This plugin blocks detected attackers or displays them a captcha to check they are not bots.

CrowdSec

Note: You must first have CrowdSec <a href="https://docs.crowdsec.net/docs/next/bouncers/wordpress/" rel="nofollow ugc">installed on your server. The installation is very simple</a>.
CrowdSec is composed of a behavior detection engine, able to block classical attacks like credential bruteforce, port scans, web scans, etc.
Based on the type and number of blocked attacks, and after curation of those signals to avoid false positives and poisoning, a global IP reputation DB is maintained and shared with all network members.
This WordPress plugin is a &#8220;bouncer&#8221;, which purpose is to block detected attacks with two remediation systems: ban or challenge detected attackers with a Captcha.
<h3>CrowdSec</h3>
You can:
<ol>
<li>Block aggressive IPs</li>
<li>Display a captcha for less aggressive IPs</li>
</ol>
Get more info on the <a href="https://crowdsec.net" rel="nofollow ugc">CrowdSec official website</a>.

Alternative Plugins for

Discover the Lists with CrowdSec

T3 Core Install

wp Security