There is a quite simple way to limit login attempts in WordPress. All you have to do is download and install the Login LockDown plugin. After activeting this plugin, you can set it up as needed.
Safeguards WordPress against programmer assaults, spam, trojans and malware. Mitigates animal power assaults by constraining the quantity of login endeavors through the login structure, XML-RPC/REST API demands or utilizing auth treats.
Plugins - Spam
Newest Antispam WordPress Plugin-Carber Security-Malware Scan