The Cloudflare WAF rule I use to block bots probing my site
June 24, 2026 · 6 min read
A single Cloudflare WAF custom rule that blocks the noisy automated scanners constantly probing for .env, .git, wp-admin, .tfstate, and other juicy paths. Copy it and tune it to your needs