The Cloudflare WAF rule I use to block bots probing my site

A single Cloudflare WAF custom rule that blocks the noisy automated scanners constantly probing for .env, .git, wp-admin, .tfstate, and other juicy paths. Copy it and tune it to your needs