Fail2banlog extension for MediaWiki

Laurent Chouraki released an experimental extension for MediaWiki. This extension feeds fail2ban so you can block bruteforce attacks at the firewall level.

  • Implementation User activity
  • Description This extension writes a text file with IPs of failed logins attempts as an input to fail2ban.
  • Author(s) Laurent Chouraki (LaurentChouraki talk)
  • MediaWiki 1.11
  • Download http://www.mediawiki.org/wiki/Extension:Fail2banlog
  • Parameters fail2banfile, fail2banid
  • Example 2008-02-09 10:47:15 CET Authentication error for MyUser from 10.2.5.221 on TestWiki
  • Hooks used LoginAuthenticateAudit