How to apply rate limit rule on whole subdomain

I have a worker running through a subdomain. I've a 100k per day requests limit but some times I get malicious traffic that consume all my daily requests limit. I looked into rate limit but it can't find an option to apply on whole subdomain. Its only showing url path option.

Also, if that is not possible, what else I can do to stop malicious traffic.