Changelog was last updated on: June 09 2026 16:30:03.<br/>======<br/><pre>## 2026-05-14 RFincken

Blocking legit backup names like www.zip and site.rar as we provide a hosting panel with backup options.

## 2026-05-11 RFincken

Blocking specific non existing directory for specific customer

## 2026-05-01 RFincken

Blocking the WooCommerce combination of “Add to cart” AND “Remove from cart” in a single URL

## 2026-04-16 RFincken

Blocked useragents &quot;python-requests/2&quot; and &quot;python-httpx&quot;

## 2026-04-13 RFincken

Added uuid4 block on specific customer config

Set max http requests per IP per second to lower value

## 2026-04-09 RFincken

Reverted: Denied uuid4 in URL parameter.  
Source: rju3f78v

## 2026-04-07 RFincken

Removed BD|IR|IL from central blocklist

Added googlebot full IP range to allowlist

## 2026-04-03 RFincken

Denied uuid4 in URL parameter

```
if ($query_string ~* &quot;\w{8}-\w{4}-4\w{3}-\w{4}-\w{12}&quot;) {
    return 418;
}
```

## 2026-03-25 RFincken

Added China and Russia using ip2location blocklist

## 2026-02-18 RFincken

Allow user agent exception

## 2026-02-03 RFincken

Blocking php files in themes

## 2026-01-23 RFincken

Blocking http 1.1 and less for .php calls, returning 418 http code

Blocking empty user agents or &quot;-&quot; user agents</pre>