I have a server which is constantly being attacked by malicious scripts (from various geo-locations, so IP filtering isnt effective)
Fortunately, I have determined some of the form post values which are common and am hoping to filter the requests from my IIS 8.0 server.
Request Filtering seems to be the way forward, but so far as I can see it only applies to query string and URL.
Am I mistaken? Any help would be greatly appreciated, thanks!