Did you know: default WordPress installations don’t protect against brute force login attempts by default? I was shocked to discover this.

Therefore, we’re here to assist with our IPBan WordPress plugin, downloadable from the github project.

You get failed and success login handling, as well as XMLRPC handling, all sent to IPBan using the “custom” recipe that allows any arbitrary source to push data into IPBan.

Simply copy/paste the plugin contents into your wp-content/plugins/IPBanWordpress folder as IPBanWordpress.php for any WordPress site that needs protection, and activate via the plugins UI in the WordPress admin.