Block WordPress useragent


#1

Hi. How to block all WordPress Pingback useragent?
It works if useragent is full, ex “WordPress/3.0; http://www.wp.com
If i try “WordPress” - don’t work, “WordPress*” - error.
log attack:
[09/Mar/2014:11:05:27 -0400] “GET /?4137049=6431829 HTTP/1.0” 403 0 “-” “WordPress/3.8; URL”
121.127.254.2 - - [09/Mar/2014:11:05:27 -0400] “GET /?4758117=5073922 HTTP/1.0” 403 0 “-” “WordPress/3.4.2; URL”
217.160.253.21 - - [09/Mar/2014:11:05:27 -0400] “GET /?7190851=6824134 HTTP/1.0” 403 0 “-” “WordPress/3.8.1; URL”
193.197.34.216 - - [09/Mar/2014:11:05:27 -0400] “GET /?3162504=9747583 HTTP/1.0” 403 0 “-” “WordPress/2.9.2; URL”


#2

You might try these WAF rules:


#3

This topic was automatically closed after 14 days. New replies are no longer allowed.