# Wordpress - Fail2Ban - PHP

**URL:** <https://forum.virtualmin.com/t/wordpress-fail2ban-php/126141>\
**Category:** Webmin\
**Created:** [April 22, 2024, 7:20am UTC](https://forum.virtualmin.com/t/wordpress-fail2ban-php/126141 "2024-04-22T07:20:27Z")\
**Posts on this page:** 1\
**Showing post:** 21

<div class="post-metadata">

**Author:** ![Ilia](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/ilia/32/10185_2.png) [@Ilia](https://forum.virtualmin.com/u/Ilia)\
**Post date:** [April 30, 2024, 9:23am UTC](https://forum.virtualmin.com/t/wordpress-fail2ban-php/126141/21 "2024-04-30T09:23:20Z")

</div>

1. Go to **Networking ⇾ Fail2Ban Intrusion Detector: Log Filters** page;
2. Click **Add a new log filter** button;
3. Fill the following fields:  
3.1. **Filter name** : `wordpress`;  
3.2. **Regular expressions to match** :

```auto
<HOST>.*POST.*(wp-login\.php|xmlrpc\.php|account\/signin).* 200

```

3.3. Click **Create** button;
4. Go to **Networking ⇾ Fail2Ban Intrusion Detector: Filter Action Jails** page;
5. Click **Add a new jail** button;
6. Fill the following fields:  
6.1. **Jail name** : `wordpress-domain-com`;  
6.2. **Filter to search log for** : `wordpress`;  
6.3. **Currently enabled?** set to **Yes** ;  
6.4. **Log file paths** :

```auto
/var/log/virtualmin/domain.com_access_log

```

6.5. Click **Create** button;
7. Enjoy, and please let’s close this thread already!

**Note:** A `backend` may need to be manually defined as described in [this comment](https://forum.virtualmin.com/t/wordpress-fail2ban-php/126141/35).

---

_[View the full topic](https://forum.virtualmin.com/t/wordpress-fail2ban-php/126141)._