Wordpress ban hacker!!!!

ban-hacker.nginx

location ^~ /wp-login.php {
        if ($http_user_agent ~* sqlmap|NESSUS|hacker|MSIE) {
                return 404;
        }
        if ($arg_action = lostpassword) {
                return 403;
        }
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;
}

location / {
        # try_files $uri $uri/ =404;
        try_files $uri $uri/ /index.php?$query_string;
}

location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;
}