We are getting cloudflare security access captcha check often since Monday

  • Profile Image
    Asked on February 11, 2016 at 02:15 AM

    I have visited the http://www.projecthoneypot.org/search_ip.php link and checked our IP address  and it is not listed.  I have also white listed our IP with projecthoneypot and we are still getting the security checks often.

    We are a small office sitting behind a firewall (linux) using a http proxy to access the web and all PCs (all using windows 10) are effected. We normally use Firefox as our default browser and have also tested with Microsoft Edge  (even with virus software disabled) and we still receive the challenge every 20 mins or so.

    We are able to access jotform from offsite without issue.

    To the best of my knowledge no changes have been made to our firewall. modem or network and the problem has only started this recent Monday past.

    We have checked that out virus software is upto date and a full scans of all PCs has revealing nothing of interest.

    What can we do to prevent these challenges from continually popping up?

  • Profile Image
    Answered on February 11, 2016 at 08:54 AM

    I believe you already opened a thread about this earlier. I see that my colleague, Victor, already responded to that thread, you may refer to that thread instead for follow-ups and questions. 

    Thank you.

  • Profile Image
    Answered on February 15, 2016 at 09:10 PM

    A Second thread? I can not see the second thread in "My Questions" (can only see that thread through your provided link). Probably created a duplicate post (sorry about that) due to a problem with disabled scripts or related to our issue with having to answer captcha and redo data entry.

    Irrespectively, the response on the other thread missed the point.

    Our IT team did look into it (that'd be me) and indictaed that no changes had occured to modem/firewall/network in recent history. The issue is that it looks like out office IP is being effected by the honeypot security measure, although we could not find a listing for our IP.  Just in case, we have added a white listing at projecthoneypot and although it was accepted almost immediately it had no impact.

    Now, fours days later the problem has magically stopped occurring (at least for today).

    Problem is effectively solved but I am concerned that it may happen again.

  • Profile Image
    Answered on February 16, 2016 at 04:42 AM

    May we know when does the captcha security check happens? Does that happen when you fill out your form using its direct link? Or is it embedded on your website and you are submitting from there? If it happens outside JotForm, I believe this is more related on how your network connection or security is setup. 

    If it happens every time you're in our domain (JotForm.com), then I believe it is something related to your browser using proxies. Our back-end system or at least the security check we are using might be seeing your proxies suspicious which why it is triggering the captcha.

    However, yesterday, my other colleagues were having issues related to their sessions expiring within our domain, I believe it is somehow related to that but it was fixed by our back-end team immediately.

    If you experienced the problem again, please do provide us more details on what instances it happens so that we can better investigate it. Thank you.

  • Profile Image
    Answered on February 22, 2016 at 08:11 PM

    Apologies for late response, I have been out of office. Thanks very much for your response.

    The Captcha check was happening just accessing the JotForm site (particularly during login and then at random approx every 20 minutes or so during general usage [loading, editing, using forms]).  It has stopped happening since about 16/17 Feb which might mean it was fixed by your back-end team fixing their issue.

    We are using a proxy service here but no changes to it or firewall have occurred for some time. I did visit and check if our IP was listed as suspicious by the sites listed by Honeypot. and it appeared to be clean. I did experiment with cleaning out caches which seemed to have no effect. I also whitelisted our proxies IP at Honeypot but that had no immediate effect (but may have come into effect the next day or two).

    Anyway, the problem has resolved for now. Thanks again for your response. If the problem occurs again I will raise it again earlier.

  • Profile Image
    Answered on February 23, 2016 at 01:14 AM

    No worries, and thank you for updating us, we appreciate it. I'm glad everything is good in your end now. Should you need our assistance again, please do feel free to open a new thread here in the forum.