fail2ban cut my bandwidth bill 18GB/mo on one box

fail2ban cut my bandwidth bill 18GB/mo on one box
Just did this on a $5 box running 12 WordPress sites. xmlrpc and wp-login brute force was 90k hits/day, all 200s/401s burning transfer.
Wrote a jail reading nginx access logs:
— filter matching POST to /xmlrpc.php and /wp-login.php
— maxretry = 5, findtime = 60, bantime = 86400
Bans hit at the firewall, so banned IPs never touch nginx again. Access log went from 11GB/day to 3GB/day. CPU idle climbed 15 points because PHP stopped answering junk.
Try it tonight.