WP Fail2Ban Redux
Records various WordPress events to your server's system log for integration with Fail2Ban.
The facts
- Rating
- 5★ from 15
- Active installs
- 7k+
- Price
- Free
- Last updated
- 27 May 2025
- Added
- Jul 2016
- Requires WP
- 5.8
- Tested up to
- WP 6.8.8
- Requires PHP
- 7.4
- Downloads
- 100,305
Our analysis
AI-assistedWP Fail2Ban Redux is a WordPress plugin that records various events to your server’s system log, facilitating integration with Fail2Ban. It serves as a mostly drop-in replacement for the original WP fail2ban plugin, featuring a refactored codebase for improved functionality.
The plugin tracks events such as failed and successful authentication attempts and pingback errors, with additional events available through filters. It is suitable for users looking to enhance their site's security by logging relevant activities for monitoring and response.
Best for: This plugin is best for WordPress site administrators seeking to improve security logging and integration with Fail2Ban.
What it does well
- ✓Records various WordPress events for security monitoring
- ✓Drop-in replacement for the original WP fail2ban plugin
- ✓Tracks both successful and failed authentication attempts
- ✓Offers additional event logging via filters
- ✓Active community support through GitHub documentation
Where it falls short
- •May require some upgrade work for existing users of WP fail2ban
- •Limited information on specific configuration options
Verdict
WP Fail2Ban Redux provides essential logging features for WordPress security. It is a solid choice for those familiar with Fail2Ban and looking for enhanced event tracking.
From the developer
Brandon Allen's own description of WP Fail2Ban Redux, lightly tidied.
WP Fail2Ban Redux records various WordPress events to your server’s system log for integration with Fail2Ban.
This plugin is (mostly) a drop-in replacement for WP fail2ban by Charles Lecklider.
While WP fail2ban is a great plugin, there are a number of improvements that could be made. In order to facilitate these improvements, a major refactoring of the codebase was necessary.
The core functionality between WP Fail2Ban Redux and WP fail2ban remains the same. WP Fail2Ban Redux is considered to be mostly a drop-in replacement, because all constants have been replaced with filters, and will, possibly, require some upgrade work. Don’t work it’s as simple as implementing the constants.
The following events are recorded by default:
- Failed XML-RPC authentication attempts.
- Successful authentication attempts.
- Failed authentication attempts — differentiated by a user’s existence.
- Pingback errors.
The following events can be enabled via filter:
- Pingback requests.
- Blocked user enumeration attempts.
- Authentication attempts for blocked usernames.
- Spammed comments.
Extra documentation is available on the WP Fail2Ban Redux GitHub Wiki.