Most shared hosting will have a software based firewall that can automatically block or rate limit IP addresses based on failed login attempts. WordPress I'm sure has a plugin that can do the same thing.
In my experience, this type of thing is not something you want to do manually.