Attack on my website by ddos

Website, Application, Performance Security
1

my website hit by a ddos attack but Cloudflare did not block it and my server is getting down.

2

Hi,

  1. Enable “I’m Under Attack” mode.
  2. Make sure only requests coming from Cloudflare IPs can access your origin server.
  3. Go to Firewall Events and try to identify patterns of the attack, such as User Agent, IP addresses, etc., then create Firewall Rules to block or challenge based on those patterns. (more details in the links below)
  4. Alternatively, create Firewall Rules based on patterns of legitimate visitors (countries most of your visitors come from, ASN of ISP providers in these countries, most visited pages etc.), then challenge everyone else.
  5. Post back here with as much detail as it is safe to share, so that volunteers and staff in this community can further help you fight back.
  6. Last, but not least, familiarize yourself with Cloudflare tools, such as WAF, Firewall Rules, Bot Fight Mode,

Some great advice you’ll find here:

2 Likes
3

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.