HTTP DDoS (false positive)

Website, Application, Performance Security
1

What is the name of the domain?

www.grvm.net

What is the error number?

Sorry, you have been blocked

What is the error message?

8ec5a4413c0b0c4c, 8ec5a44eecaad0d6

What is the issue you’re encountering

All legitimate traffic blocked. I checked Security Events, all traffic legitimate.

What steps have you taken to resolve the issue?

Security - WAF - Custom rules. Set skip all (tried few variants: hostname, URI Full) - not help.
Security - Bots. Disable all - not help.
Security - DDoS - DDoS override + DDoS rules. Set Essentially Off for all - not help.
Security - Settings. Set Essentially Off, disable all - not help.

I can’t control WAF on free plan?

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full (strict)

Screenshot of the error

screen.png
screen.png962×449 38.2 KB

1 Like
2

A lot of “mitigated by WAF” traffic on graphic it’s not DDoS, just clients try to restore connection

1 Like
3

Unfortunately, I am facing exactly the same issue you are experiencing.

This is the second time in the past month that it has happened.

Just like in your case, I also tried resolving the issue by making changes and adjustments to the WAF and DDoS settings, but unfortunately, it had no effect, and the rules are not being applied.

4

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.