diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
new file mode 100644
index 0000000..ede31f5
--- /dev/null
+++ b/.github/workflows/semgrep.yml
@@ -0,0 +1,23 @@
+
+on:
+  pull_request: {}
+  workflow_dispatch: {}
+  push: 
+    branches:
+      - main
+      - master
+name: Semgrep config
+jobs:
+  semgrep:
+    name: semgrep/ci
+    runs-on: ubuntu-20.04
+    env:
+      SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
+      SEMGREP_URL: https://cloudflare.semgrep.dev
+      SEMGREP_APP_URL: https://cloudflare.semgrep.dev
+      SEMGREP_VERSION_CHECK_URL: https://cloudflare.semgrep.dev/api/check-version
+    container:
+      image: returntocorp/semgrep
+    steps:
+      - uses: actions/checkout@v3
+      - run: semgrep ci
diff --git a/README.md b/README.md
index b3369b4..a3e4412 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,10 @@
 # mod_cloudflare for Apache #
 Copyright CloudFlare Inc. 2016
 
+## Deprecation notice ##
+
+Cloudflare no longer updates and supports mod_cloudflare, starting with versions Debian 9 and Ubuntu 18.04 LTS of the Linux operating system. We now recommend [mod_remoteip](https://support.cloudflare.com/hc/articles/200170786#C5XWe97z77b3XZV) for customers using Apache web servers.
+
 ## mod_cloudflare.c ##
 
 Based on mod_remoteip.c, this Apache extension will replace the remote_ip variable in user's logs with the correct remote IP sent from CloudFlare. The module only performs the IP substitution for requests originating from CloudFlare IPs by default.
@@ -17,6 +21,11 @@ An alternative way to install is to use GNU autotools, which requires that autoc
     $ ./configure
     $ make
     $ make install
+    
+### OS Support ###
+
+- CentOS - Supported
+- CloudLinux - Not Supported
 
 No further configuration is needed. However, if you wish to override the default values, the following directives are exposed:
 
diff --git a/mod_cloudflare.c b/mod_cloudflare.c
index 8d85d1a..6631291 100644
--- a/mod_cloudflare.c
+++ b/mod_cloudflare.c
@@ -57,7 +57,6 @@ static const char* CF_DEFAULT_TRUSTED_PROXY[] = {
   "190.93.240.0/20",
   "197.234.240.0/22",
   "198.41.128.0/17",
-  "199.27.128.0/21",
 /* IPv6 Address Ranges */
   "2400:cb00::/32",
   "2405:8100::/32",