Block Usernames

I don’t think you have this feature yet, but it seems like your plugin is the perfect place to put it, if possible.

I would like to be able to maintain a list of usernames that I want to always fail and fail with minimal server load. For example, many brute force attacks I get are trying to log in with the username “Unknown” or “unknown”. I would like to be able to maintain a list of such potential usernames that I want the login form to reject automatically without further ado, regardless of the IP address.

My initial list would be:

unknown
admin

Looking at what you are capturing in lockout attempts, these are being used the most. I made an initial attempt to do something like this, trying to get an onChange javascript event on the username field. Can’t seem to do it with a plugin because there aren’t any filters for the username field. My idea was to monitor the field for the word “unknown” and just exit right there or send them back to http://127.0.0.1. Any way to do this in your plugin, now or in the future?

http://wordpress.org/plugins/all-in-one-wp-security-and-firewall/