Update wp-auth.conf to include some commonly attacked WordPress URLs

396f20a1 · Pete · 3709073b · 396f20a1
Commit 396f20a1 authored Jan 29, 2019 by Pete
Hide whitespace changes
Inline Side-by-side

Showing with 6 additions and 1 deletion

docs/hardening/anti-bruteforce/wp-auth.conf docs/hardening/anti-bruteforce/wp-auth.conf +6 -1

No files found.
--- a/docs/hardening/anti-bruteforce/wp-auth.conf
+++ b/docs/hardening/anti-bruteforce/wp-auth.conf
@@ -2,4 +2,9 @@
 # This goes into /etc/fail2ban/filter.d/wp-auth.conf
 #
 [Definition]
- failregex = ^<HOST> .* "POST /wp-login.php
\ No newline at end of file
+failregex = ^<HOST> .* "POST /wp-login.php
+            ^<HOST> .* "POST /wordpress/wp-login.php
+            ^<HOST> .* "POST /wp/wp-login.php
+            ^<HOST> .* "GET /login_page.php
+#ignoreregex = 
+ 
\ No newline at end of file