Spam is coming through with IPs attributed to Cloudflare

What is the name of the domain?

What is the issue you’re encountering

Our site’s contact form is getting hammered with spam with IPs attributed to Cloudflare.

What steps have you taken to resolve the issue?

Tightened Cloudflare security to eliminate all but US and Canada.

What are the steps to reproduce the issue?

Not reproducible because it’s the result of outside spammers. The attached image just shows one of the questionable IPs; there are many others.

Screenshot of the error

If a site is proxied, as yours is, connections to your server will all come from Cloudflare…

If you want to see the real client IP address you’ll need to restore visitor IPs…

The most simple way to protect a contact form is to challenge all visitors to that page, or use a captcha.

2 Likes

That makes sense. Thank you!

1 Like

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.