Legitimate Traffic's IP Being Blocked

What is the name of the domain?

islandpress.com

What is the error message?

Sorry, IP address ********** has been banned

What is the issue you’re encountering

Hello - There are people within my organization that periodically getting blocked from accessing our website(“Sorry, IP address ********** has been banned.”). After some digging the IP addresses that are coming up in the error are Cloudflare in origin but the source user IP is unchanged and local. I tried setting up a rule to skip WAF components if the IP is US in origin but it hasn’t worked. Does an

What steps have you taken to resolve the issue?

I have added a WAF rule to skip checking on US based IP addresses. We currently have another rule in place to block attacks from China.

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full

What are the steps to reproduce the issue?

Someone in my organization will periodically be banned from accessing the site. I am unsure if it applies outside the org as well, I would assume so.

The domain is not using Cloudflare…
https://cf.sjr.dev/tools/check?96e2146f473d420b9582717d2bbaa351#whois

1 Like

I meant to say it’s islandpress.org

Sorry about that.

Check your security event log for the requests that are blocked which will give you the reason. You can then configure custom WAF rules as required to allow those requests…
https://dash.cloudflare.com/?to=/:account/:zone/security/events

2 Likes

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.