Cloudflare waf blocked all of my request to my server

Website, Application, Performance Security
1

What is the name of the domain?

朽敗筆跡地區公所幸甚.com

What is the error message?

block request rule L7DDOS

What is the issue you’re encountering

cloudflare waf blocked all of my request to my server . i have pro plan

What steps have you taken to resolve the issue?

i create manage rule set and skipped the all rules and Security Level on essentialy off
and i add my ip to allow list but still all request block by waf and in rule said just L7DDOS
but there is no attack and ddos

Was the site working with SSL prior to adding it to Cloudflare?

No

What is the current SSL/TLS setting?

Flexible

Screenshot of the error

eror.png
eror.png2421×1445 166 KB

2

Did you create any WAF rule around the time of the change that may be blocking the traffic?

3

no . i didn’t create

5

If you’re getting an L7DDOS block, there is something very wrong with how you are connecting to the site. Please switch to another method, and that should fix the issue.

Also, what in the world are you doing that requires 185 Million requests to your server in 24 hours? That reeks of a serious Terms of Service violation.

2 Likes
6

we use only websocket. i tested it . my ip was in allow list but still 403 forbiden eror

7

I don’t mean protocol. I mean the connection you’re using. Is this your local ISP/Home IP address that’s getting blocked? What’s the ASN of the Blocked IP address?

8

its not about my ip or my ASN. all ips block. its about new update of cloudflare waf that block ALL suspected traffic like v2ray vpn to the origin server . and its very bad

9

You’ve contradicted yourself. It is not all IPs. It’s sketchy VPN traffic. Stop using stuff like that, and you won’t be blocked by the DDOS rule.

2 Likes
10

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.