DDoS'ed by Cloudflare IPs


#1

This morning, my site was DDoS’ed by a bunch of CloudFlare IPs. I tried banning them but that prevented me from accessing my site. What am I supposed to do in this situation?


#2

You’re probably seeing the CloudFlare IPs because all traffic is being routed through Cloudflare, as it should because it’s a reverse proxy. Unless you have something like mod_cloudflare installed.

If you’re getting a rise in unwanted traffic, you can try increasing the Security Level in your Cloudflare Firewall settings.


#3

I use nginx and ngx_http_realip_module and this has never been an issue before.


#4

:thinking: Are other entries your logs showing the real IP address?

Anyway…what’s your Security Level? I generally keep mine set to High because I have a pretty safe target audience.

And what level of DDoS was it? Hundreds of hits per second? Thousands? Did your site go down?


#5

This topic was automatically closed after 14 days. New replies are no longer allowed.