diff -Nur --no-dereference smeserver-fail2ban-0.1.18.old/root/etc/fail2ban/filter.d/wordpress-hard.conf smeserver-fail2ban-0.1.18/root/etc/fail2ban/filter.d/wordpress-hard.conf
--- smeserver-fail2ban-0.1.18.old/root/etc/fail2ban/filter.d/wordpress-hard.conf	2021-12-08 20:16:46.701000000 -0500
+++ smeserver-fail2ban-0.1.18/root/etc/fail2ban/filter.d/wordpress-hard.conf	2021-12-08 20:36:17.648000000 -0500
@@ -9,13 +9,15 @@
 
 _daemon = (?:wordpress|wp)
 
-failregex = ^%(__prefix_line)sAuthentication attempt for unknown user .* from <HOST>$
+failregex = ^%(__prefix_line)sSpam comment \d+ from <HOST>$
+            ^%(__prefix_line)sAuthentication attempt for unknown user .* from <HOST>$
+            ^%(__prefix_line)sXML-RPC multicall authentication failure from <HOST>$
             ^%(__prefix_line)sBlocked user enumeration attempt from <HOST>$
             ^%(__prefix_line)sBlocked authentication attempt for .* from <HOST>$
+            ^%(__prefix_line)sAuthentication attempt for unknown user .* from <HOST>$
+            ^%(__prefix_line)sREST authentication attempt for unknown user .* from <HOST>$
             ^%(__prefix_line)sPingback error .* generated from <HOST>$
-            ^%(__prefix_line)sSpam comment \d+ from <HOST>$
             ^%(__prefix_line)sXML-RPC authentication attempt for unknown user .* from <HOST>$
-            ^%(__prefix_line)sXML-RPC multicall authentication failure from <HOST>$
 
 ignoreregex =
 
diff -Nur --no-dereference smeserver-fail2ban-0.1.18.old/root/etc/fail2ban/filter.d/wordpress-soft.conf smeserver-fail2ban-0.1.18/root/etc/fail2ban/filter.d/wordpress-soft.conf
--- smeserver-fail2ban-0.1.18.old/root/etc/fail2ban/filter.d/wordpress-soft.conf	2021-12-08 20:16:46.706000000 -0500
+++ smeserver-fail2ban-0.1.18/root/etc/fail2ban/filter.d/wordpress-soft.conf	2021-12-08 20:24:58.531000000 -0500
@@ -21,8 +21,11 @@
 #          (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
 # Values:  TEXT
 #
-failregex = ^%(__prefix_line)sAuthentication failure for .* from <HOST>$
+failregex = ^%(__prefix_line)sEmpty username from <HOST>$
+            ^%(__prefix_line)sAuthentication failure for .* from <HOST>$
             ^%(__prefix_line)sXML-RPC authentication failure from <HOST>$
+            ^%(__prefix_line)sREST authentication failure for .* from <HOST>$
+            ^%(__prefix_line)sXML-RPC authentication failure for .* from <HOST>$
 
 # Option:  ignoreregex
 # Notes.:  regex to ignore. If this regex matches, the line is ignored.