Is there a way to stop a WP hacking bot with null user-agent with fail2ban?

[chall3ng3r]

Hi all,

Fail2ban is already installed. I hope there's some easy way I can create a rule for all my WP sites to ban the bot IP which is hitting random pages like hunting for old plugins or hacked files.

For now I've created a rule in vhost to send 403 to any request which comes with null user-agent, it works.

It'd be great if fail2ban can pick up the 403 and 503 codes and ban those IPs which continuously hit all my WP websites. Maybe a feature in CP UI to have something for this?

[atiqsamtia]

I block this traffic on cloudflare with Security Rule (Aailable on FREE Plan too)
This saves CPU usage on the VPS as no request hits VPS not even fail2ban.

(not starts_with(http.request.uri.path, "/wp-admin/") and ends_with(http.request.uri.path, ".php"))