We work with a partner that has a webhook where they ping our server with various data updates.
Over the last 7 days they sent through ~20,000 requests and ~1550 of them (~8%) were blocked at the edge with a 403 message:
These requests are all going to the same endpoint on our site, they just have different post data associated with them.
Any idea why these requests would be getting blocked at the edge? I have looked through our cloudflare console and cant see any manual rules doing it. The blocked requests happened throughout the 7 days (not all at once), and is still happening.