'403 Forbidden' For StatusCake monitoring but site is up and working

Website, Application, Performance Security
1

What is the name of the domain?

What is the error number?

403

What is the error message?

“Forbidden”

What is the issue you’re encountering

When using with monitoring via StatusCake - Cloudflare is blocking requests from the StatusCake and reporting the site down with ‘403 Forbidden’ when the site is actually up.

What steps have you taken to resolve the issue?

Need to add the StatusCake IPs to the Cloudflare allowlist but unsure the best approach:
https://app.statuscake.com/Workfloor/Locations.php?format=txt

The StatusCake IP changes are documented here: Monitoring Regions Rollout for Paid Uptime Checks Coming Soon - StatusCake updates Also relevant:
I Got a False Positive? - StatusCake Knowledge Base - Website monitoring how-to guides

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Flexible

What are the steps to reproduce the issue?

Create monitoring via StatusCake - see that it gets blocked by Cloudlfare with 403 Forbidden

2

First check the security event log to see why the requests are blocked…
https://dash.cloudflare.com/?to=/:account/:zone/security/events

If you are on a free plan and they are being blocked by Bot Fight Mode, then you will need to add the IP addresses as “allow” under IP Access Rules (WAF custom rules can’t be used to skip Bot Fight Mode)…

If not Bot Fight Mode, or you are using a paid plan with Super Bot Fight Mode or not, then you can use a WAF custom rule to match the IP addresses and “skip” whichever Cloudflare feature is blocking the request.

1 Like
3

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.