Log of failed access, pingbacks, user enumeration, disable xmlrpc authenticated methods, kill xmlrpc request on authentication error.
As of April 2026, Authentication and xmlrpc log writer is a WordPress fail2ban plugin with 70 active installations and a 5/5 rating from 1 reviews. It has been downloaded 4.6K+ times in total. Requires WordPress 3.5.1+ and PHP false+. Available on WordPress.org since 2015. Last updated 9 years ago — may have compatibility concerns. Top alternative: WP fail2ban – Advanced Security.
This plugin writes the log of failed access attempts (brute force attack) and invalids pingbacks requests ( by xmlrpc.php ). Very useful to process data via fail2ban.
You can activate the log for each pingback request feature and stop the user enumeration method (by redirecting to the home) with log.
If activated it remove the wordpress version number and meta generator in the head section of your site.
If activated it disable xmlrpc methods that require authentication, in order to avoid brute force attack by xmlrpc. Use this feature if you don’t need these xmlrpc methods.
If activated can kill multiple requests in a single xmlrpc call returning a 401 code on xmlrpc login error. This feature may be useful to prevent server overloading on brute force attack by xmlrpc.
You can also vi…
| WordPress | 3.5.1+ requiredTested up to 4.7.33 |
| PHP | false+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.