Description
Limit Attempts is a powerful WordPress security plugin that protects your site from brute-force attacks and bot logins. It limits the number of failed login attempts per user and blocks IP addresses for a configurable time period based on your settings.
You can manage deny and allow lists, receive email alerts, and hide login or contact forms from blocked users. This plugin offers seamless protection without the need for coding and is compatible with other BestWebSoft security tools.
Shield your site against automated attacks and unauthorized access today.
Free Features
- Automatically block IP addresses after exceeding allowed login attempts
- Add IPs that exceed block limit to deny list automatically
- Manually add IP addresses to:
- Deny list
- Allow list
- Compatible with Contact Form:
- Set email sending interval
- Set number of emails allowed per interval
- Hide login, register, and lost password forms for blocked or denylisted IPs
- Add denylisted IPs to
.htaccessfile with Htaccess to reduce database load - Treat incorrect captcha as a failed login with Captcha
- View detailed login attempt statistics:
- IP address
- Failed attempts
- Block count
- Status
- Customize error messages for:
- Failed login
- Blocked users
- Denylisted users
- Send email alerts for blocked and denylisted users to:
- User email
- Custom email
- Limit Attempts Captcha for default forms
- Limit Attempts export/import
- Compatible with latest WordPress version
- Incredibly simple settings for fast setup without modifying code
- Detailed step-by-step documentation and videos
- Multilingual and RTL ready
Pro Features
All Free features included, plus:
- Add IP ranges and masks to deny/allow list
- Block IPs by country using GeoIP database
- Deny or allow access by email address or domain
- Control total failed attempts before block
- Manage deny/allow lists with:
- Country
- IP range
- Reason
- Compatible with:
- Configure rules for non-existent usernames:
- Use standard block settings
- Immediate IP block
- Immediate deny list
- Log tab includes:
- IP address
- Username
- Password
- Hostname
- Event type
- Form source
- Timestamp
- Login statistics and brute-force attempts chart in settings and dashboard widget
- Multisite network settings support
- Use plugin’s captcha on default forms
- Priority support within 1 business day (Support Policy)
Got a feature request? We want to hear it: Suggest a Feature
Documentation & Videos
Help & Support
Need help? Visit our Help Center – https://support.bestwebsoft.com/
Translation
- Polish (pl_PL) β thanks to Damian DΔ browski
- Russian (ru_RU)
- Ukrainian (uk)
- Italian (it_IT)
- Portuguese (pt_PT)
- Arabic (ar)
- German (de_DE)
- Spanish (es_ES)
- French (fr_FR)
Help us improve translations! Send PO/MO files via Support Form or use Poedit.
Recommended Plugins
Screenshots
Installation
- Upload
limit-attemptsto/wp-content/plugins/. - Activate via the “Plugins” menu in WordPress admin.
- Go to “Limit Attempts” in admin to adjust settings.
- Configure allow/deny lists or use defaults.
Step-by-step Installation Guide
FAQ
-
What are the “Settings” tab options?
-
These control how and when to block users, send notifications, and integrate with other plugins:
* “Lock options”: Set how long IPs are blocked and after how many failed attempts.
* “Block options”: Add IPs to deny list after multiple blocks.
* “Block message”: Customize messages shown to blocked users.
* “Send mail”: Enable email alerts to admins.
* “Email message”: Customize email templates.
* “Htaccess plugin”: Sync deny list with.htaccess.
* “Captcha”: Consider incorrect captcha as failed login. -
Where can I find blocked users?
-
Under the “Blocked addresses” tab, along with unblock time and manual unblock option.
-
How do I add IPs to deny or allow list?
-
Use the “Deny list” or “Allow list” tabs. You can input single IPs, ranges, or masks.
-
How do I check if an IP is in the lists?
-
Use the search field in the respective list tab to find related entries.
-
Where are failed login stats shown?
-
Go to the “Log” tab. Youβll see IPs, failed attempts, blocks, and current status.
-
How to manually unblock an IP?
-
Go to the “Blocked addresses” tab, hover over the IP, and click “Reset block.” For multiple IPs, use bulk action.
-
What if an IP is in both allow and deny list?
-
Deny list takes priority and the user will be blocked.
-
I blocked myself. How can I fix it?
-
- Log in from another IP and remove yours.
- Use a proxy/VPN to access and unblock.
- Use database access to remove your IP from the
lmtttmpts_blacklisttable (advanced users only).
-
Why am I not receiving notification emails?
-
Check:
* Notifications are enabled in settings
* Correct email entered
* Emails arenβt going to spam
* Hosting isnβt blocking outgoing mail -
Why is blocking delayed?
-
This may happen when sending emails is enabled. It doesn’t affect plugin performance.
Reviews
April 18, 2022
After one of my sites got hacked a few years ago, I installed this plug-in on all my Wordpress accounts to try to prevent it from happening again. For the first few months I got almost daily attack reports but now it’s down to just a handful each year (I can’t imagine how many IPs must be on my block list by now). Thank you! π
January 10, 2018
Tutto perfetto, evita che vi siano ripetuti tentativi di login. Molto configurabile, invia notifiche.
November 23, 2017
He fulfills his task. I am happy with it. Thanks π
Limit Attempts by BestWebSoft
November 17, 2017
ThatΛs what I needed for my work. Great. Thanks.
May 11, 2017
I’ve been using this plugin for a couple of years and been very happy with the results. I have Securi installed and it was constantly emailing me about failed login attempts until I installed this.
March 16, 2017
Install this plug-in now, pokoke apiklah
Contributors & Developers
“Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms” is open source software. The following people have contributed to this plugin.
Contributors
“Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms” has been translated into 2 locales. Thank you to the translators for their contributions.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
V1.3.2 – 04.08.2025
- Update : BWS panel section was updated.
- Update : All functionality was updated for WordPress 6.8.2.
- New: Limit Attempts export/import was added.
- Bugfix : Fixed small bags.
V1.3.1 – 30.04.2024
- Update : Security fixes.
- Update : BWS panel section was updated.
- Update : All functionality was updated for WordPress 6.5.
V1.3.0 – 08.03.2024
- Update : All functionality was updated for WordPress 6.4.
- Update : BWS panel section was updated.
- Pro: Limit Attempts Captcha for default forms was added.
- Bugfix : Database queries have been optimized.
V1.2.9 – 19.05.2021
- Pro : Email priority Deny and Allow lists issue has been fixed.
- Bugfix : The issue with displaying pagination on tables has been fixed.
- Update : Adding items to Deny and Allow lists has been moved to a separate page.
- Update : The plugin settings page has been updated.
- Update : BWS panel section was updated.
- Update : All functionality was updated for WordPress 5.7.2.
V1.2.8 – 24.11.2020
- Bugfix : Database queries have been optimized.
- Update : BWS Panel section was updated.
- Update : Blacklist and whitelist replaced with deny list and allow list.
V1.2.7 – 15.07.2020
- NEW : Ability to block emails sent from certain email address via Contact Form by BestWebSoft was added.
- Bugfix : Fixed small bags.
- Update : BWS panel section was updated.
V1.2.6 – 04.09.2019
- Update : The deactivation feedback has been changed. Misleading buttons have been removed.
V1.2.5 – 04.06.2019
- PRO : Ability to add the email address to the Whitelist has been added.
- Bugfix : Fixed small bags.
- Update : BWS menu has been updated.
V1.2.4 – 04.03.2019
- PRO : Ability to save the “Username” and “Password” which were used in the failed login attempts.
V1.2.3 – 15.01.2019
- Update : All functionality was updated for WordPress 5.0.2.
- Bugfix : Fixed small bags.
V1.2.2 – 19.10.2017
- Update : The Compatibility with Captcha Pro by BestWebSoft has been improved.
V1.2.1 – 01.03.2017
- Bugfix : The bug with saving settings on the multisite was fixed.
- Bugfix : The bug with saving IP to whitelist or blacklist was fixed.
- PRO : The bug with updating lists was fixed.
- PRO : The bug with adding IP to Htaccess by BestWebSoft plugin has been fixed.
V1.2.0 – 13.10.2017
- Update : All functionality for wordpress 4.8.2 has been updated.
- PRO : Compatibility with the Google Captcha (reCAPTCHA) by BestWebSoft has been added.
V1.1.9 – 19.06.2017
- Update : All functionality for wordpress 4.8 was updated.
- Pro : Statistic displaying has been updated.
V1.1.8 – 17.03.2017
- NEW: An ability to add IP address to the Whitelist from the Blocked List.
- Update : The plugin settings page has been updated.
V1.1.7 – 06.10.2016
- Update : Block and blacklist functionality improved.
- Pro : An ability to edit the reason of adding to black- or whitelist has been added.
- Pro : Compatibility with the Captcha Pro by BestWebSoft plugin has been updated. WooCommerce plugin support has been added.
V1.1.6 – 08.08.2016
- Update : All functionality for WordPress 4.6 was updated.
V1.1.5 – 27.06.2016
- Update : The Polish language file has been updated.
- Update : BWS Panel section is updated.
V1.1.4 – 08.04.2016
- Update : The Polish language file has been updated.
- Bugfix : The bug with the displaying of the HTML tags in error messages has been fixed.
- Bugfix : The bug with the automatic unblocking of users has been fixed.
- Bugfix : The bug with the automatic blacklisting of users has been fixed.
- Bugfix : The bug with the creating of plugin’s database tables has been fixed.
V1.1.3 – 26.01.2016
- NEW : Ability to hide the login form, the registration form and the lost password form for blocked or blacklisted IPs.
- Bugfix : Bug with displaying of list of blocked IPs has been fixed.
- Bugfix : Bugs with the recording/removing of statistical data in the database have been fixed.
- Bugfix : Bugs with the pagination on plugin`s settings pages have been fixed.
- Update : Compatibility with the Htaccess by BestWebSoft plugin has been updated.
- Update : Functionality for the login form, the registration form and the lost password form has been updated.
- Update : Functionality for wordpress 4.4.1 has been updated.
V1.1.2 – 21.10.2015
- Bugfix : We fixed the bug with adding IP to the blacklist.
- Update : BWS plugins section is updated.
V1.1.1 – 09.10.2015
- NEW : Ability to add your IP in to the whitelist.
- Update : We updated the list with IP addresses displaying in the black- and whitelist.
- Bugfix : We fixed SQL injection vulnerability in the function of obtaining IP-address of the user.
- Update : We updated all functionality for wordpress 4.3.1.
V1.1.0 – 21.07.2015
- NEW : Ability to restore default settings.
V1.0.9 – 12.06.2015
- Bugfix: We changed the mechanism of unlocking IP addresses on the timer.
V1.0.8 – 14.05.2015
- NEW : The Polish language file is added.
- Bugfix: Undefined user blocking after plugin activation is fixed.
- Bugfix: Access priority when IP is included to the black- and whitelist at the same time (blacklist has higher priority).
- NEW: Ability to search by part IP.
- NEW: Additional notifications on the plugin pages.
V1.0.7 – 30.01.2015
- Update : Compatibility with new Htaccess was added.
- Update : The work of IP unblocking function was improved.
V1.0.6 – 30.12.2014
- Update : Settings tab on plugin settings page was updated (interactivity was improved).
- Update : The name of the ‘Log’ tab on the plugin settings page was changed to ‘Statistics’.
- Bugfix : Performance issue on ‘Statistics’ page was fixed.
V1.0.5 – 11.09.2014
- Update : We updated all functionality for wordpress 4.0.
- Bugfix : Added missing closing tags .
V1.0.4 – 08.08.2014
- Bugfix : Security Exploit was fixed.
V1.0.3 – 04.08.2014
- Update : We updated all functionality for wordpress 4.0-beta2.
- Bugfix : Bug with Number of failed attempts is fixed.
V1.0.2 – 19.06.2014
- Bugfix : Added support for working with multisite.
- NEW : Added the ability to customize error messages in login form.
- NEW : Added the ability to customize customize email messages.
- NEW : Java scripts was added.
V1.0.1 – 27.05.2014
- Bugfix : Deleting unused sql query.
- NEW : Added messages in admin page.
V1.0.0 – 05.05.2014
- Bugfix : The code refactoring was performed.
- NEW : Css-style was added.
- NEW : Added messages in login form.