Cloudflare ban all normal requests as HTTP DDoS attack

Website, Application, Performance Security
1

What is the name of the domain?

honguppe.com

What is the error number?

403

What is the error message?

Sorry, you have been blocked

What is the issue you’re encountering

Nearly all normal access has been banned

What steps have you taken to resolve the issue?

  1. The Security Level has been set to “Essentially Off”.
  2. Disable the “Browser Integrity Check”.
  3. Following https://developers.cloudflare.com/ddos-protection/managed-rulesets/adjust-rules/false-positive/ but stuck on the “step 9: Copy the rule name” because there is no “rule name”, just a rule id: l7ddos which is meaningless:
{
  "action": "block",
  "clientASNDescription": "CMNET-GUANGDONG-AP China Mobile communications corporation",
  "clientAsn": "56040",
  "clientCountryName": "CN",
  "clientIP": "183.240.139.27",
  "clientRequestHTTPHost": "ls9.honguppe.com",
  "clientRequestHTTPMethodName": "GET",
  "clientRequestHTTPProtocol": "HTTP/2",
  "clientRequestPath": "/_/img/2023-03-25/67kagb37mwf7rms5.js.360P/77824",
  "clientRequestQuery": "",
  "datetime": "2024-11-08T17:48:44Z",
  "ref": "",
  "rayName": "8df7654d3ee9ba30",
  "ruleId": "l7ddos",
  "rulesetId": "",
  "source": "l7ddos",
  "userAgent": "Mozilla/5.0 (Linux; Android 10; HarmonyOS; DVC-AN00; HMSCore 6.14.0.322) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.196 HuaweiBrowser/15.0.7.301 Mobile Safari/537.36",
  "matchIndex": 0,
  "metadata": [
    {
      "key": "dos-source",
      "value": "[email protected]"
    }
  ],
  "sampleInterval": 19
}

Screenshot of the error

01.png
01.png1039×943 39.8 KB

2

I get an nxdomain error. Is that your site?

The nxdomain error makes sense as you do not have an A record pointing to your origin site. That is #4 in the tip I’ll share below.

When you see the error DNS PROBE FINISHED NXDOMAIN, it means a domain cannot be resolved because of an issue with the DNS servers, the domain name is newly registered, or the domain is not yet registered at all. First verify the domain is pointed to Cloudflare name servers. If not, contact your domain registrar and ask that they point the domain to your Cloudflare nameservers and wait an appropriate amount of time for DNS propagation to take effect.

If you’re still seeing issues after name server propagation takes effect, review other successful troubleshooting suggestions in this Community Tip. Let us know if you continue to see issues after trying these tips, we’re happy to help further.

3

A post was split to a new topic: Nxdomain issues

4

I cannot reproduce the same and cannot see the error since it looks to me like you’ve been missing the A type of the DNS record for your domain pointed to your origin host/server.

May I ask if you are on a free or paid plan? :thinking:

;QUESTION honguppe.com. IN A 
;ANSWER
Record not found!

Fix this by double-checking your DNS tab of Cloudflare dashboard for your domain using the next link https://dash.cloudflare.com/?to=/:account/:zone/dns and add a missing one.

Helpful article to manage DNS records at Cloudflare:

Once done, reply back so we could re-test and provide more feedback and questions related to your blocking and which service was triggered when I visit your Website.

5

The Cloudflare Support team has indicated the issue is resolved now.

Please, if you still do encounter issues Contact Cloudflare Support by creating a Ticket for further help with your case.

Thank you for patience

6

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.