As of April 2026, Block Default Login Attempts is a WordPress bot plugin with 10 active installations and a 5/5 rating from 1 reviews. It has been downloaded 1.9K+ times in total. Requires WordPress 3.0+ and PHP false+. Available on WordPress.org since 2014. Last updated 11 years ago — may have compatibility concerns. Top alternative: Chatbot for WordPress by Collect.chat ⚡️.
5/51 reviews
10active installs
1.9K+total downloads
12 yearssince 2014
Overview
The greatest hack focus on a WordPress site seems to be trying to log in with
the default username “admin”. This plugin detects all login attempts with that
username and exits with a 403 Forbidden header. This should eventually
discourage login bots from continuing to pound your site.
All attempts are logged inside the /wp-content/plugin-data folder, just in case
you need the info. Logs are kept for up to 30 days.
Screenshots
Ratings & Reviews
51 reviews
5 ★
1
4 ★
0
3 ★
0
2 ★
0
1 ★
0
Compatibility
| WordPress | 3.0+ requiredTested up to 3.9.40 |
| PHP | false+ required |
Top Alternatives to Block Default Login Attempts
Frequently Asked Questions
Contributors
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.