Netlify now automatically blocks bot scans targeting PHP paths across all plans — no configuration required.

Previously, these bots generated noise in Observability logs and metrics. They showed up without a User-Agent header. Netlify now blocks them at the edge.

Since rolling out edge-level blocking on December 28, 2025, Netlify has blocked 2.9 billion of these requests.