A match is blocked before it reaches your origin

If a request matches one of these attack patterns, it's stopped immediately — your origin server never even sees it.