@alebal This need not be in the
.htaccess
in that case. It could very well be in the root
httpd.conf
for it to apply to all websites. Since the
User-Agent
is actually part of the request body, unlike the IP address, any
ufw
based solution would have to search for a string in
each packet and that sounds like a way to get DDoS'd quite easily —
Amith KK 44 secs ago