Skip to main content

DDoS protection

What is a DDoS attack?

A Denial-of-service (DoS) attack is a cyber-attack in which the perpetrator makes a machine or network resource unavailable to its intended users by disrupting services of a host connected to the internet. This is typically accomplished by flooding the target with superfluous requests in an attempt to overload the system and prevent legitimate requests from being fulfilled. A distributed denial-of-service (DDoS) attack does this using multiple compromised systems as sources of attack traffic.

Can Testomato trigger DDoS protection?

Yes. Testomatobot accesses checked websites very frequently — for example, every minute — and depending on your project settings, may download multiple URLs from the same website simultaneously. This pattern of behaviour can resemble a DDoS attack and may trigger automated protections on your server or hosting provider.

note

Since all Testomato servers use fixed IP addresses, you can avoid this by whitelisting those addresses in your firewall.

info

For a full list of Testomatobot IP addresses, see testomato.com/bot.

Cloudflare Access denied (Error 1020)

Cloudflare may block Testomatobot and return an Access denied (Error 1020) response, as it can mistake monitoring traffic for data scraping.

Cloudflare Error 1020 access denied screen

Error 1020 means that Testomatobot has been blocked by a Cloudflare Firewall Rule. To resolve this, you will need to update your Cloudflare firewall settings to allow Testomato's IP addresses through.

How to fix Error 1020

  1. Log in to the Cloudflare Dashboard.
  2. Temporarily pause Cloudflare on your site.
  3. Go to the Firewall page.
  4. Search for the RAY ID or Testomato IP addresses in Firewall Events to identify the blocking rule.
  5. Update the rule to allow Testomatobot through, or add Testomato's IP addresses to your allowlist.

Further reading