# BEGIN iThemes Security - Do not modify or remove this line
# iThemes Security Config Details: 2
	# Enable HackRepair.com's blocklist feature - Security > Settings > Banned Users > Default Blocklist
	# Start HackRepair.com Blacklist
	RewriteEngine on
	# Start Abuse Agent Blocking
	RewriteCond %{HTTP_USER_AGENT} "^Mozilla.*Indy" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Mozilla.*NEWT" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^$" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Maxthon$" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^SeaMonkey$" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Acunetix" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^binlar" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^BlackWidow" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Bolt 0" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^BOT for JCE" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Bot mailto\:craftbot@yahoo\.com" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^casper" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^checkprivacy" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^ChinaClaw" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^clshttp" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^cmsworldmap" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Custo" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Default Browser 0" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^diavol" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^DIIbot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^DISCo" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^dotbot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Download Demon" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^eCatch" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^EirGrabber" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^EmailCollector" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^EmailSiphon" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^EmailWolf" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Express WebPictures" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^extract" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^ExtractorPro" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^EyeNetIE" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^feedfinder" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^FHscan" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^FlashGet" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^flicky" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^g00g1e" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^GetRight" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^GetWeb\!" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Go\!Zilla" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Go\-Ahead\-Got\-It" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^grab" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^GrabNet" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Grafula" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^harvest" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^HMView" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Image Stripper" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Image Sucker" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^InterGET" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Internet Ninja" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^InternetSeer\.com" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^jakarta" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Java" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^JetCar" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^JOC Web Spider" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^kanagawa" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^kmccrew" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^larbin" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^LeechFTP" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^libwww" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Mass Downloader" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^microsoft\.url" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^MIDown tool" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^miner" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Mister PiX" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^MSFrontPage" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Navroad" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^NearSite" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Net Vampire" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^NetAnts" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^NetSpider" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^NetZIP" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^nutch" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Octopus" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Offline Explorer" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Offline Navigator" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^PageGrabber" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Papa Foto" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^pavuk" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^pcBrowser" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^PeoplePal" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^planetwork" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^psbot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^purebot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^pycurl" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^RealDownload" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^ReGet" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Rippers 0" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^sitecheck\.internetseer\.com" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^SiteSnagger" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^skygrid" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^SmartDownload" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^sucker" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^SuperBot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^SuperHTTP" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Surfbot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^tAkeOut" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Teleport Pro" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Toata dragostea mea pentru diavola" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^turnit" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^vikspider" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^VoidEYE" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Web Image Collector" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebAuto" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebBandit" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebCopier" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebFetch" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebGo IS" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebLeacher" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebReaper" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebSauger" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Website eXtractor" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Website Quester" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebStripper" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebWhacker" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebZIP" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Widow" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WPScan" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WWW\-Mechanize" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WWWOFFLE" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Xaldon WebSpider" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Zeus" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^zmeu" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "360Spider" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "CazoodleBot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "discobot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "EasouSpider" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "ecxi" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "GT\:\:WWW" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "heritrix" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "HTTP\:\:Lite" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "HTTrack" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "ia_archiver" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "id\-search" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "IDBot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "Indy Library" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "IRLbot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "ISC Systems iRc Search 2\.1" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "LinksCrawler" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "LinksManager\.com_bot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "linkwalker" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "lwp\-trivial" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "MFC_Tear_Sample" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "Microsoft URL Control" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "Missigua Locator" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "MJ12bot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "panscient\.com" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "PECL\:\:HTTP" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "PHPCrawl" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "PleaseCrawl" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "SBIder" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "SearchmetricsBot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "Snoopy" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "Steeler" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "URI\:\:Fetch" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "urllib" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "Web Sucker" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "webalta" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "WebCollage" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "Wells Search II" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "WEP Search" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "XoviBot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "YisouSpider" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "zermelo" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "ZyBorg" [NC,OR]
	# End Abuse Agent Blocking
	# Start Abuse HTTP Referrer Blocking
	RewriteCond %{HTTP_REFERER} "^https?://(?:[^/]+\.)?semalt\.com" [NC,OR]
	RewriteCond %{HTTP_REFERER} "^https?://(?:[^/]+\.)?kambasoft\.com" [NC,OR]
	RewriteCond %{HTTP_REFERER} "^https?://(?:[^/]+\.)?savetubevideo\.com" [NC]
	# End Abuse HTTP Referrer Blocking
	RewriteRule ^.* - [F,L]
	# End HackRepair.com Blacklist, http://pastebin.com/u/hackrepair

	# Ban Hosts - Security > Settings > Banned Users
	SetEnvIF REMOTE_ADDR "^20\.38\.33\.48$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^20\.38\.33\.48$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^20\.38\.33\.48$" DenyAccess

	SetEnvIF REMOTE_ADDR "^35\.245\.160\.47$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^35\.245\.160\.47$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^35\.245\.160\.47$" DenyAccess

	SetEnvIF REMOTE_ADDR "^35\.236\.84\.185$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^35\.236\.84\.185$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^35\.236\.84\.185$" DenyAccess

	SetEnvIF REMOTE_ADDR "^40\.76\.110\.71$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^40\.76\.110\.71$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^40\.76\.110\.71$" DenyAccess

	SetEnvIF REMOTE_ADDR "^34\.234\.76\.190$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^34\.234\.76\.190$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^34\.234\.76\.190$" DenyAccess

	SetEnvIF REMOTE_ADDR "^20\.98\.210\.243$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^20\.98\.210\.243$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^20\.98\.210\.243$" DenyAccess

	SetEnvIF REMOTE_ADDR "^40\.117\.226\.213$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^40\.117\.226\.213$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^40\.117\.226\.213$" DenyAccess

	SetEnvIF REMOTE_ADDR "^14\.192\.212\.9$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^14\.192\.212\.9$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^14\.192\.212\.9$" DenyAccess

	SetEnvIF REMOTE_ADDR "^182\.253\.124\.6$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^182\.253\.124\.6$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^182\.253\.124\.6$" DenyAccess

	SetEnvIF REMOTE_ADDR "^141\.136\.199\.74$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^141\.136\.199\.74$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^141\.136\.199\.74$" DenyAccess

	SetEnvIF REMOTE_ADDR "^201\.159\.189\.62$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^201\.159\.189\.62$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^201\.159\.189\.62$" DenyAccess

	SetEnvIF REMOTE_ADDR "^115\.42\.76\.28$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^115\.42\.76\.28$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^115\.42\.76\.28$" DenyAccess

	SetEnvIF REMOTE_ADDR "^103\.41\.37\.96$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^103\.41\.37\.96$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^103\.41\.37\.96$" DenyAccess

	SetEnvIF REMOTE_ADDR "^2\.53\.136\.50$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^2\.53\.136\.50$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^2\.53\.136\.50$" DenyAccess

	SetEnvIF REMOTE_ADDR "^35\.240\.242\.14$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^35\.240\.242\.14$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^35\.240\.242\.14$" DenyAccess

	SetEnvIF REMOTE_ADDR "^84\.110\.220\.86$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^84\.110\.220\.86$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^84\.110\.220\.86$" DenyAccess

	SetEnvIF REMOTE_ADDR "^79\.223\.211\.236$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^79\.223\.211\.236$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^79\.223\.211\.236$" DenyAccess

	SetEnvIF REMOTE_ADDR "^202\.142\.81\.143$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^202\.142\.81\.143$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^202\.142\.81\.143$" DenyAccess

	SetEnvIF REMOTE_ADDR "^72\.27\.106\.200$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^72\.27\.106\.200$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^72\.27\.106\.200$" DenyAccess

	SetEnvIF REMOTE_ADDR "^187\.232\.34\.208$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^187\.232\.34\.208$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^187\.232\.34\.208$" DenyAccess

	SetEnvIF REMOTE_ADDR "^179\.42\.220\.210$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^179\.42\.220\.210$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^179\.42\.220\.210$" DenyAccess

	SetEnvIF REMOTE_ADDR "^163\.53\.252\.247$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^163\.53\.252\.247$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^163\.53\.252\.247$" DenyAccess

	SetEnvIF REMOTE_ADDR "^187\.106\.103\.28$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^187\.106\.103\.28$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^187\.106\.103\.28$" DenyAccess

	SetEnvIF REMOTE_ADDR "^82\.80\.230\.228$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^82\.80\.230\.228$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^82\.80\.230\.228$" DenyAccess

	SetEnvIF REMOTE_ADDR "^34\.98\.205\.94$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^34\.98\.205\.94$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^34\.98\.205\.94$" DenyAccess

	SetEnvIF REMOTE_ADDR "^179\.250\.254\.241$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^179\.250\.254\.241$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^179\.250\.254\.241$" DenyAccess

	SetEnvIF REMOTE_ADDR "^46\.105\.45\.118$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^46\.105\.45\.118$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^46\.105\.45\.118$" DenyAccess

	SetEnvIF REMOTE_ADDR "^138\.122\.34\.26$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^138\.122\.34\.26$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^138\.122\.34\.26$" DenyAccess

	SetEnvIF REMOTE_ADDR "^180\.190\.255\.26$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^180\.190\.255\.26$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^180\.190\.255\.26$" DenyAccess

	SetEnvIF REMOTE_ADDR "^188\.26\.188\.23$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^188\.26\.188\.23$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^188\.26\.188\.23$" DenyAccess

	SetEnvIF REMOTE_ADDR "^124\.106\.138\.11$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^124\.106\.138\.11$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^124\.106\.138\.11$" DenyAccess

	SetEnvIF REMOTE_ADDR "^186\.104\.171\.234$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^186\.104\.171\.234$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^186\.104\.171\.234$" DenyAccess

	SetEnvIF REMOTE_ADDR "^85\.62\.137\.104$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^85\.62\.137\.104$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^85\.62\.137\.104$" DenyAccess

	SetEnvIF REMOTE_ADDR "^146\.241\.201\.61$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^146\.241\.201\.61$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^146\.241\.201\.61$" DenyAccess

	SetEnvIF REMOTE_ADDR "^192\.227\.158\.116$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^192\.227\.158\.116$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^192\.227\.158\.116$" DenyAccess

	SetEnvIF REMOTE_ADDR "^213\.81\.151\.1$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^213\.81\.151\.1$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^213\.81\.151\.1$" DenyAccess

	SetEnvIF REMOTE_ADDR "^39\.32\.91\.212$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^39\.32\.91\.212$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^39\.32\.91\.212$" DenyAccess

	SetEnvIF REMOTE_ADDR "^27\.125\.248\.53$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^27\.125\.248\.53$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^27\.125\.248\.53$" DenyAccess

	SetEnvIF REMOTE_ADDR "^27\.125\.248\.5$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^27\.125\.248\.5$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^27\.125\.248\.5$" DenyAccess

	SetEnvIF REMOTE_ADDR "^27\.125\.248\.101$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^27\.125\.248\.101$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^27\.125\.248\.101$" DenyAccess

	SetEnvIF REMOTE_ADDR "^45\.121\.91\.232$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^45\.121\.91\.232$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^45\.121\.91\.232$" DenyAccess

	SetEnvIF REMOTE_ADDR "^212\.15\.177\.89$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^212\.15\.177\.89$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^212\.15\.177\.89$" DenyAccess

	SetEnvIF REMOTE_ADDR "^212\.15\.177\.88$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^212\.15\.177\.88$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^212\.15\.177\.88$" DenyAccess

	SetEnvIF REMOTE_ADDR "^93\.34\.152\.61$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^93\.34\.152\.61$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^93\.34\.152\.61$" DenyAccess

	SetEnvIF REMOTE_ADDR "^95\.177\.183\.28$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^95\.177\.183\.28$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^95\.177\.183\.28$" DenyAccess

	SetEnvIF REMOTE_ADDR "^179\.217\.101\.135$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^179\.217\.101\.135$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^179\.217\.101\.135$" DenyAccess

	SetEnvIF REMOTE_ADDR "^52\.188\.16\.162$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^52\.188\.16\.162$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^52\.188\.16\.162$" DenyAccess

	SetEnvIF REMOTE_ADDR "^77\.163\.74\.212$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^77\.163\.74\.212$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^77\.163\.74\.212$" DenyAccess

	SetEnvIF REMOTE_ADDR "^45\.127\.137\.223$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^45\.127\.137\.223$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^45\.127\.137\.223$" DenyAccess

	SetEnvIF REMOTE_ADDR "^78\.109\.69\.156$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^78\.109\.69\.156$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^78\.109\.69\.156$" DenyAccess

	SetEnvIF REMOTE_ADDR "^37\.186\.114\.110$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^37\.186\.114\.110$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^37\.186\.114\.110$" DenyAccess

	SetEnvIF REMOTE_ADDR "^188\.244\.248\.122$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^188\.244\.248\.122$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^188\.244\.248\.122$" DenyAccess

	SetEnvIF REMOTE_ADDR "^195\.206\.183\.157$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^195\.206\.183\.157$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^195\.206\.183\.157$" DenyAccess

	SetEnvIF REMOTE_ADDR "^27\.34\.73\.88$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^27\.34\.73\.88$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^27\.34\.73\.88$" DenyAccess

	<IfModule mod_authz_core.c>
		<RequireAll>
			Require all granted
			Require not env DenyAccess
			Require not ip 20.38.33.48
			Require not ip 35.245.160.47
			Require not ip 35.236.84.185
			Require not ip 40.76.110.71
			Require not ip 34.234.76.190
			Require not ip 20.98.210.243
			Require not ip 40.117.226.213
			Require not ip 14.192.212.9
			Require not ip 182.253.124.6
			Require not ip 141.136.199.74
			Require not ip 201.159.189.62
			Require not ip 115.42.76.28
			Require not ip 103.41.37.96
			Require not ip 2.53.136.50
			Require not ip 35.240.242.14
			Require not ip 84.110.220.86
			Require not ip 79.223.211.236
			Require not ip 202.142.81.143
			Require not ip 72.27.106.200
			Require not ip 187.232.34.208
			Require not ip 179.42.220.210
			Require not ip 163.53.252.247
			Require not ip 187.106.103.28
			Require not ip 82.80.230.228
			Require not ip 34.98.205.94
			Require not ip 179.250.254.241
			Require not ip 46.105.45.118
			Require not ip 138.122.34.26
			Require not ip 180.190.255.26
			Require not ip 188.26.188.23
			Require not ip 124.106.138.11
			Require not ip 186.104.171.234
			Require not ip 85.62.137.104
			Require not ip 146.241.201.61
			Require not ip 192.227.158.116
			Require not ip 213.81.151.1
			Require not ip 39.32.91.212
			Require not ip 27.125.248.53
			Require not ip 27.125.248.5
			Require not ip 27.125.248.101
			Require not ip 45.121.91.232
			Require not ip 212.15.177.89
			Require not ip 212.15.177.88
			Require not ip 93.34.152.61
			Require not ip 95.177.183.28
			Require not ip 179.217.101.135
			Require not ip 52.188.16.162
			Require not ip 77.163.74.212
			Require not ip 45.127.137.223
			Require not ip 78.109.69.156
			Require not ip 37.186.114.110
			Require not ip 188.244.248.122
			Require not ip 195.206.183.157
			Require not ip 27.34.73.88
		</RequireAll>
	</IfModule>
	<IfModule !mod_authz_core.c>
		Order allow,deny
		Allow from all
		Deny from env=DenyAccess
		Deny from 20.38.33.48
		Deny from 35.245.160.47
		Deny from 35.236.84.185
		Deny from 40.76.110.71
		Deny from 34.234.76.190
		Deny from 20.98.210.243
		Deny from 40.117.226.213
		Deny from 14.192.212.9
		Deny from 182.253.124.6
		Deny from 141.136.199.74
		Deny from 201.159.189.62
		Deny from 115.42.76.28
		Deny from 103.41.37.96
		Deny from 2.53.136.50
		Deny from 35.240.242.14
		Deny from 84.110.220.86
		Deny from 79.223.211.236
		Deny from 202.142.81.143
		Deny from 72.27.106.200
		Deny from 187.232.34.208
		Deny from 179.42.220.210
		Deny from 163.53.252.247
		Deny from 187.106.103.28
		Deny from 82.80.230.228
		Deny from 34.98.205.94
		Deny from 179.250.254.241
		Deny from 46.105.45.118
		Deny from 138.122.34.26
		Deny from 180.190.255.26
		Deny from 188.26.188.23
		Deny from 124.106.138.11
		Deny from 186.104.171.234
		Deny from 85.62.137.104
		Deny from 146.241.201.61
		Deny from 192.227.158.116
		Deny from 213.81.151.1
		Deny from 39.32.91.212
		Deny from 27.125.248.53
		Deny from 27.125.248.5
		Deny from 27.125.248.101
		Deny from 45.121.91.232
		Deny from 212.15.177.89
		Deny from 212.15.177.88
		Deny from 93.34.152.61
		Deny from 95.177.183.28
		Deny from 179.217.101.135
		Deny from 52.188.16.162
		Deny from 77.163.74.212
		Deny from 45.127.137.223
		Deny from 78.109.69.156
		Deny from 37.186.114.110
		Deny from 188.244.248.122
		Deny from 195.206.183.157
		Deny from 27.34.73.88
	</IfModule>

	# Disable XML-RPC - Security > Settings > WordPress Tweaks > XML-RPC
	<files xmlrpc.php>
		<IfModule mod_authz_core.c>
			Require all denied
		</IfModule>
		<IfModule !mod_authz_core.c>
			Order allow,deny
			Deny from all
		</IfModule>
	</files>

	# Protect System Files - Security > Settings > System Tweaks > System Files
	<files .htaccess>
		<IfModule mod_authz_core.c>
			Require all denied
		</IfModule>
		<IfModule !mod_authz_core.c>
			Order allow,deny
			Deny from all
		</IfModule>
	</files>
	<files readme.html>
		<IfModule mod_authz_core.c>
			Require all denied
		</IfModule>
		<IfModule !mod_authz_core.c>
			Order allow,deny
			Deny from all
		</IfModule>
	</files>
	<files readme.txt>
		<IfModule mod_authz_core.c>
			Require all denied
		</IfModule>
		<IfModule !mod_authz_core.c>
			Order allow,deny
			Deny from all
		</IfModule>
	</files>
	<files wp-config.php>
		<IfModule mod_authz_core.c>
			Require all denied
		</IfModule>
		<IfModule !mod_authz_core.c>
			Order allow,deny
			Deny from all
		</IfModule>
	</files>

	# Disable Directory Browsing - Security > Settings > System Tweaks > Directory Browsing
	Options -Indexes

	<IfModule mod_rewrite.c>
		RewriteEngine On

		# Protect System Files - Security > Settings > System Tweaks > System Files
		RewriteRule ^wp-admin/install\.php$ - [F]
		RewriteRule ^wp-admin/includes/ - [F]
		RewriteRule !^wp-includes/ - [S=3]
		RewriteRule ^wp-includes/[^/]+\.php$ - [F]
		RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F]
		RewriteRule ^wp-includes/theme-compat/ - [F]
		RewriteCond %{REQUEST_FILENAME} -f
		RewriteRule (^|.*/)\.(git|svn)/.* - [F]

		# Disable PHP in Uploads - Security > Settings > System Tweaks > PHP in Uploads
		RewriteRule ^wp\-content/uploads/.*\.(?:php[1-7]?|pht|phtml?|phps)\.?$ - [NC,F]

		# Disable PHP in Plugins - Security > Settings > System Tweaks > PHP in Plugins
		RewriteRule ^wp\-content/plugins/.*\.(?:php[1-7]?|pht|phtml?|phps)\.?$ - [NC,F]

		# Disable PHP in Themes - Security > Settings > System Tweaks > PHP in Themes
		RewriteRule ^wp\-content/themes/.*\.(?:php[1-7]?|pht|phtml?|phps)\.?$ - [NC,F]
	</IfModule>
# END iThemes Security - Do not modify or remove this line

#Begin Really Simple Auto Prepend File
<IfModule mod_php7.c>
php_value auto_prepend_file /var/www/vhosts/zauberer-kabarettist.de/httpdocs/wp-content/advanced-headers.php
</IfModule>
<IfModule mod_php.c>
php_value auto_prepend_file /var/www/vhosts/zauberer-kabarettist.de/httpdocs/wp-content/advanced-headers.php
</IfModule>
<Files ".user.ini">
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order deny,allow
Deny from all
</IfModule>
</Files>
#End Really Simple Auto Prepend File

# BEGIN WP Rocket
#Begin Really Simple Auto Prepend File
<IfModule mod_php7.c>
php_value auto_prepend_file /var/www/vhosts/zauberer-kabarettist.de/httpdocs/wp-content/advanced-headers.php
</IfModule>
<IfModule mod_php.c>
php_value auto_prepend_file /var/www/vhosts/zauberer-kabarettist.de/httpdocs/wp-content/advanced-headers.php
</IfModule>
<Files ".user.ini">
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order deny,allow
Deny from all
</IfModule>
</Files>

#Begin Really Simple Security Redirect
<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{HTTPS} !=on [NC]
RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]
</IfModule>

#End Really Simple Security Redirect

#End Really Simple Auto Prepend File
# Use UTF-8 encoding for anything served text/plain or text/html
AddDefaultCharset UTF-8
# Force UTF-8 for a number of file formats
<IfModule mod_mime.c>
AddCharset UTF-8 .atom .css .js .json .rss .vtt .xml
</IfModule>

# FileETag None is not enough for every server.
<IfModule mod_headers.c>
Header unset ETag
</IfModule>

# Since we’re sending far-future expires, we don’t need ETags for static content.
# developer.yahoo.com/performance/rules.html#etags
FileETag None

<IfModule mod_alias.c>
<FilesMatch "\.(html|htm|rtf|rtx|txt|xsd|xsl|xml)$">
<IfModule mod_headers.c>
Header set X-Powered-By "WP Rocket/3.17.2.1"
Header unset Pragma
Header append Cache-Control "public"
Header unset Last-Modified
</IfModule>
</FilesMatch>

<FilesMatch "\.(css|htc|js|asf|asx|wax|wmv|wmx|avi|bmp|class|divx|doc|docx|eot|exe|gif|gz|gzip|ico|jpg|jpeg|jpe|json|mdb|mid|midi|mov|qt|mp3|m4a|mp4|m4v|mpeg|mpg|mpe|mpp|otf|odb|odc|odf|odg|odp|ods|odt|ogg|pdf|png|pot|pps|ppt|pptx|ra|ram|svg|svgz|swf|tar|tif|tiff|ttf|ttc|wav|wma|wri|xla|xls|xlsx|xlt|xlw|zip)$">
<IfModule mod_headers.c>
Header unset Pragma
Header append Cache-Control "public"
</IfModule>
</FilesMatch>
</IfModule>

<IfModule mod_mime.c>
	AddType image/avif                                  avif
    AddType image/avif-sequence                         avifs
</IfModule>
# Expires headers (for better cache control)
<IfModule mod_expires.c>
	ExpiresActive on
	ExpiresDefault                              "access plus 1 month"
	# cache.appcache needs re-requests in FF 3.6 (thanks Remy ~Introducing HTML5)
	ExpiresByType text/cache-manifest           "access plus 0 seconds"
	# Your document html
	ExpiresByType text/html                     "access plus 0 seconds"
	# Data
	ExpiresByType text/xml                      "access plus 0 seconds"
	ExpiresByType application/xml               "access plus 0 seconds"
	ExpiresByType application/json              "access plus 0 seconds"
	# Feed
	ExpiresByType application/rss+xml           "access plus 1 hour"
	ExpiresByType application/atom+xml          "access plus 1 hour"
	# Favicon (cannot be renamed)
	ExpiresByType image/x-icon                  "access plus 1 week"
	# Media: images, video, audio
	ExpiresByType image/gif                     "access plus 4 months"
	ExpiresByType image/png                     "access plus 4 months"
	ExpiresByType image/jpeg                    "access plus 4 months"
	ExpiresByType image/webp                    "access plus 4 months"
	ExpiresByType video/ogg                     "access plus 4 months"
	ExpiresByType audio/ogg                     "access plus 4 months"
	ExpiresByType video/mp4                     "access plus 4 months"
	ExpiresByType video/webm                    "access plus 4 months"
	ExpiresByType image/avif                    "access plus 4 months"
	ExpiresByType image/avif-sequence           "access plus 4 months"
	# HTC files  (css3pie)
	ExpiresByType text/x-component              "access plus 1 month"
	# Webfonts
	ExpiresByType font/ttf                      "access plus 4 months"
	ExpiresByType font/otf                      "access plus 4 months"
	ExpiresByType font/woff                     "access plus 4 months"
	ExpiresByType font/woff2                    "access plus 4 months"
	ExpiresByType image/svg+xml                 "access plus 4 months"
	ExpiresByType application/vnd.ms-fontobject "access plus 1 month"
	# CSS and JavaScript
	ExpiresByType text/css                      "access plus 1 year"
	ExpiresByType application/javascript        "access plus 1 year"
</IfModule>
# Gzip compression
<IfModule mod_deflate.c>
# Active compression
SetOutputFilter DEFLATE
# Force deflate for mangled headers
<IfModule mod_setenvif.c>
<IfModule mod_headers.c>
SetEnvIfNoCase ^(Accept-EncodXng|X-cept-Encoding|X{15}|~{15}|-{15})$ ^((gzip|deflate)\s*,?\s*)+|[X~-]{4,13}$ HAVE_Accept-Encoding
RequestHeader append Accept-Encoding "gzip,deflate" env=HAVE_Accept-Encoding
# Don’t compress images and other uncompressible content
SetEnvIfNoCase Request_URI \
\.(?:gif|jpe?g|png|rar|zip|exe|flv|mov|wma|mp3|avi|swf|mp?g|mp4|webm|webp|pdf)$ no-gzip dont-vary
</IfModule>
</IfModule>

# Compress all output labeled with one of the following MIME-types
<IfModule mod_filter.c>
AddOutputFilterByType DEFLATE application/atom+xml \
		                          application/javascript \
		                          application/json \
		                          application/rss+xml \
		                          application/vnd.ms-fontobject \
		                          application/x-font-ttf \
		                          application/xhtml+xml \
		                          application/xml \
		                          font/opentype \
		                          image/svg+xml \
		                          image/x-icon \
		                          text/css \
		                          text/html \
		                          text/plain \
		                          text/x-component \
		                          text/xml
</IfModule>
<IfModule mod_headers.c>
Header append Vary: Accept-Encoding
</IfModule>
</IfModule>

# END WP Rocket

# BEGIN WordPress
# Die Anweisungen (Zeilen) zwischen „BEGIN WordPress“ und „END WordPress“ sind
# dynamisch generiert und sollten nur über WordPress-Filter geändert werden.
# Alle Änderungen an den Anweisungen zwischen diesen Markierungen werden überschrieben.
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress