Custom Fail2Ban jain for xmlrpc.php

[shoulders]

Some example fail2ban code (including xmlrpc)

Wordpress - Fail2Ban - PHP

Go to Networking ⇾ Fail2Ban Intrusion Detector: Log Filters page; Click Add a new log filter button; Fill the following fields: 3.1. Filter name: wordpress; 3.2. Regular expressions to match:<HOST>.*POST.*(wp-login\.php|xmlrpc\.php|account\/signin).* 200 3.3. Click Create button; Go to Networking ⇾ Fail2Ban Intrusion Detector: Filter Action Jails page; Click Add a new jail button; Fill the following fields: 6.1. Jail name : wordpress-domain-com; 6.2. Filter to search log for: wordpress; 6…

Some more code

Fail2Ban not matching or banning new WordPress filter

SYSTEM INFORMATION OS type and version Ubuntu Linux 22.04.3 Webmin version 2.101 Usermin version 2.001 Virtualmin version 7.8.2 Theme version 21.04 Package updates 9 package updates are available Hi, I have setup a new filter on Fail2Ban to block brute force attacks on xmlrpc.php and wp-login.php, however it is not matching or blocking any of the requests. Here is my configuration, I hope someone can spot where the issue is: Under log filters, I added a new log, and use…