Bottraffic.live

Thousands of referrals from bottraffic.live currently attacking my website. The weird thing that it’s “powered by cloudflare”.

Turned on “I’m under attack” firewall rule and everything that I can, but won’t help!

Why can’t you block this bot?

3 Likes

Our web site has been under attack too (today) by the following Cloudflare-backed domains:
https://bot-traffic.xyz
https://trafficbot.life

And these two as well:
https://bottraffic.live
https://bot-traffic.life

We also have “bot-traffic.icu”, similarly to what is reported here:
https://support.google.com/analytics/thread/95674496?hl=en

same too
bot-traffic.xyz! wwewe|690x184

bot-traffic.xyz Network Tools: DNS,IP,Email

[172.67.164.174
Cloudflare, Inc. (AS13335)
[104.21.66.216]
Cloudflare, Inc. (AS13335)|
any solution?

it seems to stop now!

Also had 1,260 hits from this “referral” domain too. But Cloudflare didn’t block this obvious suspect IP and we have bot-fighting enabled. What’s this about as it’s messing with our Analytics as all hits showing up as sessions.

nslookup www.bottraffic.live gives us 5.45.82.205.

Here are some abuse reports:
https://www.abuseipdb.com/check/5.45.82.205

1 Like

I’ve been getting a lot of spam/ddos attacks from these specific sources according to Google analytics:

bot-traffic.xyz

trafficbot.live

since the attacks are spread out over 50+ countries and I need to keep many countries open to my website what would be the best solutions for me to single out these sources and how do I block them using Cloudflare? Appreciate any help

1 Like

On any plan you have Firewall rules, at least 5 of them on Free plan.
You can setup your Firewall rule to block by IP address or by Country :slight_smile:

For example using the expression:
(http.request.uri.path contains "/wp-login.php" and ip.geoip.country ne "HR") would block each visitor trying to access yourwebsite.com/wp-login.php, but allow anyone from Croatia.

Or vice versa, you can block multiple countries and allow all other visitors to pass.

Also to consider with the rule like allowing Cloudflare “good bots” to pass VS “bad bots”:
and not cf.client.bot

It’s not working since this bot is behind Cloudflare and you can’t block a Cloudflare IP… also the attack was from several countries worldwide.

Cloudflare IPs aren’t for outbound traffic. That would imply that the bot is running on Cloudflare servers, which I highly doubt. If you’re seeing Cloudflare IPs, it’s most likely because your server isn’t restoring Cloudflare IP addresses.

2 Likes

I have same problems but with “trafficbot.live”… :confused:

1 Like

I have same problem. Yesterday 5k of bottraffic.live

Same problem here. Several hundreds of hits from bottraffic.live right now. How do I stop it??

I am also having issues from trafficbot.live.

If you’re talking about Referrers, has anybody tried a firewall rule like:

3 Likes

This is what I’m getting right now. How do I block it?

You can create a Firewall Rule like this:

This will block all requests to “/bot-traffic.icu”

2 Likes

I cant stop them all, today I have problems with “trafficbot.life”, yesterday “trafficbot.live” someone else “bot-traffic.icu”…
Can Cloudflare do something, what if they start to put more random things?

1 Like