atmosphear

Send an “HTTP/1.1 403 Forbidden” header on a failed login instead of “HTTP/1.1 200 OK”, which is the WordPress default header on failed login. This is a tremendously simple plugin that does only that and absolutely nothing else.
The purpose of this plugin is to provide a way to allow external tools like fail2ban to get a message of a failed login e.g. to prevent a brute-force attack on a firewall level.
For the public domain.
Uses PHP5.3 anonymous functions and will not work on earlier versions of PHP

HTTP/1.1 403 Forbidden header on a failed login

Send an "HTTP/1.1 403 Forbidden" header on a failed login instead of the default "HTTP/1.1 200 OK"

Brandon Allen

WP Fail2Ban Redux records various WordPress events to your server’s system log for integration with <a href="http://www.fail2ban.org/" rel="nofollow ugc">Fail2Ban</a>.
This plugin is (mostly) a drop-in replacement for <a href="https://wordpress.org/plugins/wp-fail2ban/" rel="ugc">WP fail2ban</a> by <a href="https://charles.lecklider.org/" rel="nofollow ugc">Charles Lecklider</a>.
While WP fail2ban is a great plugin, there are a number of improvements that could be made. In order to facilitate these improvements, a major refactoring of the codebase was necessary.
The core functionality between WP Fail2Ban Redux and WP fail2ban remains the same. WP Fail2Ban Redux is considered to be mostly a drop-in replacement, because all constants have been replaced with filters, and will, possibly, require some upgrade work. Don’t work it’s as simple as implementing the constants.
The following events are recorded by default:
<ul>
<li>Failed XML-RPC authentication attempts.</li>
<li>Successful authentication attempts.</li>
<li>Failed authentication attempts — differentiated by a user’s existence.</li>
<li>Pingback errors.</li>
</ul>
The following events can be enabled via filter:
<ul>
<li>Pingback requests.</li>
<li>Blocked user enumeration attempts.</li>
<li>Authentication attempts for blocked usernames.</li>
<li>Spammed comments.</li>
</ul>
Extra documentation is available on the <a href="https://github.com/thebrandonallen/wp-fail2ban-redux/wiki" rel="nofollow ugc">WP Fail2Ban Redux GitHub Wiki</a>.

WP Fail2Ban Redux

Tiny, Simple and Effective. Works Well.Thanks to developer.

Simple and Effective, Works Well.

Easy, effective, no unnecessary control panel, no premium parts, no boring messages, it just do the work!

Having fail2ban already configured in the server, I installed it on a bunch of WP sites.

Locking repetitive attackers, it saves some server resources peaks.

Really thanks for the plugin.

If you already have fail2ban, this is a must

Records various WordPress events to your server's system log for integration with Fail2Ban.

HTTP/1.1 403 Forbidden header on a failed login vs WP Fail2Ban Redux