Only misses one thing

I will really want a rule when, if a IP breaks it, the IP registers automatically to the black list. That will build a wall at the end of the day.

If X failed attempts, then, register to blacklist.

Simple as that.

Apart from that, the plugin have saved me from a lot of idiots trying brute force on my site.