Common cause
A visitor has submitted requests at a rate that exceeds the threshold configured in the website’s Cloudflare Rate Limiting rules.
Rate limiting protects login endpoints, checkout pages, and APIs from credential-stuffing attacks and brute-force tools.
Resolution:
If you are a visitor:
- Wait for the rate-limiting block window to expire (typically between 1 and 15 minutes) before attempting further requests.
- Turn off aggressive browser refresh scripts or background scrapers.
If you are the website owner:
- Review your rules under Security > WAF > Rate limiting rules.
- Check if the request threshold is set too low for legitimate users who browse multiple pages rapidly, and consider excluding static assets from rate limiting.
Source: Cloudflare Documentation - Troubleshooting Cloudflare 1XXX errors (Error 1015)