I downloaded a WordPress plugin that emails me any time my site serves a 404 error. Last night I got about 1000 emails from bots searching for
/wp-content/plugins/(X name of popular plugin)/timthumb.php
where timthumb.php is a popular plugin that had a zero-day vulnerability a few weeks ago, so the traffic is searching my site for vulnerabilities that can be hacked. I don’t have timthumb installed, but I really don’t want this traffic – is there an easy way to block it?
Use this and this page to blacklist all the bots that were logged through your .htaccess file.