How can I block requests that doesn’t have any user agent ?
Respectively, if you are on a paid plan, there is also a WAF rule -> Blocking Empty User Agent String
Im on paid plan but tons of requests hit my server with none user agent
Well, you need to enable the rule or alternatively create above’s firewall rule.
Also note that you should firewall your server to only accept requests from Cloudflare owned IPs:
I have few issues with blocking blank user agent. Sometime facebook owned ip check content using blank user agent. Should We block it if fb does come to check with blank user agent?