login page
- Websites defaced by uploading script using theme editor
- Make wordpress admin failed login attempt return 401
- Can’t stop hacker trying to get admin access in WordPress blog after trying many ways [closed]
- Store brute-force IP addresses
- How to create a private login page for admin.?
- WordPress Security – How to block alternative WordPress access
- Protecting WordPress login page
- wp-admin folder, brute force, and password protection
- Sniffing wordpress user’s credentials
- disable site_url redirect in wp-login.php
- Does WordPress (or a plugin) reveal login credentials to admin?
- Is wp_login_form secure on a non secure page?
- WordPress login security
- Why isn’t the login page rate limited by default?
- How can I password protect a WordPress site without requiring users to log in?
- Input sanitation
- How to Prevent Brute Force Attack on WordPress
- Advice on redirect to lock site from unauthorized users
- Where is the php file, that does the checks for login information?
- Error on WordPress Login
- Access log “POST /wp-login.php HTTP/1.0” 400
- force login loophole
- I need to find which is the file that checks the DB for correct login (username, password)
- How to create separate login for authors/moderators/subscribers?
- How to invalidate `password reset key` after being used
- Site is not loading after relogin attempts on SSL
- Some crawlers/bots attempting to login with very good guesses. How?
- Hide wp-login.php but not the widget
- How login is possible, if I deny login page via nginx?
- Disallow user from editing their own profile information
- wp_signon returns user, but the user is not logged in
- How to remove the WordPress logo from login and register page?
- Customize wp_new_user_notification_email()
- Need to execute a cron job
- Masking logout URL
- How can I retrieve the username and password from my WordPress installation?
- User Directory without a Plugin
- Pre checking condition before login
- Attach to wp-login.php and xmlrpc.php
- Custom Connect to Facebook, problem logging in/logging out
- Redirect after empty login username and password
- WordPress Login page trashed
- Are there ways of logging in that bypass wp-login.php altogether?
- Change Favicon on Login Screen?
- Admin username and password
- Customizing the WordPress login form
- How to display username and password after registration
- wp-login gives 404 error, but wp-admin is working fine
- Login error redirecting to wp-login page
- Private page protected with username and password
- Password reset – Disabled for LDAP accounts
- Replace dash with space in username on login
- Autologin only working the second time
- Completely replacing the login form
- Why wp_update_user doesn’t update user_activation_key on users with apostrophes in their email?
- Forgot Password/ Password Reset Page does not exist
- WordPress on Apache behind nginx using letsencypt issue with loginizer/limit login attempts
- Auto login between word press subdomain and a .net website
- Custom Login form from WordPress site to non-WordPress site
- using rewrites to secure login page
- Best option to implement external register/login to WP from self-made API
- Enqueue new login style sheet
- Secure login on wordpress [closed]
- Can’t login to my own website
- I cannot login and am getting this error message. .
- Can I Get User ID at Login?
- I want login using email not username wordpress front end
- How to Remove default “Login” link
- How to unpublish my new site while working on it?
- wordpress admin security
- Reset Password Limit not working
- User not able to sign in after wp_authenticate() and wp_signon() wordpress
- Problem in auto login after registration
- Cant reset password my wordpress password not even with phpMyAdmin
- wp-cron event doesn’t run when custom login API is enabled
- Special link for no automatic login (no username and no password)
- Global login to password protected pages
- Disable / Remove Password for Login WordPress
- WordPress Auto Login From Email Link
- Building a custom login form – encountering issues
- Making sure two different wordpress website has auto login
- How do i Redirect specific user(WooCommerce Sign-in not wordpress admin page sign-in) to specific page
- Chosen user password in registration is not being accepted on Login
- Improvements to “limit login attempts” plugin
- Add a required field to Registration
- loging to Admin page not working at all
- Can’t login through wp-login.php on fresh installation
- WordPress Cookies – wp_set_auth_cookie
- Authenticate return value
- Using wp_login_form passowrd as undefined
- Redirect non-members to about/intro page
- Handle POST request sent from an external site for login?
- Couple questions about .htaccess, login page, updates
- Log in a user upon password reset?
- Flushing or disabling cache on WordPress