Someone has setup a CDN server which is directing traffic to my server and setting the HOST header to match one of my real domains. Because of this, Apache uses the virtual host for my real domain name instead of the host name for the CDN domain.
For example, the URL is:
It appears this CDN is a proxy that is overriding the HOST header. Apache sees the host as www.mydomain.com instead of cdn.example.com.
I'd like to block this traffic, but I can't block via host or IP (because it changes). There is a host header:
edit: don't have mod_security installed