User Security Guard for WordPress is a WordPress login security plugin that stops brute-force attacks, password guessing and bots at the sign-in. It counts failed logins per IP address, username and email, scores every authentication request with one risk engine, and blocks what is dangerous while letting real visitors and administrators through.
Every block stores a plain-English reason, and a block lasts until an administrator removes it. Passwords, cookies and request bodies are never stored, and no sign-in data, IP address or username ever leaves your site.