Skip to content

Commit

Permalink
Update: [Mon Dec 30 00:27:08 UTC 2024]
Browse files Browse the repository at this point in the history
  • Loading branch information
@github-actions
github-actions[bot] committed Dec 30, 2024
1 parent 3760d3d commit 204e19f
Show file tree
Hide file tree
Showing 5 changed files with 55 additions and 55 deletions.
22 changes: 11 additions & 11 deletions waf_patterns/apache/bots.conf
View file
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,7 @@ SecRule REQUEST_HEADERS:User-Agent "@contains <div class="t1">Favorite pro
SecRule REQUEST_HEADERS:User-Agent "@contains <div class="t1">WordPress help</div>" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <img src="/share/banhammer.jpg" width="200" alt="Banhammer">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <img src="/share/bbq-pro.jpg" width="200" alt="BBQ Pro: Block Bad Queries">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <img src="/share/sac-pro-544x240.jpg" width="200" alt="Simple Ajax Chat Pro">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <img src="/share/blackhole-pro.jpg" width="200" alt="Blackhole Pro">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <li class="ys"><a href="/search/">Search</a></li>" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <li><a href="https://books.perishablepress.com/">Books</a></li>" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <li><a href="https://plugin-planet.com/">Plugins</a></li>" "id:3000,phase:1,deny,status:403"
Expand All @@ -81,8 +81,8 @@ SecRule REQUEST_HEADERS:User-Agent "@contains </div>" "id:3000,phase:1,deny
SecRule REQUEST_HEADERS:User-Agent "@contains </ul>" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <a href="https://plugin-planet.com/bbq-pro/" title="BBQ Pro: Fastest WordPress Firewall">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <a href="https://plugin-planet.com/bbq-pro/" title="Premium WP Security Plugin">BBQ Pro</a>: The <em>fastest</em> firewall to protect your WordPress." "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <a href="https://plugin-planet.com/simple-ajax-chat-pro/" title="SAC Pro - Unlimited chats for WordPress">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <a href="https://plugin-planet.com/simple-ajax-chat-pro/" title="Simple Ajax Chat Pro">SAC Pro</a>: Unlimited chats." "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <a href="https://plugin-planet.com/blackhole-pro/" title="Blackhole Pro: Death to Bad Bots">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <a href="https://plugin-planet.com/blackhole-pro/" title="Premium WP Security Plugin">Blackhole Pro</a>: Trap bad bots in a virtual black hole." "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <a href="https://wordpress.org/plugins/banhammer/" title="Banhammer: Protect &amp; Defend.">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <a href="https://wordpress.org/plugins/banhammer/" title="Free WP Security Plugin">Banhammer</a>: Protect your WordPress site against threats." "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <div class="m3a">" "id:3000,phase:1,deny,status:403"
Expand Down Expand Up @@ -208,13 +208,13 @@ SecRule REQUEST_HEADERS:User-Agent "@contains <div class="w2b2 box">" "id:3000
SecRule REQUEST_HEADERS:User-Agent "@contains <div class="wrap">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <div class="yn bg1">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <div>" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <input id="mce-EMAIL-44" name="EMAIL" type="email" placeholder="Enter your email" required> " "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <input id="mce-EMAIL-88" name="EMAIL" type="email" placeholder="Enter your email" required> " "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <input id="mce-EMAIL-55" name="EMAIL" type="email" placeholder="Enter your email" required> " "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <input id="mce-EMAIL-96" name="EMAIL" type="email" placeholder="Enter your email" required> " "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <input type="submit" name="subscribe" value="Subscribe">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <input type="text" name="b_3b1eb5693738305478b07e6c4_a5e4fc9f37" tabindex="-1" value="" aria-hidden="true" style="position:absolute;left:-9999em;">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <label for="mce-EMAIL-44" class="h">Enter your email</label> " "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <label for="mce-EMAIL-88" class="h">Enter your email</label> " "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <label for="s-36" class="h">Search</label>" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <label for="mce-EMAIL-55" class="h">Enter your email</label> " "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <label for="mce-EMAIL-96" class="h">Enter your email</label> " "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <label for="s-25" class="h">Search</label>" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <link rel="apple-touch-icon" type="image/png" href="/apple-touch-icon.png">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <link rel="author" href="/humans.txt">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <link rel="icon" type="image/png" href="/android.png" sizes="192x192">" "id:3000,phase:1,deny,status:403"
Expand All @@ -234,7 +234,7 @@ SecRule REQUEST_HEADERS:User-Agent "@contains <script type="text/javascript" s
SecRule REQUEST_HEADERS:User-Agent "@contains <title>The Ultimate User-Agent Blacklist, Featuring Over 1200 Bad Bots | Perishable Press</title>" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <ul class="t2">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <ul class="t2"> <li><a href="/tag/websites/">websites</a></li>" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <ul class="t2"><li><a href="https://perishablepress.com/tools-check-site-health/">Tools to check your site&#8217;s health</a></li><li><a href="https://perishablepress.com/7g-wordpress-plugin/">Why is there no 7G WordPress Plugin?</a></li><li><a href="https://perishablepress.com/protect-against-humans-txt-query-string-scans/">Protect Against Humans.txt Query-String Scans</a></li><li><a href="https://perishablepress.com/server-status-monitor/">DIY Server Uptime Monitor</a></li><li><a href="https://perishablepress.com/testing-http-requests/">Testing HTTP Requests</a></li></ul><div class="t2">+ <a href="/related/?related-id=15380">More related posts &raquo;</a></div> </div>" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <ul class="t2"><li><a href="https://perishablepress.com/customize-bbq-firewall/">BBQ Firewall &#8211; Customize Features</a></li><li><a href="https://perishablepress.com/2010-user-agent-blacklist/">2010 User-Agent Blacklist</a></li><li><a href="https://perishablepress.com/5g-firewall-beta/">5G Firewall Beta</a></li><li><a href="https://perishablepress.com/7g-out-of-beta/">7G Out of Beta</a></li><li><a href="https://perishablepress.com/new-plugin-blackhole-bad-bots/">WordPress Plugin: Blackhole for Bad Bots</a></li></ul><div class="t2">+ <a href="/related/?related-id=15673">More related posts &raquo;</a></div> </div>" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains @media (max-width: 570px) {" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains }" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains </body>" "id:3000,phase:1,deny,status:403"
Expand All @@ -243,7 +243,7 @@ SecRule REQUEST_HEADERS:User-Agent "@contains </form>" "id:3000,phase:1,deny,st
SecRule REQUEST_HEADERS:User-Agent "@contains </head>" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains </style>" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <body id="yes" class="lite">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <div class="aa box"><img alt='' src='https://secure.gravatar.com/avatar/1de0c2609e13647bd516431e3c79da7c?s=200&#038;d=https%3A%2F%2Fperishablepress.com%2Fwp%2Fwp-content%2Fthemes%2Fyes%2Fimg%2Favatar.png&#038;r=pg' srcset='https://secure.gravatar.com/avatar/1de0c2609e13647bd516431e3c79da7c?s=400&#038;d=https%3A%2F%2Fperishablepress.com%2Fwp%2Fwp-content%2Fthemes%2Fyes%2Fimg%2Favatar.png&#038;r=pg 2x' class='avatar avatar-200 photo' height='200' width='200' decoding='async'/><div class="aa-text"><div class="t1">About the Author</div><div class="aa-desc"><a href="/author/perish/" title="Author Archive">Jeff Starr</a> = Creative thinker. Passionate about free and open Web.</div></div></div> " "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <div class="aa box"><img alt='' src='https://secure.gravatar.com/avatar/1de0c2609e13647bd516431e3c79da7c?s=200&#038;d=https%3A%2F%2Fperishablepress.com%2Fwp%2Fwp-content%2Fthemes%2Fyes%2Fimg%2Favatar.png&#038;r=pg' srcset='https://secure.gravatar.com/avatar/1de0c2609e13647bd516431e3c79da7c?s=400&#038;d=https%3A%2F%2Fperishablepress.com%2Fwp%2Fwp-content%2Fthemes%2Fyes%2Fimg%2Favatar.png&#038;r=pg 2x' class='avatar avatar-200 photo' height='200' width='200' decoding='async'/><div class="aa-text"><div class="t1">About the Author</div><div class="aa-desc"><a href="/author/perish/" title="Author Archive">Jeff Starr</a> = Fullstack Developer. Book Author. Teacher. Human Being.</div></div></div> " "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <div class="cats box">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <div class="feat feat-top">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <div class="mce feat">" "id:3000,phase:1,deny,status:403"
Expand All @@ -264,7 +264,7 @@ SecRule REQUEST_HEADERS:User-Agent "@contains <form action="https://perishablep
SecRule REQUEST_HEADERS:User-Agent "@contains <h1><a href="https://perishablepress.com/4g-ultimate-user-agent-blacklist/">4G Series: The Ultimate User-Agent Blacklist, Featuring Over 1200 Bad Bots</a></h1>" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <h2>75 responses to &ldquo;4G Series: The Ultimate User-Agent Blacklist, Featuring Over 1200 Bad Bots&rdquo;</h2>" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <head>" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <input id="s-36" name="s" type="search" title="Search" maxlength="100" value="" placeholder="Type &amp; press enter to search..">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <input id="s-25" name="s" type="search" title="Search" maxlength="100" value="" placeholder="Type &amp; press enter to search..">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <li class="comment byuser comment-author-perish bypostauthor even thread-even depth-1" id="comment-70904">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <li class="comment byuser comment-author-perish bypostauthor odd alt thread-odd thread-alt depth-1" id="comment-70894">" "id:3000,phase:1,deny,status:403"
SecRule REQUEST_HEADERS:User-Agent "@contains <li class="comment even thread-even depth-1" id="comment-70890">" "id:3000,phase:1,deny,status:403"
Expand Down
22 changes: 11 additions & 11 deletions waf_patterns/caddy/bots.conf
View file
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,7 @@
header User-Agent * <div class="t1">WordPress help</div>*
header User-Agent * <img src="/share/banhammer.jpg" width="200" alt="Banhammer">*
header User-Agent * <img src="/share/bbq-pro.jpg" width="200" alt="BBQ Pro: Block Bad Queries">*
header User-Agent * <img src="/share/sac-pro-544x240.jpg" width="200" alt="Simple Ajax Chat Pro">*
header User-Agent * <img src="/share/blackhole-pro.jpg" width="200" alt="Blackhole Pro">*
header User-Agent * <li class="ys"><a href="/search/">Search</a></li>*
header User-Agent * <li><a href="https://books.perishablepress.com/">Books</a></li>*
header User-Agent * <li><a href="https://plugin-planet.com/">Plugins</a></li>*
Expand All @@ -81,8 +81,8 @@
header User-Agent * </ul>*
header User-Agent * <a href="https://plugin-planet.com/bbq-pro/" title="BBQ Pro: Fastest WordPress Firewall">*
header User-Agent * <a href="https://plugin-planet.com/bbq-pro/" title="Premium WP Security Plugin">BBQ Pro</a>: The <em>fastest</em> firewall to protect your WordPress.*
header User-Agent * <a href="https://plugin-planet.com/simple-ajax-chat-pro/" title="SAC Pro - Unlimited chats for WordPress">*
header User-Agent * <a href="https://plugin-planet.com/simple-ajax-chat-pro/" title="Simple Ajax Chat Pro">SAC Pro</a>: Unlimited chats.*
header User-Agent * <a href="https://plugin-planet.com/blackhole-pro/" title="Blackhole Pro: Death to Bad Bots">*
header User-Agent * <a href="https://plugin-planet.com/blackhole-pro/" title="Premium WP Security Plugin">Blackhole Pro</a>: Trap bad bots in a virtual black hole.*
header User-Agent * <a href="https://wordpress.org/plugins/banhammer/" title="Banhammer: Protect &amp; Defend.">*
header User-Agent * <a href="https://wordpress.org/plugins/banhammer/" title="Free WP Security Plugin">Banhammer</a>: Protect your WordPress site against threats.*
header User-Agent * <div class="m3a">*
Expand Down Expand Up @@ -208,13 +208,13 @@
header User-Agent * <div class="wrap">*
header User-Agent * <div class="yn bg1">*
header User-Agent * <div>*
header User-Agent * <input id="mce-EMAIL-44" name="EMAIL" type="email" placeholder="Enter your email" required> *
header User-Agent * <input id="mce-EMAIL-88" name="EMAIL" type="email" placeholder="Enter your email" required> *
header User-Agent * <input id="mce-EMAIL-55" name="EMAIL" type="email" placeholder="Enter your email" required> *
header User-Agent * <input id="mce-EMAIL-96" name="EMAIL" type="email" placeholder="Enter your email" required> *
header User-Agent * <input type="submit" name="subscribe" value="Subscribe">*
header User-Agent * <input type="text" name="b_3b1eb5693738305478b07e6c4_a5e4fc9f37" tabindex="-1" value="" aria-hidden="true" style="position:absolute;left:-9999em;">*
header User-Agent * <label for="mce-EMAIL-44" class="h">Enter your email</label> *
header User-Agent * <label for="mce-EMAIL-88" class="h">Enter your email</label> *
header User-Agent * <label for="s-36" class="h">Search</label>*
header User-Agent * <label for="mce-EMAIL-55" class="h">Enter your email</label> *
header User-Agent * <label for="mce-EMAIL-96" class="h">Enter your email</label> *
header User-Agent * <label for="s-25" class="h">Search</label>*
header User-Agent * <link rel="apple-touch-icon" type="image/png" href="/apple-touch-icon.png">*
header User-Agent * <link rel="author" href="/humans.txt">*
header User-Agent * <link rel="icon" type="image/png" href="/android.png" sizes="192x192">*
Expand All @@ -234,7 +234,7 @@
header User-Agent * <title>The Ultimate User-Agent Blacklist, Featuring Over 1200 Bad Bots | Perishable Press</title>*
header User-Agent * <ul class="t2">*
header User-Agent * <ul class="t2"> <li><a href="/tag/websites/">websites</a></li>*
header User-Agent * <ul class="t2"><li><a href="https://perishablepress.com/tools-check-site-health/">Tools to check your site&#8217;s health</a></li><li><a href="https://perishablepress.com/7g-wordpress-plugin/">Why is there no 7G WordPress Plugin?</a></li><li><a href="https://perishablepress.com/protect-against-humans-txt-query-string-scans/">Protect Against Humans.txt Query-String Scans</a></li><li><a href="https://perishablepress.com/server-status-monitor/">DIY Server Uptime Monitor</a></li><li><a href="https://perishablepress.com/testing-http-requests/">Testing HTTP Requests</a></li></ul><div class="t2">+ <a href="/related/?related-id=15380">More related posts &raquo;</a></div> </div>*
header User-Agent * <ul class="t2"><li><a href="https://perishablepress.com/customize-bbq-firewall/">BBQ Firewall &#8211; Customize Features</a></li><li><a href="https://perishablepress.com/2010-user-agent-blacklist/">2010 User-Agent Blacklist</a></li><li><a href="https://perishablepress.com/5g-firewall-beta/">5G Firewall Beta</a></li><li><a href="https://perishablepress.com/7g-out-of-beta/">7G Out of Beta</a></li><li><a href="https://perishablepress.com/new-plugin-blackhole-bad-bots/">WordPress Plugin: Blackhole for Bad Bots</a></li></ul><div class="t2">+ <a href="/related/?related-id=15673">More related posts &raquo;</a></div> </div>*
header User-Agent * @media (max-width: 570px) {*
header User-Agent * }*
header User-Agent * </body>*
Expand All @@ -243,7 +243,7 @@
header User-Agent * </head>*
header User-Agent * </style>*
header User-Agent * <body id="yes" class="lite">*
header User-Agent * <div class="aa box"><img alt='' src='https://secure.gravatar.com/avatar/1de0c2609e13647bd516431e3c79da7c?s=200&#038;d=https%3A%2F%2Fperishablepress.com%2Fwp%2Fwp-content%2Fthemes%2Fyes%2Fimg%2Favatar.png&#038;r=pg' srcset='https://secure.gravatar.com/avatar/1de0c2609e13647bd516431e3c79da7c?s=400&#038;d=https%3A%2F%2Fperishablepress.com%2Fwp%2Fwp-content%2Fthemes%2Fyes%2Fimg%2Favatar.png&#038;r=pg 2x' class='avatar avatar-200 photo' height='200' width='200' decoding='async'/><div class="aa-text"><div class="t1">About the Author</div><div class="aa-desc"><a href="/author/perish/" title="Author Archive">Jeff Starr</a> = Creative thinker. Passionate about free and open Web.</div></div></div> *
header User-Agent * <div class="aa box"><img alt='' src='https://secure.gravatar.com/avatar/1de0c2609e13647bd516431e3c79da7c?s=200&#038;d=https%3A%2F%2Fperishablepress.com%2Fwp%2Fwp-content%2Fthemes%2Fyes%2Fimg%2Favatar.png&#038;r=pg' srcset='https://secure.gravatar.com/avatar/1de0c2609e13647bd516431e3c79da7c?s=400&#038;d=https%3A%2F%2Fperishablepress.com%2Fwp%2Fwp-content%2Fthemes%2Fyes%2Fimg%2Favatar.png&#038;r=pg 2x' class='avatar avatar-200 photo' height='200' width='200' decoding='async'/><div class="aa-text"><div class="t1">About the Author</div><div class="aa-desc"><a href="/author/perish/" title="Author Archive">Jeff Starr</a> = Fullstack Developer. Book Author. Teacher. Human Being.</div></div></div> *
header User-Agent * <div class="cats box">*
header User-Agent * <div class="feat feat-top">*
header User-Agent * <div class="mce feat">*
Expand All @@ -264,7 +264,7 @@
header User-Agent * <h1><a href="https://perishablepress.com/4g-ultimate-user-agent-blacklist/">4G Series: The Ultimate User-Agent Blacklist, Featuring Over 1200 Bad Bots</a></h1>*
header User-Agent * <h2>75 responses to &ldquo;4G Series: The Ultimate User-Agent Blacklist, Featuring Over 1200 Bad Bots&rdquo;</h2>*
header User-Agent * <head>*
header User-Agent * <input id="s-36" name="s" type="search" title="Search" maxlength="100" value="" placeholder="Type &amp; press enter to search..">*
header User-Agent * <input id="s-25" name="s" type="search" title="Search" maxlength="100" value="" placeholder="Type &amp; press enter to search..">*
header User-Agent * <li class="comment byuser comment-author-perish bypostauthor even thread-even depth-1" id="comment-70904">*
header User-Agent * <li class="comment byuser comment-author-perish bypostauthor odd alt thread-odd thread-alt depth-1" id="comment-70894">*
header User-Agent * <li class="comment even thread-even depth-1" id="comment-70890">*
Expand Down
Loading

0 comments on commit 204e19f

Please sign in to comment.