WordPress.org

Ready to get started?Download WordPress

Plugin Reviews

WP fail2ban

Write all login attempts to syslog for integration with fail2ban.

12 reviews
Average Rating
5 stars
5 out of 5 stars
You are currently viewing the reviews that provided a rating of 5 stars. Click here to see all reviews.
5 stars
Does exactly what it says on the tin.
By , for WP 3.6.1

This plugin worked nicely for me on a day when a not very powerful WordPress server was receiving thousands of bruteforce attempts from nearly a thousand different IPs. Load average dropped from 40+ to well below 1.

The README suggested this stanza in jail.local

[wordpress]
enabled = true
filter = wordpress
logpath = /var/log/auth.log

but with Ubtuntu 12.04 and failban 0.8.6 I found I needed to add

port = http
protocol = tcp

and if you run WordPress with https, you'll instead need

port = http,https

I also added

maxretry = 2
bantime = 84600

It is suggested to add

define('WP_FAIL2BAN_BLOCKED_USERS','^admin$');

to wp-config.php to short-circuit login attempts as admin. I followed the suggestion but instead used

define('WP_FAIL2BAN_BLOCKED_USERS','^(admin|DOMAIN)');

because I noticed that the usernames being used in the attempts were admin, administrator, and DOMAIN (WP is served on http://www.DOMAIN.com)

5 stars
Very useful
By , for WP 3.6

The installation is easy and that works just fine.

Thank you.

5 stars
fail2ban does what it is meant to do
By ,

This plugin works just fine.

5 stars
Works perfectly
By ,

It works perfectly on my system:

Debian 7 up to date
WP 3.5.2
Fail2ban 0.8.6-3wheezy2

I just need to add port = http,https

Thank you!
Laurent.

5 stars
Does the job
By ,

Very simple and effective

5 stars
Simple - exactly as advertised
By ,

Quick and easy

5 stars
Works nicely
By , for WP 3.5.1

Logs all attempted logins, and Fail2Ban blocks the persistent offenders. Thanks :-)

5 stars
Works fine
By ,

Simple and straightforward. Great job.

5 stars
Works perfectly
By ,

Fail2Ban is very good and this plugin just connecting WordPress to them.

5 stars
Fantastic Plugin - Good clean code
By , for WP 3.5.1

Lovely plugin. Integrates nicely with our existing anti-hacker tools.

You must log in to submit a review. You can also log in or register using the form near the top of this page.