Want to block spam traffic based on a OR-AND-OR structure

firewall

#1

Hi there CloudFlare
We are having some issues with strange traffic on touchlucky.com from a malignous traffic source, with this MO:
Service Provider = microsoft corporation OR microsoft limited
AND
Network domain = reubencloud.co.uk OR unknown.unknown

As a fun note, this spam-traffic seems to take the weekends off.

Is there a way to track and measure (and eventually block) the traffic matching this description?


#2

You can use firewall rules. What does MO mean and what is the service provider and the network domain? Can you provide some examples?


closed #3

This topic was automatically closed after 30 days. New replies are no longer allowed.