WordPress.org

fail2ban is one of the simplest and most effective security measures you can implement to prevent brute-force password-guessing attacks.

WP fail2ban logs all login attempts, whether successful or not, to syslog using LOG_AUTH. To make log parsing as simple as possible WPf2b uses the same format as sshd. For example:

Oct 17 20:59:54 foobar wordpress(www.example.com)[1234]: Authentication failure for admin from 192.168.0.1
Oct 17 21:00:00 foobar wordpress(www.example.com)[2345]: Accepted password for admin from 192.168.0.1

WPf2b comes with a fail2ban filter, wordpress.conf.

Requires PHP 5.3 or later.