I never know what to think of the anonymous views numbers but it never seems to corresponds to Google analytics data in any meaningful way. The last four or so days has brought this into focus because there has been a huge sustained increase in anonymous views which is unusual. It may be coinciden…

When the peak swarm traffic hit, the Bounce rate jumped over 80% - typically this is in the low to mid 20% strata with usual traffic. During the swarm surge I can confirm average engagement timed also dropped dramatically just like your analytics @piffy and there is also a corresponding drop this …

My solution was geoblock all countries no portuguese speaker but still receving high traffic from my country, USA and Germanay I just seem that brazil is the most source for this type of attack so my tentative was failed I’ve 20 members actives but 2M requests for month by rate Unbelievable my in…

In terms of Cloudfalre mitigation what is working for me: Bots Bot fight mode - ON Block AI bots - ON WAF Rules 1) ASN - JS challenge Applied / ASN = 136907 (locations in order of most traffic) Singapore Hong Kong Mexico Anyone such as @piffy check to see if the same ASN is hitting you too.…

I did it and now I back block all countries again with others rules enabled for awhile managed challenge was enough and I seem attack sources slow down [image] Now my rate engajament grow up 131% and rejection down for 16% my guess is Playstore impulsinate so for a while I needs wait a couple we…

WAF RuleNo.2 has crushed the extra traffic using Geo applied JS Challenge Before the ratio was approx - 4:1 Cloudflare:OriginServer Now it’s closer to 1:1 serving These regions were still sending a ton of traffic. Analytics was spitting anomaly alerts and the metrics in analytics were still all…

Challange JS don’t have the same effect as managed, I did almost same applying hotlink blocking to medias and libraries like CSS and JS it just works from referer (openning direct access from tab = blocked) this help me reduce uses of bandwith and CPU.

I will leave JS Challenge in place for some time because so far the CSR (Challenge Solved Rate) = 0% I will experiment with Managed after more traffic is under the bridge and/or the CSR starts to fail. Right now the CF:OS serving ratio is looking like an even tighter 1:1 ratio. Mitigated has take…

Because JS Challange has the same objective but the worst efficiency than ‘Manage Challange’ maybe it is deprecated cause this option not show me a capatcha just discard me as a legit traffic like ‘managed’ does

I found this topic on meta which I think is of deep interest and is probably best served as it’s own topic Cloudflare Security WAF (Web Application Firewall) + Discourse?

Another resource that might be useful - https://radar.cloudflare.com/

Anonieme weergaven plotseling erg hoog

Gemeenschap Gegevens en rapportage

Ed_S (Ed S) 29 november 2025 om 17:19 44

It is an arms race and, as with spammers, I suspect it always will be.

Topic		Antwoorden	Weergaven
Pageviews from Anonymous Users have exploded but Google Analytics showed no traffic growth. How to find about where the increase come from? Data & reporting	23	2462	5 januari 2021
Sudden drop in traffic Community Building	40	4386	15 december 2022
freeCodeCamp.org Discourse is Collapsing from Spammer Scripts Self-hosting	15	5165	3 juli 2020
How can I figure out why I have a big jump in anonymous pageviews Data & reporting	10	1313	9 maart 2022
Traffic Dashboard Stats Feature feedback	30	9145	16 mei 2016

Anonieme weergaven plotseling erg hoog

Gerelateerde topics