Phantom User Lockoutv1.2.0
Records logins that use usernames which don't exist (username, password tried, IP, location, host) and blocks the IP until you unblock it.
Alternatives to Block Logins with Cloudflare
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Limit login attempts, hide your login URL, log every auth event, and get email alerts — a lightweight, privacy-first login security plugin.
Monitors 404 requests and blocks or challenges abusive IPs at the Cloudflare edge using IP Access Rules.
360 Orbit Login Guardv1.0.18
Protects your login against brute-force attacks: rate limiting, login history and generic error messages, with a safety net against admin lockout.
Webboll Securityv2.9.20
Behavior-first WordPress security: custom login URLs, brute-force protection, 2FA, threat engine, activity logging and more.
Atlant Securityv1.1.38
Enterprise-grade WordPress security: WAF, brute force protection, malware scanner, 2FA, honeypots, AI crawler control, and post-breach recovery.
Short Description: Protect your WordPress login from brute-force attacks with IP lock and login attempt limits.
OrioleOne Master Guardv1.1.2
All-in-one WordPress security with brute-force protection, hardening controls, and a clear failed login audit log.
Login Security with Telegram Alerts protects WordPress logins, stops brute force, logs activity, and sends real-time Telegram alerts.
Security and anti-spam without CAPTCHA. Blocks bots on forms, comments and logins, limits login attempts and hardens WordPress. No outside service.