From 75e1159f7c901911b86aaca5ab25f885d95614b2 Mon Sep 17 00:00:00 2001 From: Osman Barutcu <49992495+osmanbarutcu@users.noreply.github.com> Date: Wed, 22 Jan 2025 13:08:00 +0300 Subject: [PATCH 1/2] Update Threat Check - Challenge.txt --- Threat Check - Challenge.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Threat Check - Challenge.txt b/Threat Check - Challenge.txt index 953513b..4052a50 100644 --- a/Threat Check - Challenge.txt +++ b/Threat Check - Challenge.txt @@ -1 +1 @@ -(http.request.version in {"HTTP/1.1" "HTTP/1.2"} and not http.request.version in {"HTTP/2" "HTTP/3" "SPDY/3.1"} and not ip.geoip.asnum in {13238 15169 8075 47541 32934} and not cf.client.bot) or (cf.threat_score ge 10 and not cf.client.bot) or (not ssl) or (ip.geoip.continent in {"AF" "AS" "AN" "EU" "NA" "OC" "SA"} and not ip.geoip.country in {"RU" "MD" "BY" "UA" "GB" "US" "FR" "ES" "IT" "CA" "DE" "SE" "FI" "BE" "NL"} and not ip.geoip.asnum in {13238 15169 8075 47541 32934} and not cf.client.bot) or (http.referer eq "" and not cf.client.bot) +(not ssl) or (cf.threat_score ge 10 and not cf.client.bot) or (http.request.version ne "HTTP/1.1" and http.request.version ne "HTTP/1.2" and http.request.version ne "HTTP/2" and http.request.version ne "HTTP/3") or (ip.geoip.country ne "RU" and ip.geoip.country ne "BY" and ip.geoip.country ne "UA" and not cf.client.bot) From ce1ffea34f1f5e016d08b5f2150649fb5f7b1891 Mon Sep 17 00:00:00 2001 From: Osman Barutcu <49992495+osmanbarutcu@users.noreply.github.com> Date: Wed, 22 Jan 2025 13:11:36 +0300 Subject: [PATCH 2/2] Update Threat Check - Challenge.txt --- Threat Check - Challenge.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Threat Check - Challenge.txt b/Threat Check - Challenge.txt index 4052a50..6748349 100644 --- a/Threat Check - Challenge.txt +++ b/Threat Check - Challenge.txt @@ -1 +1 @@ -(not ssl) or (cf.threat_score ge 10 and not cf.client.bot) or (http.request.version ne "HTTP/1.1" and http.request.version ne "HTTP/1.2" and http.request.version ne "HTTP/2" and http.request.version ne "HTTP/3") or (ip.geoip.country ne "RU" and ip.geoip.country ne "BY" and ip.geoip.country ne "UA" and not cf.client.bot) +(ip.geoip.country eq "TR") or (not ssl) or (cf.threat_score ge 10 and not cf.client.bot) or (http.request.version ne "HTTP/1.1" and http.request.version ne "HTTP/1.2" and http.request.version ne "HTTP/2" and http.request.version ne "HTTP/3") or (ip.geoip.country ne "RU" and ip.geoip.country ne "BY" and ip.geoip.country ne "UA" and not cf.client.bot)