WAF Rules can't stop all spam request

Website, Application, Performance
1

What is the name of the domain?

What is the issue you’re encountering

Hi everyone, I’m currently using Cloudflare (Free plan) to protect my website and have blocked a range of IP addresses via 4 WAF rules . 1-ip range 52.169.0.0/16 2-banned ireland access 3-banned azure8057 4-banned wp folders . as you see lots of requset includes waf rules has had passed the firewall and accessed the server . whats the solution ?

Screenshot of the error

cf.png
cf.png2410×1654 125 KB

2

If you instead filter by “Served by Origin”, do you still get entries?

1 Like
3

Hi .
In some case yes . But in this case no
This story repeat daily and cloudflare can’t stop spam request that are fully matched to waf rules

4

That makes no sense. If it’s served by Cloudflare, then it’s not served by Origin.

1 Like
5

This topic was automatically closed after 15 days. New replies are no longer allowed.