Sorry I missed it…
Well, I am using wp-fail2ban both for security and performance purpose, since it helps a lot in reducing load due to bruteforce. I wish I can log and ban this kind of (uneffective) malicious activity to prevent server overloads (before php runtime level), but I don’t know if wp-fail2ban does actully fit for these requests. I’ll dig deeper in the wp login/redirect logic, unless you have an idea out-of-the-box!
Ticket solved anyway, thanks!