Limit Attempts Pro adds expanded access rules, detailed activity records, and multisite controls to WordPress login and form protection. Set how many failed attempts are allowed and how long an IP address is blocked, then select how the plugin handles different usernames and addresses.

Set thresholds and access rules

For a non-existent username, choose whether to use the standard block settings, block the IP address immediately, or add it directly to the immediate deny list. IP addresses that exceed the block limit can also be added to the deny list automatically.

Add IP addresses, ranges, and masks to allow or deny lists. Country-based IP blocking uses a GeoIP database. You can also allow or deny access by email address or domain. List entries can include a country, IP range, and reason; when an address appears on both lists, the deny list takes priority.

Review activity and manage forms

The Pro log records the IP address, username, password, hostname, event type, form source, and timestamp. Login statistics and a chart of brute-force attempts are available in the settings area and dashboard widget. Email alerts can notify administrators about blocked and denylisted users, and the notification behavior, email messages, and messages shown for failed logins or blocked users are configurable.

You can hide the login, registration, and lost-password forms from blocked or denylisted IP addresses. The extension's CAPTCHA can be used on default forms, and the plugin is compatible with Captcha Pro, Captcha Plus, and reCaptcha. Contact Form compatibility includes settings for the email sending interval and the number of emails allowed per interval.

Configure the website or network

In the plugin settings, define the failed-attempt threshold and block duration, configure access lists and any country, range, email, or domain rules, then set visitor messages and email alerts. Review logs and statistics in the settings area or dashboard widget. Choose the CAPTCHA and form behavior options as needed. If the Htaccess plugin is installed, configure deny-list synchronization separately; this option is intended to reduce database load. Multisite administrators can manage settings across the network.

Limit Attempts Pro includes the free plugin functions along with these expanded rules, logs, statistics, and controls. Install and activate it from the WordPress administration area, then open its settings to configure blocking, notifications, lists, CAPTCHA, and logging. Step-by-step documentation and installation videos are available. Priority support is provided within one business day under the stated support policy.