WP fail2ban

Plugin · Free

60,000+ active installs · Rated 4.2/5 · Updated October 20, 2026

Visit website

A plugin that writes WordPress login and other security events to the system log in a format the fail2ban tool understands, so repeated attacks can be blocked at the server level. It suits administrators with server access who already use fail2ban. The plugin is free, with a paid edition adding extra features.

Pros

  • Turns failed logins and user enumeration into fail2ban signals
  • Blocks user enumeration through the REST API, sitemaps and oEmbed
  • Logs spam comments and XML-RPC abuse for fail2ban
  • Free edition covers the common attacks

Cons

  • Needs a fail2ban service and syslog access on the server
  • Shows no activity log inside WordPress; events go to syslog
  • Premium adds more protection, sold separately

Topics: Security plugins

Mentioned in

Alternatives