From a98af4e04934aad5aa76fda998282d12bf08aea2 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Wed, 1 Jan 2025 11:56:40 +0000 Subject: [PATCH] Update: [Wed Jan 1 11:56:40 UTC 2025] --- waf_patterns/apache/bots.conf | 3258 -------------------------------- waf_patterns/caddy/bots.conf | 3258 -------------------------------- waf_patterns/haproxy/bots.acl | 3258 -------------------------------- waf_patterns/nginx/bots.conf | 3258 -------------------------------- waf_patterns/traefik/bots.toml | 3258 -------------------------------- 5 files changed, 16290 deletions(-) diff --git a/waf_patterns/apache/bots.conf b/waf_patterns/apache/bots.conf index 1a16af0..8f686d9 100644 --- a/waf_patterns/apache/bots.conf +++ b/waf_patterns/apache/bots.conf @@ -1,695 +1,128 @@ SecRuleEngine On -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains

Wow! This is one *huge* list. You could’ve charged people just for viewing this post and I’m sure most of us wouldn’t mind forking out some money just to take a peek at this ;)

" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains

That list is to huge! lol, I tried to find the fake ones but then I looked at the list!

" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains

Lol, now I get it. There’s 3 *fake* user-agents in the list. Is it…”dumb”, “fuck” & “human”?

" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains

@Lisa: I hope you don’t mean that I could have charged people to view the blacklist in like a “freakshow” kind of way. Like, “step right up and take a peek at the world’s most hideously long HTAccess Blacklist!” Weird carnival music playing in dark tents and that sort of thing..

" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains

@ Lisa
" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains

hm…

" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains

@Andrew: Nope, those strings address names of “real” user agents, believe it or not.. :)

" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains

That list is insane!!!

" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains

I think looking at all of this it harks back to Louis earlier idea of a whitelist;

" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains

Hi, I think this is fantastic. I have one issue, my server gives a 500 error and the log shows :

" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains

Well, I got it working, needed to fix a few things and break it over two lines, here are the results, let me know if this will still work as I dont really know htaccess code that well:

" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains

Hi,

" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • About Perishable Press
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • Perishable Press Archives
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • Contact Perishable Press
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • Welcome to Dungeon!
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • Online Dev Tools
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • Digging Into WordPress (eBook)
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • .htaccess made easy
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • Wizard’s SQL Recipes (eBook)
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • WordPress on shared hosting (video tutorials)
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • BBQ Pro
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • Blackhole Pro
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • USP Pro
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • Code Snippets
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • The Tao of WordPress (eBook)
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • Develop WordPress themes (eBook)
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains • 75 comments" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains © 2004–2025 Perishable Press • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains Main Menu" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains Yes Theme by " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains Monzilla Media • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains 2009/03/30 6:29 am " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains 2009/03/30 6:35 am " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains 2009/03/30 6:53 am " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains 2009/03/30 7:51 am " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains 2009/03/30 8:56 am " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains 2009/03/30 9:19 am " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains 2009/03/30 10:00 am " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains 2009/03/30 8:30 pm " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains 2009/03/31 2:25 pm " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains 2009/04/04 4:14 am " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains 2009/04/04 3:16 pm " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains 2009/04/04 7:27 pm " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains RSS • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains Policy • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains Sitemap • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains John 3:16" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    Around the site
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    Favorite projects
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    WordPress help
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains Blackhole Pro" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains eBook: Digging Into WordPress" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains Wizard’s SQL Recipes for WordPress" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • Search
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • Books
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • Plugins
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • Twitter
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • YouTube
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • LinkedIn
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • Tumblr
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • Facebook
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • Instagram
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • WordPress
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
      " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains Built w/ shapeSpace • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains Wizard’s SQL for WordPress: Over 300+ recipes! Check the " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains Digging Into WordPress: Take your WordPress skills to the next level." "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains Blackhole Pro: Trap bad bots in a virtual black hole." "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains Demo »" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    Find me on the social medias
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    Fall Sale! Code FALL2024 takes 25% OFF our Pro Plugins & Books »
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    Related Posts
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    Web Dev + WordPress + Security
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .children { padding: 0; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comment-field label, .comment-field input, .comment-field textarea, .comment .comment-field textarea { display: block; width: 100%; text-align: left; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comments-closed img { display: none; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .form-submit .submit { margin: 0; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • more »
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • more »
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • CSS
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • .htaccess
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • HTML
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • JavaScript
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • PHP
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • Security
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • SEO
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • WordPress
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • apache
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • blacklist
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • code
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • design
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • hacks
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • links
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • markup
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • mod_rewrite
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • optimization
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • plugins
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • server
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • spam
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • tutorials
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
  • ux
  • " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains Here you will find posts about web development, WordPress, security, and more »" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains Perishable Press is operated by Jeff Starr, a professional web developer and book author with two decades of experience. " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains Updated " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .cancel-reply a { font-size: 11px; font-weight: normal; text-decoration: none; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .children { list-style: none; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comment .avatar { display: block; width: 50px; height: 50px; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comment .cancel-reply { display: inline-block; padding: 0 0 0 10px; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comment .comment-policy, .cancel-reply { display: none; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comment { margin: 20px 0; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comment-avatar { float: left; width: 60px; height: 60px; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comment-content { float: right; line-height: 1.5; width: calc(100% - 70px); }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comment-feed { padding: 0 0 0 30px; background-image: url(/wp/wp-content/themes/yes/img/feed.png); background-repeat: no-repeat; background-position: left center; background-size: 20px 20px; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comment-field input { box-sizing: border-box; width: 300px; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comment-field label { box-sizing: border-box; width: 90px; text-align: right; font-size: 11px; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comment-field textarea { box-sizing: border-box; width: calc(100% - 100px); height: 120px; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comment-field { margin: 5px 0; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comment-info a, .comment-info a:hover { color: #999; text-decoration: none; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comment-info { padding: 0 0 0 10px; font-size: 11px; color: #999; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comment-moderation { font-style: italic; color: #669966; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comment-policy { margin: 0 0 30px 0; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comments h2 { line-height: initial; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comments pre, .comments blockquote { margin: 20px 0; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comments-closed img, .comments-closed span { display: inline-block; margin: 0 3px 0 0; vertical-align: middle; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comments-closed span { padding: 3px 0 0 0; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comments-closed { margin: 40px 0; text-align: center; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .comments-list { margin: 40px 0; padding: 0; list-style: none; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains .form-submit .submit { margin: 0 0 0 90px; }" "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains
    " "id:3000,phase:1,deny,status:403" -SecRule REQUEST_HEADERS:User-Agent "@contains