WAF rule for filtering out a bunch of wordpress requests. Kind of simple but it does the job. Also nukes anything that ends with php.

Kills Sniffers. There is some amount of duplication of rules but I stopped caring when CF got uppity about how somethings that should match url.path would not, so scorch em.

A ton of shitty garbage traffic comes from these places. Kill.