WordPress.org

Plugin Directory

WP fail2ban

Write all login attempts to syslog for integration with fail2ban.

  1. Upload the plugin to your plugins directory
  2. Activate the plugin through the 'Plugins' menu in WordPress
  3. Copy wordpress-hard.conf and wordpress-soft.conf to your fail2ban/filters.d directory
  4. Edit jail.local to include something like:
[wordpress-hard]
enabled = true
filter = wordpress-hard
logpath = /var/log/auth.log
maxretry = 1
port = http,https

[wordpress-soft]
enabled = true
filter = wordpress-soft
logpath = /var/log/auth.log
maxretry = 3
port = http,https
  1. Reload or restart fail2ban

You may want to set WP_FAIL2BAN_BLOCK_USER_ENUMERATION, WP_FAIL2BAN_PROXIES and/or WP_FAIL2BAN_BLOCKED_USERS; see the FAQ for details.

Requires: 3.4.0 or higher
Compatible up to: 4.5.3
Last Updated: 2 weeks ago
Active Installs: 20,000+

Ratings

4.9 out of 5 stars

Support

2 of 4 support threads in the last two months have been marked resolved.

Got something to say? Need help?

Compatibility

+
=
Not enough data

1 person says it works.
0 people say it's broken.

100,1,1
100,1,1 100,2,2
100,2,2
100,2,2 100,2,2
50,2,1
100,1,1
0,1,0
100,1,1 100,1,1
100,2,2
100,1,1
100,4,4
100,1,1
100,3,3 100,2,2
100,1,1
100,2,2
100,1,1
100,1,1
50,2,1
100,1,1