The “I’m Under Attack” mode in Cloudflare adds an extra layer of protection for your website during a Distributed Denial of Service (DDoS) attack or other malicious traffic spikes. This mode challenges all visitors with a security check before allowing them to access your site.
Here’s how you can enable this mode through cPanel:
Step 1: Log in to cPanel
- Open your web browser and navigate to your cPanel login page (e.g.,
https://yourdomain.com:2083). - Enter your username and password, then click Log in.
Step 2: Access the Cloudflare Tool
- Scroll down to the Domains section of the cPanel dashboard.
- Click on Cloudflare to open its management interface.
Step 3: Select Your Domain
- In the Cloudflare interface within cPanel, locate the domain for which you want to enable the “I’m Under Attack” mode.
- Click on the domain name or its settings.
Step 4: Enable "I'm Under Attack" Mode
- Look for the Security Settings section in the Cloudflare interface.
- Locate the option for Security Level and select Under Attack.
- This is typically listed alongside other security level options such as Low, Medium, and High.
- Confirm your changes by clicking Save or Apply.
Step 5: Test Your Website
- After enabling the mode, visit your website as a visitor to verify:
- Users are shown an interstitial page with a security challenge (e.g., JavaScript validation or CAPTCHA) before being redirected to the site.
- Legitimate visitors should be able to access your site after passing the security challenge.
Step 6: Monitor Your Traffic
- Use Cloudflare’s analytics within the cPanel integration or log in directly to your Cloudflare dashboard to monitor traffic patterns and ensure threats are being mitigated.
- Look for a reduction in malicious traffic and ensure that genuine users are not overly inconvenienced.
Tips for Using "I'm Under Attack" Mode
- Temporary Usage: Enable this mode only during an attack or when you notice suspicious traffic. Disable it once the attack subsides.
- Check Performance: Some legitimate users may experience a brief delay in accessing your site due to the security check.
- Advanced Features: For more granular control, log in directly to your Cloudflare account and configure additional security settings.
What to Do if "I'm Under Attack" Is Unavailable in cPanel
If the "I'm Under Attack" mode option is not visible in your cPanel:
- Log in to your Cloudflare account at Cloudflare.
- Go to Security > Settings for the relevant domain.
- Set the Security Level to Under Attack from the dropdown menu.
By enabling “I’m Under Attack” mode via cPanel, you can quickly secure your website against malicious traffic while maintaining access for legitimate users.
