All my requests are flagged as DDoS and get blocked. Related Role ID: l7ddos

Website, Application, Performance Security
1

What is the name of the domain?

iranshopgift.ir

What is the error message?

Sorry, you have been blocked You are unable to access iranshopgift.ir

What is the issue you’re encountering

False-Positive DDoS

What steps have you taken to resolve the issue?

Disable Securities,
Set override ddos

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full

2

I cannot reproduce the same and cannot see the error since it looks to me like you’ve been missing the A type of the DNS record for your domain pointed to your origin host/server.

May I ask if you are on a free or paid plan? :thinking:

;QUESTION iranshopgift.ir. IN A 
;ANSWER
Record not found!

Fix this by double-checking your DNS tab of Cloudflare dashboard for your domain using the next link https://dash.cloudflare.com/?to=/:account/:zone/dns and add a missing one.

Helpful article to manage DNS records at Cloudflare:

Once done, reply back so we could re-test and provide more feedback and questions related to your blocking.

1 Like
4

Thanks for replying
The main website is iranshopgift.ir on free plan
The domain that is restricted by Anti-DDoS is debian.org.speedtest.net.iranshopgift.ir which is in DNS-Only mode for now as soon as I set it to Proxied mode all requests will be blocked by l7ddos
image

The sequence of events that cause this issue are:
1- Spike or high-load incoming requests
2- Activation of Cloudflare l7ddos
3- After almost 2 days with a low amount of requests per hour all proxied requests are getting blocked by HTTP DDoS Service

1 Like
5

Thank you for feedback :+1:

1 Like
6

The Cloudflare Support team has indicated that the issue is resolved from now on.

Please, if you still do encounter issues Contact Cloudflare Support by creating a Ticket for further help with your case.

Thank you for patience

2 Likes
7

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.