June 24th, 2024

Cloudflare blocking my IP (2023)

The Cloudflare Community discusses a user facing "verify you are human" prompts on Cloudflare-protected sites. Cloudflare advises contacting site owners for resolution, clarifying they don't block IPs. User frustration ensues.

Read original articleLink Icon
Cloudflare blocking my IP (2023)

The Cloudflare Community forum discusses a user experiencing issues accessing websites protected by Cloudflare, facing constant "verify you are human" prompts. Cloudflare suggests contacting the site operators for resolution, as they control what is blocked. The user tried different browsers and devices, confirming the issue persists across all sites using Cloudflare. Changing the IP address temporarily resolved the problem, indicating potential reputation issues with the original IP. Cloudflare clarifies they do not directly block IPs and recommend contacting the site owners for assistance. The user expresses frustration as the problem affects multiple services, seeking Cloudflare's help to whitelist the IP, but Cloudflare reiterates that only site operators can address the issue. Suggestions include contacting the ISP for a new IP or waiting for the situation to resolve itself over time. Ultimately, Cloudflare emphasizes that site owners control access settings and are responsible for managing IP reputations.

Related

Small claims court became Meta's customer service hotline

Small claims court became Meta's customer service hotline

Small claims court is a surprising recourse for Meta users like Ray Palena and Valerie Garza seeking help with account issues. Despite challenges, some have successfully resolved problems independently. Users resort to legal action due to Meta's lack of human customer service support.

We need an evolved robots.txt and regulations to enforce it

We need an evolved robots.txt and regulations to enforce it

In the era of AI, the robots.txt file faces limitations in guiding web crawlers. Proposals advocate for enhanced standards to regulate content indexing, caching, and language model training. Stricter enforcement, including penalties for violators like Perplexity AI, is urged to protect content creators and uphold ethical AI practices.

The prevalence, persistence, and perils of lame delegations (2021)

The prevalence, persistence, and perils of lame delegations (2021)

The Domain Name System (DNS) translates domain names to IP addresses. Lame delegations, causing delays and security risks, stem from unreachable nameservers and misconfigurations. Passive analysis detects issues, with 50% in .BIZ domain.

Why content providers need IPv6

Why content providers need IPv6

Content providers are urged to adopt IPv6 for better services, bypassing ISP translation devices. IPv6 improves user experience, reduces latency, and boosts reliability. Major companies like Google and Netflix are already benefiting from IPv6, pushing ISPs to support its adoption.

Leaking URLs to the Clown

Leaking URLs to the Clown

The author describes leaking URLs during Mac app testing, with a unique URL receiving requests from a random "cloud" service every three hours. This raises privacy concerns and highlights potential risks for users.

Link Icon 12 comments
By @tw04 - 5 months
What a ridiculous response from cloudflare. They absolutely do have the ability to whitelist an IP address, and asking someone to go to every site that’s protected by cloudflare is so stupid that it’s funny they even suggested it.

“Just go ahead and call the site owners of the 750,000 websites you’re currently blocked from accessing.”

By @RadiozRadioz - 5 months
If this isn't a trivial thing to undo, that makes me sceptical of the ability of CloudFlare to manage its own infrastructure. The action of unblocking one IP address, or at minimum triggering a re-evaluation of its reputation, is such an important base piece of functionality - what else can't they manage in their own system? If they can do it, why is it layered behind so much bureaucracy?

And such uncaring dismissal. How completely helpless this must make the user feel.

By @WheatMillington - 5 months
The abdigation of responsibility here on Cloudflare's part is frustrating.
By @trekz - 5 months
Also note, Cloudflare blocks IPs of legitimate automated "good bots" by default, like RSS feed fetchers (1), but allows traffic to some of the most aggressive bots on the web, like Google bot and all sorts of AI bots (2).

(1) https://openrss.org/issue/144

(2) https://radar.cloudflare.com/traffic/verified-bots - GoogleBot, GPTBot, and AmazonBot are some of the first ones listed.

By @ChrisArchitect - 5 months
Any particular reason for the share OP?

Here's another one where the person reached out to their ISP to get a different NAT address as a spammer was messing up their IP rep. https://news.ycombinator.com/item?id=37056810

By @byyll - 5 months
Of course, Cloudflare always tries to put the blame on the website owners which just enable a list Cloudflare provides them. Assuming the author is right, it's Cloudflare's fault for not vetting their data, not the website owner.
By @hollow-moe - 5 months
I'm surprised he could even make that post on their forums, being in the same situation several times before, Cloudflare is obviously dogfooding and you can't even try to get support if their systems blocks you. Smart move.
By @philjackson - 5 months
All of a sudden I'm seeing loads of "are you human" checkboxes from Cloudflare too. One of the better captchas, but I'm not sure why it's a recent thing for me.
By @ChipperShredder - 5 months
This happens to me sometimes too. Basically 95% of web sites require a captcha now. But 95% of the web is garbage so it's really not that bad.
By @Modified3019 - 5 months
So cloudflare added an IP to a blacklist that they curate, which is then offered to it’s many customers to automatically use, and then claims that fixing false positives is out of their hands?

This is some amazingly blatant corporate gaslighting.

By @ricardbejarano - 5 months
So?

Like, I get it, a very vocal minority of HN is very much against Cloudflare for perfectly valid reasons, including this risk.

But the value Cloudflare provides to these sites far outweights the problems. Otherwise they'd dump them.

This guy should do as said and just ask their ISP for another address to NAT from.

I'll get severely downvoted for this tho.