=== Fail2WP ===

* Fail2WP writes security events to a log such as `auth.log`.
* Fail2ban can use these entries to block IP addresses after repeated failures.
* Ban actions depend on the jail configuration.

1. Copy `fail2wp.conf` to `/etc/fail2ban/filter.d`.
2. Add a jail to `jail.local`, for example:

[fail2wp]
enabled = true
port = http,https
bantime = <your.ban.time>
filter = fail2wp
logpath = /your/path/to/auth.log
maxretry = <your.max.retries>

* Separate filters allow different ban times and retry limits.
* IP bans can affect visitors sharing the same address.
* Fail2WP security features work without Fail2ban.
