Just had my first run in with Cloud Flare

User217

User217

Active Member
Joined
Nov 6, 2007
Messages
58
Reaction score
4
Location
The Willows, Pretoria
I have a static IP address and it got blacklisted at a website protected by Cloudflare for reasons I have don't know. I decided to contact them for a solution. Here is the support I got.

---MESSAGE 1 ----------------

I am sending you this information, because one of your clients ******.com is blocking my IP address through their Cloud Flare service. The error message I get is this:

Error 1008 Ray ID: 322309f731b45657 • 2017-01-16 16:45:37 UTC
Access denied

What happened?
The owner of this website (www.******.com) has banned your IP address (*.*.*.*).

Can someone there help me with this?

I have no idea why this is happening or what I have supposedly do to deserve it! I have a business Internet connection with a static IP address. I cannot change my IP address, even if I want to!

---MESSAGE 2----------------

Thank you for contacting Cloudflare Support. You would need to contact that site owner directly as they are in control of their security levels themselves.

---MESSAGE 3----------------

I know you are only trying your best and I do appreciate it very much. May I suggest that your error messages include some sort of contact details in the future? Right now I have no idea who the owner of the site is! I am being blocked, remember? :-) I have access to no contact details at all, so who do you contact? :-)

---MESSAGE 4----------------

Thank you for your suggestion. We cannot share customer information, as we do take our customers security very seriously.

-------------------

CONCLUSION
If you ever find yourself being blacklisted by Cloud Flare, don't expect any help...
 
gregmcc said:
IP has been blacklisted on the server side.

OP - Try doing a lookup on the domain name and see if there are any contact details.
Click to expand...

Whitelist the IP on the server? XD And also check to make sure this is not a routing bug XD
 
Opting for a static external IP is silly in my opinion.

Unless its forced upon you.
 
User217 said:
I have a static IP address and it got blacklisted at a website protected by Cloudflare for reasons I have don't know. I decided to contact them for a solution. Here is the support I got.

---MESSAGE 1 ----------------

I am sending you this information, because one of your clients ******.com is blocking my IP address through their Cloud Flare service. The error message I get is this:

Error 1008 Ray ID: 322309f731b45657 • 2017-01-16 16:45:37 UTC
Access denied

What happened?
The owner of this website (www.******.com) has banned your IP address (*.*.*.*).

Can someone there help me with this?

I have no idea why this is happening or what I have supposedly do to deserve it! I have a business Internet connection with a static IP address. I cannot change my IP address, even if I want to!

---MESSAGE 2----------------

Thank you for contacting Cloudflare Support. You would need to contact that site owner directly as they are in control of their security levels themselves.

---MESSAGE 3----------------

I know you are only trying your best and I do appreciate it very much. May I suggest that your error messages include some sort of contact details in the future? Right now I have no idea who the owner of the site is! I am being blocked, remember? :-) I have access to no contact details at all, so who do you contact? :-)

---MESSAGE 4----------------

Thank you for your suggestion. We cannot share customer information, as we do take our customers security very seriously.

-------------------

CONCLUSION
If you ever find yourself being blacklisted by Cloud Flare, don't expect any help...
Click to expand...

Opera browser >settings>VPN and choose whatever server you want.

Download the Opera VPN app if accessing from your phone
 
Well they're obviously are not going to give out details of their clients, don't exactly know what you were expecting.
 
not sure what you are raging about exactly.. who in their right mind will sign up with a company that is just going to willy nilly dish out contact details to everyone who asks.. i am sure you love getting all those telemarketers phoning you up and selling you cheap sch!te tablets and smartphones.....

do a whois lookup for the domain.. you should get an email address and possibly a phone number there.. if they did not make their details private.. browse to the site on your phone via mobile data connection.. then look for contact details and ask them whats going on.. or as skye.za said, use Opera browser's VPN connection to access the site and get contact details.
 
Cloudflare includes a firewall option to block unwanted traffic. Off course cloudflare will not reveal the clients data. So your rage should rather point at the website owner who manages his own rules on the cloudflare network. Even if cloudflare wanted to, they wouldn't know why the client has blocked your IP.

As previous posters have mentioned, it's fairly easy to bypass it and to find contact information of the site or owner.

03aa2122b5e7693f4f7d67ee0207b3e5.png
 
domainwhitepages.com <-- lookup the owner details. Even if they're using a privacy proxy, you can email the address and it will forward your message to the website owner.

Your IP address must have shown up in their logs as being malicious for some reason. I would suggest, especially considering that it doesn't look like you are the only person on that IP address, to do a full scan on all computers on your network for virusses and malware. I've found many times that people are unaware that their resources is being used to try and brute-force a wordpress website (or joomla or whatever) and then surprised when their IP was blacklisted.

Also, do a google search of your IP address and see if it's in any known spam/security compromised lists that the website owner may take part of.
 
kerbyross said:
Cloudflare is as good as a free static html content provider with ddos hardened capabilities can be.
Even akamai who does more or less the same thing, dropped one of their customers a while back when the DDOS was too much for too long.

A CDN wont protect you from someone who really wanted to ddos your infrastructure.
Only use them if you are a mom and pop shop and your website serves static html content and you dont mind a database connection being down when your actual host is down.

Servers will go down from time to time and if your website is your bread and butter you should have a dedicated server for it so you dont have your website down because someone else is getting DDOSed on the same server (and any other technical reason for it being down)

And I say dedicated as Ive used virtual hosting providers both local and abroad and the noisy neighbor always gets you bad latency and poor tech support gets your lots of down time, I can name and shame but I wont. I honestly cant choose a local host with VPS offerings who hasnt given me gray hair from time to time for various reasons. You cant go wrong with dedicated and you cant go wrong choosing a local host where you can drive down to them and speak to them if something goes wrong. Heck if you have the money and the technical skills buy your own hardware, build your own machine and co-locate and self manage, that way you know they can only mess with the network, the power and the cooling solution, the rest is your baby to care for.
And if youre new at it, dont worry, spend enough time doing something, you learn alot, no one looks after your baby as well as you do, even if you have to read a few manuals and spend sleepless nights working through an issue, thats how you learn.
Click to expand...

They are more than that! What about it's Universal SSL etc...
 
kerbyross said:
Cloudflare is as good as a free static html content provider with ddos hardened capabilities can be.
Even akamai who does more or less the same thing, dropped one of their customers a while back when the DDOS was too much for too long.

A CDN wont protect you from someone who really wanted to ddos your infrastructure.
Only use them if you are a mom and pop shop and your website serves static html content and you dont mind a database connection being down when your actual host is down.

Servers will go down from time to time and if your website is your bread and butter you should have a dedicated server for it so you dont have your website down because someone else is getting DDOSed on the same server (and any other technical reason for it being down)

And I say dedicated as Ive used virtual hosting providers both local and abroad and the noisy neighbor always gets you bad latency and poor tech support gets your lots of down time, I can name and shame but I wont. I honestly cant choose a local host with VPS offerings who hasnt given me gray hair from time to time for various reasons. You cant go wrong with dedicated and you cant go wrong choosing a local host where you can drive down to them and speak to them if something goes wrong. Heck if you have the money and the technical skills buy your own hardware, build your own machine and co-locate and self manage, that way you know they can only mess with the network, the power and the cooling solution, the rest is your baby to care for.
And if youre new at it, dont worry, spend enough time doing something, you learn alot, no one looks after your baby as well as you do, even if you have to read a few manuals and spend sleepless nights working through an issue, thats how you learn.
Click to expand...

Way to not understand what CloudFlare actually really provides.
 
kerbyross said:
Cloudflare is as good as a free static html content provider with ddos hardened capabilities can be.
Even akamai who does more or less the same thing, dropped one of their customers a while back when the DDOS was too much for too long.

A CDN wont protect you from someone who really wanted to ddos your infrastructure.
Only use them if you are a mom and pop shop and your website serves static html content and you dont mind a database connection being down when your actual host is down.

Servers will go down from time to time and if your website is your bread and butter you should have a dedicated server for it so you dont have your website down because someone else is getting DDOSed on the same server (and any other technical reason for it being down)

And I say dedicated as Ive used virtual hosting providers both local and abroad and the noisy neighbor always gets you bad latency and poor tech support gets your lots of down time, I can name and shame but I wont. I honestly cant choose a local host with VPS offerings who hasnt given me gray hair from time to time for various reasons. You cant go wrong with dedicated and you cant go wrong choosing a local host where you can drive down to them and speak to them if something goes wrong. Heck if you have the money and the technical skills buy your own hardware, build your own machine and co-locate and self manage, that way you know they can only mess with the network, the power and the cooling solution, the rest is your baby to care for.
And if youre new at it, dont worry, spend enough time doing something, you learn alot, no one looks after your baby as well as you do, even if you have to read a few manuals and spend sleepless nights working through an issue, thats how you learn.
Click to expand...

Bwahaha. Had a good laugh now.
 
kerbyross said:
Cloudflare is as good as a free static html content provider with ddos hardened capabilities can be.
Even akamai who does more or less the same thing, dropped one of their customers a while back when the DDOS was too much for too long.

A CDN wont protect you from someone who really wanted to ddos your infrastructure.
Only use them if you are a mom and pop shop and your website serves static html content and you dont mind a database connection being down when your actual host is down.

Servers will go down from time to time and if your website is your bread and butter you should have a dedicated server for it so you dont have your website down because someone else is getting DDOSed on the same server (and any other technical reason for it being down)

And I say dedicated as Ive used virtual hosting providers both local and abroad and the noisy neighbor always gets you bad latency and poor tech support gets your lots of down time, I can name and shame but I wont. I honestly cant choose a local host with VPS offerings who hasnt given me gray hair from time to time for various reasons. You cant go wrong with dedicated and you cant go wrong choosing a local host where you can drive down to them and speak to them if something goes wrong. Heck if you have the money and the technical skills buy your own hardware, build your own machine and co-locate and self manage, that way you know they can only mess with the network, the power and the cooling solution, the rest is your baby to care for.
And if youre new at it, dont worry, spend enough time doing something, you learn alot, no one looks after your baby as well as you do, even if you have to read a few manuals and spend sleepless nights working through an issue, thats how you learn.
Click to expand...

Being on a dedicated server is not going to help against a volumetric DDoS attack to any location on the network.
If your ISP has 20Gbit of connectivity and is being attacked with 300Gbits of data, their connectivity will be saturated and your dedicated server will not accessible.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X