For the past few weeks, every Friday i receive a large number of requests from multiple IP addresses and many of them include ?mdrv= in their request. Hundreds of requests every few seconds. I have verified this by viewing the apache access logs on my site. This crashes my site and leads to 504 of all further requests. I have looked up a selection of IP addresses and they all come from the same location but different ip addresses. Is there anyway cloudflare can identify this and prevent it?
If incoming requests match:
Query String contains "mdrv="
Then
Block or Managed Challenge
1 Like