Hacker News Reader

I'd set up fail2ban on those machines to automatically block the requests.

I'm pretty sure you can configure fail2ban to automatically ban based on user-agent or url path. I would suggest banning any of the WordPress or phpadmin url links

Reply on news.ycombinator.com