This plugin blocks detected attackers or displays them a captcha to check they are not bots.

CrowdSec

<p>The CrowdSec plugin proactively blocks requests coming from known attackers.<br />
It does so by either directly using CrowdSec Blocklists Integration or by connecting to your CrowdSec Security Engine.</p>
<h4>Key Features:</h4>
<ul>
<li><strong>Instant CrowdSec Blocklist</strong>: Quickly block known WordPress attackers in a few clicks.</li>
<li><strong>Detect and block</strong> admin bruteforce attempts and scans of your WordPress Site.</li>
<li>Remediation metrics: Enabling you to see the efficiency of the protection.</li>
<li>(Console Users) Plug any of your existing Blocklist Integrations.</li>
<li>(CrowdSec Security Engine Users) Apply decisions and subscribed blocklist of your security engine within WordPress.</li>
</ul>
<p>You can:</p>
<ol>
<li>Block aggressive IPs</li>
<li>Display a captcha for less aggressive IPs</li>
</ol>


Alternative Plugins for

Discover the Lists with CrowdSec

T3 Core Install