Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hey guys,

I have reason to believe there is something not right with your cloudflare rules. A lot of our users reported not being able to log-in anymore, because they receive this error:

{“error”:{“code”:“400”,“details”:{“ruleId”:“12fdsf44-abu”},“message”:“Blocked”,“reason”:“Request has been marked as malicious.“,”status”:“Bad Request”}}

Upon more analysis, it seems like it only happens to certain IP ranges, especially internal work network ones, and VPNs. Can you shed more light about what this rule: 12fdsf44-abu does? And can you advise on what we should do to unblock our users? thanks

For such urgent topics, please always create a ticket through the Ory Console support page, as that will also trigger on-call staff.