Overlapping because I type slow: Do the requests all involve bogus parameters? Your example was a bit iffy because there aren't any = in the query string. (Legal but always unexpected.) If that was just an artifact of your typing, see about blocking bad parameters in wmt. In this specific case, you'd want to select the option for "Don't look at pages that even
contain this parameter".
Now, if those requests really do contain query strings with no = signs, and assuming your site doesn't do that in its URLs, you can either block or redirect them. For example (but don't quote me because I'm just making this up off the top of my head)
RewriteCond %{QUERY_STRING} (^|&)[^&=]+(&|$)
RewriteCond %{REQUEST_URI} ^/(.+)
RewriteRule \.php http://www.example.com/%1? [R=301,L]
meaning "redirect anything with bum parameters to a parameter-free version of the same URL".
:: wait, stop, rewind ::
You said you're using WordPress. Do you even
have URLs with a visible "php" in them? If not, you can go to the simpler form
RewriteCond %{THE_REQUEST} \.php
RewriteRule \.php - [F,NS]
meaning "If anyone explicitly asks for a file with .php in the name, they're up to no good and can be blocked forthwith".
I don't know how the Googlebot's request pattern for 403s compares with 404s. If there's no difference, you might return a [G] 410 instead. It's not completely honest, since the pages never existed in the first place, but it may make them go away faster.
