SecurePublishv1.2.4

Fail2WP is a security plugin designed for site administrators who need to harden their CMS against common attacks and automate threat response. It adds a suite of protective measures and connects directly with the Fail2Ban intrusion prevention framework.

• Login Hardening: Disables login via username, requiring an email address instead, and prevents user enumeration through author queries. It also sets a minimum username length and can block specific usernames from registration.
• Access Control: Allows blocking or allowing logins from specific IP addresses, ranges, or hostnames. It can also partially or fully disable XMLRPC and REST API access to reduce attack surfaces.
• System Integration: Detects proxy services like Cloudflare to log actual visitor IP addresses correctly. It works without JavaScript or tracking code and is compatible with modern PHP and CMS versions.
• Fail2Ban Integration: The core function is to work with an existing Fail2Ban installation. It formats system logs in a way that Fail2Ban can parse, enabling the automatic, dynamic blocking of IP addresses that exhibit malicious behavior like repeated login failures.