Changelog was last updated on: November 01 2026 02:00:03.
======
## 2026-10-21 RFincken

Block general CVE calls

## ## 2026-10-19 RFincken

Browser verification for fake googlebots or meta-bots

## 2026-09-25 RFincken

Browser verification for 5 year old browsers and browsers without matching headers

## 2026-09-21 RFincken

Blocking Wrong useragent syntax

## 2026-09-14 RFincken

Blocking Bytedance and Bytespider aggressive bot

## 2026-09-09 RFincken

Reduced connection amount on edges, especially for http connections

## 2026-09-02 RFincken

Adding string php blocks to root

## 2026-09-01 RFincken

<https://www.hackpostmortem.com/2026/09/01/2026-09-01/>  
Denying background-image-cropper

## 2026-07-30 RFincken

Blocking strange combinations of OS and browser ( example MSIE on Mac or both Windows NT and Android )

## 2026-07-22 RFincken

e655950
Blocking various default useragents for scanners

## 2026-06-18 RFincken

Blocking docker, application and non existent

## 2026-06-15 RFincken

Blocking wp-content + number / file.php

Blocking PHP calls to all in one migration folder

## 2026-05-14 RFincken

Blocking legit backup names like www.zip and site.rar as we provide a hosting panel with backup options.

## 2026-05-11 RFincken

Blocking specific non existing directory for specific customer

## 2026-05-01 RFincken

Blocking the WooCommerce combination of “Add to cart” AND “Remove from cart” in a single URL

## 2026-04-16 RFincken

Blocked useragents "python-requests/2" and "python-httpx"

## 2026-04-13 RFincken

Added uuid4 block on specific customer config

Set max http requests per IP per second to lower value

## 2026-04-09 RFincken

Reverted: Denied uuid4 in URL parameter.  
Source: rju3f78v

## 2026-04-07 RFincken

Removed BD|IR|IL from central blocklist

Added googlebot full IP range to allowlist

## 2026-04-03 RFincken

Denied uuid4 in URL parameter

```
if ($query_string ~* "\w{8}-\w{4}-4\w{3}-\w{4}-\w{12}") {
    return 418;
}
```

## 2026-03-25 RFincken

Added China and Russia using ip2location blocklist

## 2026-02-18 RFincken

Allow user agent exception

## 2026-02-03 RFincken

Blocking php files in themes

## 2026-01-23 RFincken

Blocking http 1.1 and less for .php calls, returning 418 http code

Blocking empty user agents or "-" user agents