I figured that behind every bot was a human being that might get deterred if they realize they’ve been blocked for a long period of time (and that security was in place), and would just kill their brute force script
I’m using another plugin for users to log into the front end (wp-members), although I’m assuming bots are most likely trying to hack through <domain>/wp-login.php. It’s possible that I’ll get rid of front-end logins to my site in the future, and if that’s the case, will ditch Limit Login Attempts and just stick with LSM from BPS Pro (and incorporateBPS Pro JTC Anti-Spam / Anti-Hacker).
Thanks for getting back so quickly,
Pete