Replace wp-auth.conf

docs/hardening/anti-bruteforce/wp-auth.conf

+# +++++++++++++++++++++++++++++++++++++++++++++++++++++
+# + NetworkSEC / NwSEC Layer 7 Brute Force Protection +
+# +++++++++++++++++++++++++++++++++++++++++++++++++++++
+#
+# v1.1 150619
+#
+# BSD License
+#
+# S/W: Fail2ban or NWS ThreatBlock™ ¹
+#
+# Application:  WordPress 
+#
+# Description: Looks for some login/exploit attempts
+#
 #
-# This goes into /etc/fail2ban/filter.d/wp-auth.conf
 #
 [Definition]
 failregex = ^<HOST> .* "POST /wp-login.php
             ^<HOST> .* "POST /wordpress/wp-login.php
             ^<HOST> .* "POST /wp/wp-login.php
             ^<HOST> .* "GET /login_page.php
+            ^<HOST> .* "POST /xmlrpc.php
 #ignoreregex = 
- 
\ No newline at end of file
+#
+# ¹ j/k
+#