I run a spotweb website and some people like to get it down by mass requests. A request is like:

`/?page=getnzb&action=display&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]&messageid[][email protected]`

After 40 request/second my VPS said: bey bey apache and is offline. I try to block this mass requests with the .htaccess:

`# Block requests containing specific query parameters
<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{QUERY_STRING} (^|&)messageid\%5B\%5D= [NC]
RewriteRule ^ - [F,L]
</IfModule>
<IfModule mod_rewrite.c>
RewriteEngine On

# Block requests containing specific query parameters
RewriteCond %{QUERY_STRING} (^|&)messageid\%5B\%5D= [NC]
RewriteRule ^ - [F,L]
</IfModule>`

But this requests doesent kill. How to kill this request sending them to localhost ore something that the VPS will be alive?

ISPmanager (apache + nginx)

For now I add manual the IP into the cloudflare firewall but the next IP is there. Thanks

Helping with the golden code