Blocked Sorry, your request is a suscipious threat to the website and blocked by the defense system. Please contact the system administrator to whitelist your access if it is a false positive. Your request id is ac11000117277411084483368e1733

Hi Lewis Lee,

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

Can you please confirm if you are accessing the website from an Azure Virtual Machine or from a physical/local machine?

If you are using an Azure Virtual Machine, could you provide details on the operating system and any additional security configurations (like Azure Defender) in place?

Are you experiencing this issue across different machines or only on a specific environment (e.g., a virtual machine, local desktop, etc.)?

Hi Sai Krishna Katakam,
accessing the website from an Azure Virtual Machine

I have created more than ten VM from the same gallery image and only one out of 10 experienced this. Firefox and edge both returned the same error.

Additional information the VM is created by the same image, and same script with identical NIC, PIP, NSG creation method through the same scripts.

So there's nothing to do with the scripts for sure.

In addition, the same issue occurred in the second day I created another 10 VMs with the same script.

But the funny thing is, say the 5th VM is experienced the blocking issue yesterday, it was the 2nd VM experienced the block today. But there's no interdependences between each of them. weird!

Hi Lewis Lee,

The issue might be related to security configurations or network traffic patterns affecting certain Azure VMs randomly. Even though you're using the same gallery image and script, some VMs could be flagged incorrectly due to network security settings or Azure services like Web Application Firewall (WAF) or Microsoft Defender for Cloud.

Here’s what you can do:

Check the Network Security Group (NSG) logs to see if any specific traffic from those VMs is being blocked.

If you're using a Web Application Firewall, look at its logs and adjust any rules that might be causing false positives.

Verify that DNS and network routing are consistent across all VMs.

Review any security extensions (like antivirus or Defender) that might be blocking the website access based on periodic updates.

Refer to these Microsoft resources for detailed guidance:
Network Security Groups
Microsoft Defender for Cloud

If you have any further queries, do let us know. If the comment is helpful, please click "Upvote".

Hi Lewis Lee,

Just checking in to see if you had a chance to review my comment on your question. Please let us know if it was helpful and feel free to reach out if you have any further queries.

If you found the information useful, please click "Upvote" on the post to let us know.

Thank You.

The blocking happened since the first browser open and the first visit to that site, which prior to any pattern produced I believe. So I'm not sure if that's the scenario you mentioned. But to me... it's definitely not that complicated before the VM being blocked.