Network attack

What is the name of the domain?

What is the issue you’re encountering

Massive querying of my site with SQL injection in form

What steps have you taken to resolve the issue?

Implementing a security rule on the IP address.

What is the current SSL/TLS setting?

Full

What are the steps to reproduce the issue?

On May 11, 2024, from 1:45 PM to 2:30 PM, I was attacked by the IP address 91.227.62.14 (several hundred thousand queries).
I resolved the problem by blocking this IP address and the associated ASN. BUT why didn’t Cloudflare detect anything?

I have a PRO subscription and I have enabled DDoS and WAF.

Hello, you may want to enable the WAF managed rules to block the sql injection.

thanks, but these rules are already active for my site

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.