Attack Signature for Wordpress Spam

Hi,

 

 

I think, there are different ways to block such bot requests.

 

1. you can use the web scraping feature to detect bots - https://devcentral.f5.com/tech-tips/articles/more-web-scraping-bot-detection

 

2. you can use an irule to check the query for the parameter "comment". If it is inside --> redirect or response. But you have to be shure, there is no application using this parameter

 

3. define a parameter "comment" in the parameter list with a static value like "1" or anything else.

 

 

I dont know anything about writing attack signatures.

 

 

 

regards