# Fail2Ban configuration file
#
# Author: John Villasenor
#
# Detect xmlrpc POST requests blocked by modsecurity.

[Definition]

failregex = .*"client": "<HOST>",.*"status": 418, "request": ".*/xmlrpc\.php", "method": "POST"
	^.* <HOST> .*"POST .*/xmlrpc.php.*" 418 "
	^<HOST> .*"POST .*/xmlrpc.php.*" 418
ignoreregex = ^.*wp-iphone|wp-android|Jetpack.*