fail2ban - xmlrpc (wordpress)
  1. Adicionar no arquivo /etc/fail2ban/jail.conf:
    [xmlrpc]
    enabled = true
    filter = xmlrpc
    action = iptables[name=xmlrpc, port=http, protocol=tcp]
    logpath = /var/log/httpd/*access_log
    bantime = 86400
    maxretry = 5
    findtime = 10800
  2. Criar o arquivo /etc/fail2ban/filter.d/xmlrpc.conf:
    [Definition]
    failregex = ^ .*POST .*xmlrpc\.php.*
    ignoreregex =
  3. Reiniciar o serviço fail2ban.
IP
3.229.142.91