# Wordpress jails only at the moment.

[DEFAULT]
# 192.88.134.0/23 185.93.228.0/22 192.124.249.0/24 - some cloud CDN ips (160326-000198)
# 195.20.242.172/32 - 1&1 DDoS cloud
# 66.85.92.2/32 66.85.95.34/32 158.69.52.22/32 - customer request some CDN (160628-001045)
# Ranges are : 213.229.98.[1-250] & 185.17.252.[1-250] (171227-000260) sharkgate.net
# 10.71.56.0/22 - never ban webshield
# 10.44.180.112/28 - never ban cp5-nginx's
# 10.44.44.112/29 - never ban WTR cp5-nginx's

ignoreip = 127.0.0.1/8 88.208.252.0/24 10.216.0.0/20 192.88.134.0/23 185.93.228.0/22 192.124.249.0/24 195.20.242.172/32 185.93.228.0/22 66.85.92.2/32 66.85.95.34/32 158.69.52.22/32 192.88.134.0/23 185.93.228.0/22 66.248.200.0/22 213.229.98.0/24 185.17.252.0/24 10.71.56.0/22 10.44.180.112/28 10.44.44.112/29
ignorecommand =
bantime = 600
findtime = 30
maxretry = 3
backend  = pyinotify
usedns   = warn


[wp-login]
enabled  = true
filter   = nginx-wp-login
action   = nginx_ban[jail=wp-login]
logpath  = /var/log/nginx/req-wp-login.log
maxretry = 5
findtime = 60
bantime  = 3600
backend = polling

[wp-xmlrpc]
enabled  = true
filter   = nginx-wp-xmlrpc
action   = nginx_ban[jail=wp-xmlrpc]
logpath  = /var/log/nginx/req-wp-xmlrpc.log
maxretry = 5
findtime = 60
bantime  = 3600
backend = polling

[wp-ua-random]
enabled  = true
filter   = ua-random
action   = nginx_ban[jail=wp-ua-random]
logpath  = /var/log/nginx/req-wp-login.log
maxretry = 2
findtime = 300
bantime  = 3600
backend = polling

[wp-comments]
enabled  = true
filter   = nginx-wp-comment-post
action   = nginx_ban[jail=wp-comments]
logpath  = /var/log/nginx/req-wp-comment.log
maxretry = 3
findtime = 60
bantime  = 3600
backend = polling

[persistent-abuse]
enabled = true
filter = persistent-abusers
action = nginx_ban[jail=persistent-abuse]
logpath = /var/log/fail2ban.log
maxretry = 10
findtime = 86400
bantime = -1
backend = polling

[mail-spam]
enabled = true
filter = mail-spam
action = mail-spam
logpath = /var/log/maillog
maxretry = 300
findtime = 86400
bantime = -1
usedns = no