Traffic spike, is it an attack?

[user5994]

Hi,

today at 8 a.m. we had a traffic spike. very unusual and significant compared to baseline, it made our Rails app slow and crush on some requests.

Is this some kind of attack? if so, why Cloudflare now protected?

Thank you!

[louise2]

Hi @user5994

Yes, it looks like an attack.

I can see you have several domains in your account, so I can’t see which domain you are referring to here, but I would suggest the following:

1. Security level set to high
2. Activate Bot Fight Mode
   3.Create a rate limiting rule covering your domain.
3. Create custom firewall rules that either block or give a challenge to countries where you do not have customers from.
4. Create custom firewall rules that give a challenge to path’s where you see excessive traffic.