Great Security Upgrade, Very Flexible

I installed this plugin after my site slowed to a crawl with almost 100% CPU usage. I contacted by web host and found wp-login.php was being targeted with login attempts on the multisite WordPress installation installed. The web host blocked the offending IP. Within an hour another IP was doing the same thing. Immediately after installing and configuring this plugin, the problem stopped. Fair warning – this plugin can easily get too aggressive if you select the wrong options it may lock you out. In my case, I was aware of the potential consequences and made a .htaccess backup so I could restore the file and access. Playing with some of the options and saving them incrementally helped to determine the final configuration used. I have refined some of the rules further using the Custom Rules option.