This question already has an answer here:
- Block IPs if they access a resource 1 answer
I have a simple Apache webserver setup and basic IP tables (ufw) for a development server. In my logs I see lines like this:
[Fri May 16 10:10:36.258369 2014] [:error] [pid 15926] [client 18.104.22.168:8396] script '/var/www/html/wp-login.php' not found or unable to stat
I am not running WordPress at all, and I realize this is a very minor attempt at a hack (there are much more sophisticated attacks against Apache out there). However I would like to automatically block this IP address (temporarily) without installing an IDS/IPS such as Snort.
I am just looking for a simple way to block an address that tries to connect to wp-admin or wp-login. Is there an Apache module that would handle something like this?