Changelog was last updated on: August 22 2026 17:30:02.
======
## 2026-07-30 RFincken
Blocking strange combinations of OS and browser ( example MSIE on Mac or both Windows NT and Android )

## 2026-07-22 RFincken
e655950
Blocking various default useragents for scanners

## 2026-06-18 RFincken

Blocking docker, application and non existent

## 2026-06-15 RFincken

Blocking wp-content + number / file.php

Blocking PHP calls to all in one migration folder

## 2026-05-14 RFincken

Blocking legit backup names like www.zip and site.rar as we provide a hosting panel with backup options.

## 2026-05-11 RFincken

Blocking specific non existing directory for specific customer

## 2026-05-01 RFincken

Blocking the WooCommerce combination of “Add to cart” AND “Remove from cart” in a single URL

## 2026-04-16 RFincken

Blocked useragents "python-requests/2" and "python-httpx"

## 2026-04-13 RFincken

Added uuid4 block on specific customer config

Set max http requests per IP per second to lower value

## 2026-04-09 RFincken

Reverted: Denied uuid4 in URL parameter.  
Source: rju3f78v

## 2026-04-07 RFincken

Removed BD|IR|IL from central blocklist

Added googlebot full IP range to allowlist

## 2026-04-03 RFincken

Denied uuid4 in URL parameter

```
if ($query_string ~* "\w{8}-\w{4}-4\w{3}-\w{4}-\w{12}") {
    return 418;
}
```

## 2026-03-25 RFincken

Added China and Russia using ip2location blocklist

## 2026-02-18 RFincken

Allow user agent exception

## 2026-02-03 RFincken

Blocking php files in themes

## 2026-01-23 RFincken

Blocking http 1.1 and less for .php calls, returning 418 http code

Blocking empty user agents or "-" user agents