Blacklist IP addresses that attempt to login with a banned username through Cloudflare.
Alternatives to <.htaccess> IP block
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
NaveenCodes Login Guardv1.1.0
Brute-force protection, live login-attempt log, IP block/allow lists, and instant email alerts — all on your server, zero external requests.
TSI Visitor Blockerv1.4.1
Protect your WordPress site from unwanted visitors, spam, bots, and brute-force attacks with a lightweight and easy-to-use security solution.
Restrict website access by IP addresses, CIDR ranges, countries, and regions.
Protect Gravity Forms and Contact Form 7 from abuse with IP tracking, repeat-offender blocking, and restricted submission logs.
Protect your content by blocking or redirecting visitors from specific countries.
AphoniXv1.0.1
Protect WordPress login with lightweight custom CAPTCHA, Two-Factor Authentication (2FA), IP blocking, REST hardening, and custom login URL.
Easily block visitors from selected countries with geo-based restrictions and an admin settings page.
Deny All Firewallv2.0.4
Stop unwanted requests before WordPress loads. Deny All Firewall uses .htaccess to allow genuine content and refuse everything else.
Easy IP Blockerv2.1.0
Quickly block unwanted IPs in your WP site with CDN/proxy-aware IP detection