https://blog.wpsec.com/wordpress-modsecurity-waf/
Protecting WordPress with Open Source Web Application Firewall ModSecurity