How do I look up a Cloudflare ID when a customer is blocked by the WAF
A customer reached out to our support to indicate they can't reach our site and they gave us the Cloudflare ID returned to them by the error message. Is there a way in the Cloudflare admin to lookup this specific incident give that ID to see the reason they were blocked?
10 Replies
Under Security -> Events you can filter for a specific Ray ID
You can also filter by Source IP
👍 checking this now...
hmm. it's not appearing.
Does this seem like a valid Ray ID? This is what the customer sent us.
The CloudFareID is: 8b02211dcac85e79
Looks like a RayID to me. On free you only have last 24 hours search though. Was there a screenshot or any other info sent by them?
Yep. Here's the screenshot.
hmm yea looks like a waf block, do you see any events at all in the last 24 hours/ filter by Source IP?
But I don't know the Source IP of the customer
it's visible on the bottom of that page right next to ray id unless they didn't reveal it
Got it.
Thanks.
I'm going to have them try again, and send along that info.
Thanks for your help!
Hi. I got more info from the user. @Chaika
If you are there... or I can make a new post.