The key is to configure fail2ban to use `DROP` with iptables instead of just `REJECT`. REJECT allows the IP to keep using an open connection.
fail2ban
New Feature for BusinessPress: Fail2Ban for WordPress Hack Attempts
A great place to hunt hackers is in the WordPress search field. Hackers like to search with what should be forbidden terms in WordPress search.