Distributed anti bruteforce plugin.
As of April 2026, WP-DenyHosts is a WordPress spam plugin with 20 active installations and a 5/5 rating from 1 reviews. It has been downloaded 3.2K+ times in total. Requires WordPress 3.5+ and PHP false+. Available on WordPress.org since 2013. Last updated 12 years ago — may have compatibility concerns. Top alternative: Akismet Anti-spam: Spam Protection.
How it works.
The plugin monitors failed login attempts, if the limit is reached the users IP is added to a local banlist.
The user is now blocked and can no longer attempt to login.
Every 24 hours the plugin will upload the blocker IPs and download a fresh list of all IPs blocked accross the network in the last 7 days.
If an IP is blocked on 3 or more servers its added the the global ban list and will be blocked on all servers using the plugin.
| WordPress | 3.5+ requiredTested up to 3.6.1 |
| PHP | false+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.