fail2ban filter for WordPress URLs

jail.local

# Ban hosts attemping to connect to WordPress

[apache-wordpress]

enabled  = true
filter   = apache-wordpress
action   = iptables-multiport[name=Apache-WordPress, port="http,https"]
logpath  = /var/log/http/*access_log
maxretry = 3
bantime  = 86400

# Ban hosts attemping to connect to WordPress

[nginx-wordpress]

enabled  = true
filter   = nginx-wordpress
action   = iptables-multiport[name=Ninx0WordPress, port="http,https"]
logpath  = /var/log/nginx/*access.log
maxretry = 3
bantime  = 86400

wordpress.conf

# Fail2Ban configuration file
#
# Author: Alan Ivey
#
# $Revision$
#

[Definition]

# Option:  failregex
# Notes.:  Regexp to catch attempts to access WordPress-style URIs
# Values:  TEXT
#
failregex = ^<HOST> -.*"(GET|POST) /(wp-(login|admin|includes)|.*timthumb\.php).*HTTP.*".*$

# Option:  ignoreregex
# Notes.:  regex to ignore. If this regex matches, the line is ignored.
# Values:  TEXT
#
ignoreregex =