Changelog was last updated on: November 01 2026 02:00:03.
======
## 2026-10-21 RFincken
Block general CVE calls
## ## 2026-10-19 RFincken
Browser verification for fake googlebots or meta-bots
## 2026-09-25 RFincken
Browser verification for 5 year old browsers and browsers without matching headers
## 2026-09-21 RFincken
Blocking Wrong useragent syntax
## 2026-09-14 RFincken
Blocking Bytedance and Bytespider aggressive bot
## 2026-09-09 RFincken
Reduced connection amount on edges, especially for http connections
## 2026-09-02 RFincken
Adding string php blocks to root
## 2026-09-01 RFincken
<https://www.hackpostmortem.com/2026/09/01/2026-09-01/>
Denying background-image-cropper
## 2026-07-30 RFincken
Blocking strange combinations of OS and browser ( example MSIE on Mac or both Windows NT and Android )
## 2026-07-22 RFincken
e655950
Blocking various default useragents for scanners
## 2026-06-18 RFincken
Blocking docker, application and non existent
## 2026-06-15 RFincken
Blocking wp-content + number / file.php
Blocking PHP calls to all in one migration folder
## 2026-05-14 RFincken
Blocking legit backup names like www.zip and site.rar as we provide a hosting panel with backup options.
## 2026-05-11 RFincken
Blocking specific non existing directory for specific customer
## 2026-05-01 RFincken
Blocking the WooCommerce combination of “Add to cart” AND “Remove from cart” in a single URL
## 2026-04-16 RFincken
Blocked useragents "python-requests/2" and "python-httpx"
## 2026-04-13 RFincken
Added uuid4 block on specific customer config
Set max http requests per IP per second to lower value
## 2026-04-09 RFincken
Reverted: Denied uuid4 in URL parameter.
Source: rju3f78v
## 2026-04-07 RFincken
Removed BD|IR|IL from central blocklist
Added googlebot full IP range to allowlist
## 2026-04-03 RFincken
Denied uuid4 in URL parameter
```
if ($query_string ~* "\w{8}-\w{4}-4\w{3}-\w{4}-\w{12}") {
return 418;
}
```
## 2026-03-25 RFincken
Added China and Russia using ip2location blocklist
## 2026-02-18 RFincken
Allow user agent exception
## 2026-02-03 RFincken
Blocking php files in themes
## 2026-01-23 RFincken
Blocking http 1.1 and less for .php calls, returning 418 http code
Blocking empty user agents or "-" user agents