https://sangkrit.net/prevent-brute-force-attacks-disable-username-force-email-login-enable-automatic-lockdown-in-your-wordpress-site/