#
# This goes into /etc/fail2ban/filter.d/wp-auth.conf
#
[Definition]
 failregex = ^<HOST> .* "POST /wp-login.php