Where to check blocked HTTP requests logs?
I have an issue that HTTP requests by PowerShell Invoke-WebRequest fail randomly, most is failure.
I used Wireshark to capture packats then found the TLS handshake and HTTPS handshake are finished and connection will get nothing returned after sending Application Data.
Any idea about to check if it was blocked by Cloudflare?
For browser and curl on Linux, the requests work properly.
2 Replies
This is captured traffic file
it's hard to tell what happened based on the pcap because the HTTP traffic is encrypted. but if Cloudflare blocked it, it would be showing up in Security > Events.
Add a filter for your IPv6 address from the pcap and see if any Blocked entries show up.
Most likely since you were doing it from Invoke-WebRequest, it was classified as bot/automated traffic and blocked.