# BEGIN Solid Security - Ne modifiez pas ou ne supprimez pas cette ligne
# Solid Security Config Details: 2
# Blocage d’adresses IP - Solid Security > Réglages > Comptes bloqués
SetEnvIF REMOTE_ADDR "^118\.195\.131\.103$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^118\.195\.131\.103$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^118\.195\.131\.103$" DenyAccess
SetEnvIF REMOTE_ADDR "^1\.14\.14\.169$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^1\.14\.14\.169$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^1\.14\.14\.169$" DenyAccess
SetEnvIF REMOTE_ADDR "^42\.193\.21\.12$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^42\.193\.21\.12$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^42\.193\.21\.12$" DenyAccess
SetEnvIF REMOTE_ADDR "^118\.195\.251\.11$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^118\.195\.251\.11$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^118\.195\.251\.11$" DenyAccess
SetEnvIF REMOTE_ADDR "^1\.14\.73\.93$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^1\.14\.73\.93$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^1\.14\.73\.93$" DenyAccess
SetEnvIF REMOTE_ADDR "^182\.43\.64\.48$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^182\.43\.64\.48$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^182\.43\.64\.48$" DenyAccess
SetEnvIF REMOTE_ADDR "^139\.155\.136\.10$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^139\.155\.136\.10$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^139\.155\.136\.10$" DenyAccess
SetEnvIF REMOTE_ADDR "^182\.43\.69\.179$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^182\.43\.69\.179$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^182\.43\.69\.179$" DenyAccess
SetEnvIF REMOTE_ADDR "^210\.16\.189\.19$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^210\.16\.189\.19$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^210\.16\.189\.19$" DenyAccess
SetEnvIF REMOTE_ADDR "^39\.99\.147\.133$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^39\.99\.147\.133$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^39\.99\.147\.133$" DenyAccess
SetEnvIF REMOTE_ADDR "^182\.43\.64\.21$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^182\.43\.64\.21$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^182\.43\.64\.21$" DenyAccess
SetEnvIF REMOTE_ADDR "^14\.116\.213\.102$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^14\.116\.213\.102$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^14\.116\.213\.102$" DenyAccess
SetEnvIF REMOTE_ADDR "^43\.136\.69\.239$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^43\.136\.69\.239$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^43\.136\.69\.239$" DenyAccess
SetEnvIF REMOTE_ADDR "^125\.88\.226\.216$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^125\.88\.226\.216$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^125\.88\.226\.216$" DenyAccess
SetEnvIF REMOTE_ADDR "^194\.163\.167\.250$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^194\.163\.167\.250$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^194\.163\.167\.250$" DenyAccess
SetEnvIF REMOTE_ADDR "^94\.136\.184\.61$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^94\.136\.184\.61$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^94\.136\.184\.61$" DenyAccess
SetEnvIF REMOTE_ADDR "^152\.42\.247\.226$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^152\.42\.247\.226$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^152\.42\.247\.226$" DenyAccess
SetEnvIF REMOTE_ADDR "^195\.26\.243\.28$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^195\.26\.243\.28$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^195\.26\.243\.28$" DenyAccess
SetEnvIF REMOTE_ADDR "^125\.88\.231\.98$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^125\.88\.231\.98$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^125\.88\.231\.98$" DenyAccess
SetEnvIF REMOTE_ADDR "^194\.48\.251\.230$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^194\.48\.251\.230$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^194\.48\.251\.230$" DenyAccess
SetEnvIF REMOTE_ADDR "^103\.179\.190\.115$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^103\.179\.190\.115$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^103\.179\.190\.115$" DenyAccess
SetEnvIF REMOTE_ADDR "^109\.70\.100\.6$" DenyAccess
SetEnvIF X-FORWARDED-FOR "^109\.70\.100\.6$" DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP "^109\.70\.100\.6$" DenyAccess
<IfModule mod_authz_core.c>
<RequireAll>
Require all granted
Require not env DenyAccess
Require not ip 118.195.131.103
Require not ip 1.14.14.169
Require not ip 42.193.21.12
Require not ip 118.195.251.11
Require not ip 1.14.73.93
Require not ip 182.43.64.48
Require not ip 139.155.136.10
Require not ip 182.43.69.179
Require not ip 210.16.189.19
Require not ip 39.99.147.133
Require not ip 182.43.64.21
Require not ip 14.116.213.102
Require not ip 43.136.69.239
Require not ip 125.88.226.216
Require not ip 194.163.167.250
Require not ip 94.136.184.61
Require not ip 152.42.247.226
Require not ip 195.26.243.28
Require not ip 125.88.231.98
Require not ip 194.48.251.230
Require not ip 103.179.190.115
Require not ip 109.70.100.6
</RequireAll>
</IfModule>
<IfModule !mod_authz_core.c>
Order allow,deny
Allow from all
Deny from env=DenyAccess
Deny from 118.195.131.103
Deny from 1.14.14.169
Deny from 42.193.21.12
Deny from 118.195.251.11
Deny from 1.14.73.93
Deny from 182.43.64.48
Deny from 139.155.136.10
Deny from 182.43.69.179
Deny from 210.16.189.19
Deny from 39.99.147.133
Deny from 182.43.64.21
Deny from 14.116.213.102
Deny from 43.136.69.239
Deny from 125.88.226.216
Deny from 194.163.167.250
Deny from 94.136.184.61
Deny from 152.42.247.226
Deny from 195.26.243.28
Deny from 125.88.231.98
Deny from 194.48.251.230
Deny from 103.179.190.115
Deny from 109.70.100.6
</IfModule>
# Protéger les fichiers système - Solid Security > Réglages > Ajustements système > Fichiers système
<files .htaccess>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order allow,deny
Deny from all
</IfModule>
</files>
<files readme.html>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order allow,deny
Deny from all
</IfModule>
</files>
<files readme.txt>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order allow,deny
Deny from all
</IfModule>
</files>
<files wp-config.php>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order allow,deny
Deny from all
</IfModule>
</files>
# Désactiver l’exploration des répertoires - Solid Security > Réglages > Ajustements système > Exploration des répertoires
Options -Indexes
<IfModule mod_rewrite.c>
RewriteEngine On
# Protéger les fichiers système - Solid Security > Réglages > Ajustements système > Fichiers système
RewriteRule ^wp-admin/install\.php$ - [F]
RewriteRule ^wp-admin/includes/ - [F]
RewriteRule !^wp-includes/ - [S=3]
RewriteRule ^wp-includes/[^/]+\.php$ - [F]
RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F]
RewriteRule ^wp-includes/theme-compat/ - [F]
RewriteRule (^|.*/)\.(git|svn) - [F]
# Désactiver PHP dans le répertoire « Uploads » - Solid Security > Réglages > Ajustements système > PHP dans Uploads
RewriteRule ^wp\-content/uploads/.*\.(?:php[1-7]?|pht|phtml?|phps)\.?$ - [NC,F]
# Désactivez PHP dans les extensions - iThemes Security > Réglages > Ajustements système > PHP dans les extensions
RewriteRule ^wp\-content/plugins/.*\.(?:php[1-7]?|pht|phtml?|phps)\.?$ - [NC,F]
# Désactivez PHP dans les thèmes - iThemes Security > Réglages > Ajustements système > PHP dans les thèmes
RewriteRule ^wp\-content/themes/.*\.(?:php[1-7]?|pht|phtml?|phps)\.?$ - [NC,F]
</IfModule>
# END Solid Security - Ne modifiez pas ou ne supprimez pas cette ligne
# BEGIN WordPress
# Les directives (lignes) entre « BEGIN WordPress » et « END WordPress » sont générées
# dynamiquement, et doivent être modifiées uniquement via les filtres WordPress.
# Toute modification des directives situées entre ces marqueurs sera surchargée.
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress
# Wordfence WAF
<Files ".user.ini">
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order deny,allow
Deny from all
</IfModule>
</Files>
# END Wordfence WAF
