Getting blocked by Cloudflare
 

My new VM is getting blocked by Cloudflare. It’s an Azure vm. How can I get this sorted?

thank you.

cloudflare ray id 9814b3fbecc0d4aa

Are you able to assign a static IP to your access? Sometimes it's possible to whitelist one. If not, then obviously Cloudflare perceives this as potentially a spammer trying to access the site and blocks it, which isn't necessarily something within Internet Brands' control.

If you're using the VM without assigning it's own public IP or other dedicated public IP via a NAT gateway or Azure Firewall, then the source IPs you pick up in Azure from the default internet access that is provided are well used and abused by others. Their reputation is better than the source IPs used by a consumer VPN but not much better. Microsoft are not in a hurry to fix the reputation of the default internet access IPs as they would prefer to rent you your own dedicated public IP.

thanks all. OK I have gone ahead and purchased and assigned a dedicated static ip. can you help me in getting it unblocked? still getting the cloudflare block. thank you.

PM me your CloudFlare RayID and IP address (don't share publicly) and I'll put tech on it

Greeetings from Sri Lanka. It seems that unless I use my own VPN which presents my traffic as coming from my home in the US, I see this:

Sorry, you have been blocked

You are unable to access flyertalk.com

I'm just in a hotel, but the same thing happened during my last trip here and I was in a different hotel. I've run into this before in other c:mad:untries. FlyerTalk is for people who travel. It's a shame that it seems to be blocked here (and other places). ...

I don't recall where in Southeast Asia, however, in January and February, I was unable to access FlyerTalk while connected to several hotels WiFi, however, there was no problem connecting when I used cellular data.

Yea - I've had that too. I d:confused:n't recall where.

It's happened to me in Sri Lanka and Bali. I anticipate it now and enjoy the quiet for the one or two months.

Cloudflare now seems to be blocking the largest ISP in Hong Kong (if not the whole territory). I'm connecting from home on my HKT/Netvigator FTTH with standard dynamic IP.

Is this likely to persist? It's rather annoying to have to bring up a VPN to view the site.


https://cimg3.ibsrv.net/gimg/www.fly...2ca324846f.png

I'm on HKBN and getting the same message. But only when I use Firefox. Using Opera I get the Cloudflare box to check and then I go through.

3HK on Safari also

https://www.flyertalk.com/forum/cath...ssible-hk.html

Same on HKT/CSL network. The message seems to indicate they are blocking by IP origin country, not by ASN.

will there be a fix for Hong Kong based user?

Possible that we slammed down hard on Hong Kong because of a bot attack over the weekend. We're still monitoring the situation.

Just today, I'm having issues with the Cloudflare and nothing has changed since yesterday from my side (didn't clear cookies, change settings, etc....)

When I use my laptop and Firefox like I am now, I always have to click the Cloudflare check box.

On my mobile, I can't even get through using the native Huawei Navigator on HarmonyOS anymore, whereas it always worked fine outside mainland China. I check the box and it just loops and asks me to check it again.

I am based in France and Germany.

Based in Australia and getting the "confirm you're human" checkbox every few minutes. Built-in "Whale" browser on an LG Android phone. Also a "are you sure you want to resubmit?" when I reload a page. It does let me through but it's annoying.

I'm in Argentina and get this several times a day every time I go back into FT.

Today I am getting the human confirmation checkbox. I am on Saipan, Commonwealth of the Northern Mariana Islands (the CNMI 🇺🇳 ), USA, about 120 miles north of Guam in the western Pacific.

Suddenly getting lots of cloudflare challenges here in Tokyo too, nothing has changed - same device, browser, still logged in.

Might be something to do with the bot attack at the weekend that IBJoel acknowledged and resulted in some database errors. Maybe IB techies have had to turn up the protection dial to keep services up and error free?

Same here in Greece. So far this is mildly annoying.

I’m logging in from Norway. I get asked if I’m a robot and then subsequently logs into a very paired down version of the website. With a VPN set to Norway it works.

I'm also now having to tick a box to say I'm a human every time I visit the forum.

Are the bots not able to click that tickbox?

Talked about this in another thread, but we're experiencing what is functionally a DDoS attack, so security settings are heightened for nearly everyone.

From what I understand, modern malicious actor/bot detection generally speaking (i.e. not specifically Cloudflare and/or FT) is a multi-layered approach based on multiple elements of a web request, ranging from things like historical traffic patterns from a particular IP space, down to specific things about the browser, claimed user agent vs. actual indicators, behind-the-scenes Javascript computational challenges, etc. Google search says they can also track things like mouse/pointer movement. So it's not necessarily the binary clicking or not-clicking of the box, which can obviously be done by machines (e.g. even non-maliciously when websites want to do automated QA testing), but how/when the clicking occurs in conjunction with everything else. Also sometimes the background stuff decides it has a strong enough signal that your request is legitimate and the request gets approved without you even having to click on anything at all.

No mouse pointer movement on my iPad with Safari, but maybe it can measure the jitteriness of my index finger while poking at the screen.

In any case, as others I am seeing the Cloudflare screen all the time at the moment,. I am currently traveling in Germany.

Getting the human challenge with every click now on FT. Really annoying. Location, Algarve, fixed network IP.
I'm giving up for today, this makes FT unusable.

In the weekend of the 20th of March I got the cloudflare verification pretty often while in KL running on a global e-sim was fine, using the WiFi at Park Hyatt got a verification ever so often.

Since Thursday 2nd I have been getting a cloudflare verification on almost every single navigational step in Japan using DoCoMo mobile data on Chrome, but also trying from my laptop on the corporate network in the office in Tokyo. Or via the corp vpn from the JAL lounge in Osaka.

Yup, Japan seems heavily affected by this. Have been getting the Cloudflare on my eSIM, TMobile US, and the WiFi of various ICs and CPs. Quite difficult to get anything accomplished.

this cloudflare check is nerveracking. I get it since about 2 weeks very often. just leave the flyertalk page alone, click on a internal forum link after 10 minutes and voila - the check is back requesting to tick the box.
I had it at home in Austria and also at home in Germany.

please get that fixed. it's okay one time a day but not in that frequency.

And with the new constant Cloudflare, there seems to be restrictions on which browsers work. It seems to only like Chrome. Firefox occasionally works, and sometimes it just spins and repeats. And the Huawei Navigator doesn't work at all with Cloudflare, I check it, it reloads, I check it again, it reloads, etc.....

Super annoying stuff, all the time now on Chrome.

Yeah, I mean I can only access it reliably on Chrome. I can't even access FT anymore on my mobile phone's browser.

So there might be a user agent angle on the Cloudflare paranoia. Suggest that subsequent posters please disclose in addition to the usual location / network they're using what device and browsers they usually use that are getting affected by Cloudflare prompts, and if they have easy access to any other browser's whether they're any different....

I use Android nd Chrome mainly, i just logged via Opera Mini, a Cloudflare screen for each step until logged in, then a couple, then no more. The I tried view Edge, Cloudflare until logged in, then nothing.and so far er then nothing on any of the 3 browsers since.

I’ve only just been able to get back in today. Up until this morning I was getting the page where you had to click a box to prove your human, but without that box ever appearing. So it just got stuck on that page forever and I couldn’t get in. Hopefully that’s been permanently fixed now?

Experiencing the same Cloudflare issues since last week, multiple verifications daily, sometimes spinning for a while and then asking me to click to confirm again. Using Safari on macOS in Amsterdam, no VPN on home WiFI.

The strange thing is - I encounter those cloudflare checks on multiple sites - ONLY on flyertalk.com I have to click in the box. Other websites seem to auto detect that I am a human.

I have it on all browsers on MacOS - FireFox, Edge, Safari, Chrome as well as on my iPhone in mobile Safari and mobile Chrome. It seems around 10 minutes of inactivity on Flyertalk it lets you validate again. Very, very annoying.

Firefox, Finland, residential ISP, and I guarantee there are no nasty botnets coming from our tiny northern country...

I get the CloudFlare thing all the time.

Whoever's responsible for FT's CloudFlare config should be replaced with a competent one. Frankly, amateur hour going on here.