Support

First, thank you for your kind words!

Regarding the exceptions, the key is to take a look at the Configure WAF page and its documentation. For example, you'll see that there is a setting called "Malicious User Agent block (MUAShield)". See? MUAShield. Now, what does that mean? Let's take a look at the documentation page. Search for MUAShield and you find this:

Many hackers will try to access your site using a browser configured to send malicious PHP code in its user agent string (a small piece of text used to describe the browser to your server). The idea is that buggy log processing software will parse it and allow the hacker to gain control of your website. When enabled, this feature allows Admin Tools to detect such attacks and block the request.

That's it. The Reason column in the log, the titles in the Configure WAF page and the documentation match up to give you the complete picture.

You might wonder why these are not tooltips. I have explained that many times in the past. If they become tooltips, translators will have to translate them and it's a LOT of text. Moreover, I can not guarantee that all translators grasp the full extent of the explanation, therefore I can not guarantee that it will be a perfect translation or an approximate adaptation which might give you the wrong impression about what each feature does.