I have an ongoing DDoS attack. The analytics in Cloudflare is showing that almost all (99%) of the traffic is coming from unknown agents. However, when I create a filter to trigger on that “”, it isn’t getting triggered.
Empty user-agent or?
In case you aren’t on a Pro account, which has got the WAF Rule and you can enable it with a single-click, therefrom kindly see below Firewall Tip to help you:
This posting is
part of a series on Cloudflare’s firewall engine and discusses rules which might make your site just a tad less welcoming to automated robots and crawlers.
Although optional, HTTP requests typically contain a User-Agent field which indicates the software which made the request (e.g. your browser). We could now fill pages over pages with details and advice on how we could interpret and parse this field (and we will actually revisit this topic relatively soon) bu…