WP Fail2Ban Redux

This plugin connects a content management system's security events to a server's intrusion prevention system. It is designed for site administrators and server managers who need to automatically block brute-force attacks and other malicious activity at the network level. By writing specific events to the system log (syslog), it enables tools like Fail2Ban to parse the logs and enact bans on offending IP addresses.

• Failed Login Detection: Logs failed authentication attempts, distinguishing between attempts for non-existent users and valid usernames. This provides more granular data for security rules.
• XML-RPC & Pingback Monitoring: Records failed XML-RPC authentication and pingback errors, common vectors for brute-force and DDoS attacks.
• Configurable Event Logging: Additional events like pingback requests, user enumeration attempts, and comment spam can be enabled via filters for customized monitoring.
• Server Integration: Includes ready-to-use Fail2Ban filter and jail configuration files to streamline setup and immediate protection.
• Proxy Support: Provides guidance for configuration on sites behind reverse proxies or content delivery networks to ensure correct client IP logging.