apache2.conf

# you can replace localhost with address of website you hate; localhost = weird robots and hacked users are redirected back to their PC
# RedirectMatch 301 /wp-(.*)$ http://localhost/wp-$1 - NO! It catches wp-content too

RedirectMatch 301 ^/wp-config(.*)$ http://localhost/wp-config$1
RedirectMatch 301 /wp-login.php$ http://localhost/
RedirectMatch 301 /(.*)[\s]union[\s](.*)$ http://localhost/
RedirectMatch 301 /(.*)select\*from(.*)$ http://localhost/
RedirectMatch 301 ^(.*)/wlwmanifest.xml$ http://localhost/
RedirectMatch 301 /admin/template/(.*)$ http://localhost/
RedirectMatch 301 /admin/inc/(.*)$ http://localhost/
RedirectMatch 301 /admin/js/(.*)$ http://localhost/
RedirectMatch 301 /ids/admin/(.*)$ http://localhost/
RedirectMatch 301 /UserCenter/(.*)$ http://localhost/
RedirectMatch 301 /apps/admin/(.*)$ http://localhost/
RedirectMatch 301 /admin/SouthidcEditor/(.*)$ http://localhost/
RedirectMatch 301 /admin/login.asp(.*)$ http://localhost/
#RedirectMatch 301 /style.php$ http://localhost/
RedirectMatch 301 ^(.*).aspx$ http://localhost/
RedirectMatch 301 /API/(.*)$ http://localhost/
RedirectMatch 301 /Back/(.*)$ http://localhost/
RedirectMatch 301 /BackUp/(.*)$ http://localhost/

Redirect 301 /site/3led0.php http://localhost/
Redirect 301 /wp-license.php http://localhost/
Redirect 301 /xmlrpc.php http://localhost/
Redirect 301 /system_api.php http://localhost/
Redirect 301 /old-index.php http://localhost/
Redirect 301 /user.php http://localhost/
Redirect 301 /wp-itapi.php http://localhost/
Redirect 301 /.well-known/autoconfig/mail/config-v1.1.xml http://localhost/
Redirect 301 /sitemap_index.xml http://localhost/
Redirect 301 /mail/config-v1.1.xml http://localhost/
Redirect 301 /__media__/js/netsoltrademark.php http://localhost/
Redirect 301 /feeds http://localhost/
Redirect 301 /.env http://localhost/
Redirect 301 /test_404_page/ http://localhost/
Redirect 301 /homepage.asp http://localhost/
Redirect 301 /_vti_inf.html http://localhost/
Redirect 301 /_vti_bin/shtml.exe/_vti_rpc http://localhost/

# there's some attacks with CONNECT requests sometimes. You can block it in VirtualHost:

<LimitExcept GET> #POST HEAD
    Order deny,allow
    Deny from all
    allow from .cz # allow your country
</LimitExcept>
ErrorDocument 403 http://localhost/

# or better with mod_rewrite and error 405:

RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^CONNECT
RewriteRule .* - [R=405,L]