On all the sites I host I use a WP plugin to change the login page (which I change every few weeks). Typically, there's little to no traffic making it through to any brute force prevention plugin (or fail2ban). But I was thinking it might be a good idea to configure fail2ban to track and report hits on XMLRPC so I can send those to AbuseIPDB? Or am I just creating needless work for myself?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.