Comment by bulatb

Block it at your web server before it reaches PHP. Ctrl+F "nginx" or ".htaccess" in this thread for configs.