evil_host_trap_no_wp.conf

#By Josef Meile <jmeile@hotmail.com> @ June, 2019

#This will block bad bots accessing WordPress folders in non-wp sites 

#Make sure to include this file after your CustomLog directive; otherwise the
#request of the blocked host won't be registered into the apache's log file

#For use instructions, see the evil_host_trap_init.conf file.

#Conditions for non-WordPress websites. Here you can add more rules by adding
#the [OR] operator at the end

#If xmlrpc.php is used by your php framework, then you need to comment the
#following line:
RewriteCond %{REQUEST_URI} ^(.*)xmlrpc(.*)$ [NC,OR]

#The following links aren't pressent in non WordPress sites, so, hosts trying
#to access them are just looking for vulnerabilities
RewriteCond %{REQUEST_URI} ^(.*)wp-login(.*)$ [NC,OR]
RewriteCond %{REQUEST_URI} ^(.*)wp-includes(.*)$ [NC,OR]
RewriteCond %{REQUEST_URI} ^(.*)wlwmanifest(.*)$ [NC,OR]
RewriteCond %{REQUEST_URI} ^(.*)wordpress(.*)$ [NC,OR]
RewriteCond %{REQUEST_URI} ^(.*)wp-admin(.*)$ [NC]