Block access to xmlrpc.php based on User-Agent
Branching off of #12898.
On today's dev call, we decided we'd try blacklisting certain User-Agent strings in xmlrpc.php requests.
I downloaded the last 7 complete days of access logs and did some parsing to get a list of unique user agents. The attached CSV file has these agents, with the corresponding counts.