i have some suggestion for features
1. run for users that have been resisted before plugin install
2. almost fake user have same name and username one reason to block them
3.at first login check browser if its not know browser like IE FF Ch etc etc one reason to block them
4.if are more than 3-5 reason block them