Assistance Needed: High Bot Traffic Issue on sonsof1776.com

What is the name of the domain?

What is the error message?

There is no explicit error message displayed, but we have observed a significant increase in bot traffic in Cloudflare analytics and received notifications regarding unusual activity. This is despite having Bot Fight Mode enabled, and it is affecting website performance.

What is the issue you’re encountering

We are experiencing a recurring increase in bot traffic to our website, sonsof1776.com, even after enabling Cloudflare’s Bot Fight Mode on Medium. While the bot traffic initially reduced, it has spiked again within a week, affecting the website’s performance and security. We need help understanding why this is happening and how to prevent it permanently.

What steps have you taken to resolve the issue?

Bot Fight Mode enabled on Medium

Was the site working with SSL prior to adding it to Cloudflare?

No

What is the current SSL/TLS setting?

Off

What are the steps to reproduce the issue?

I am writing to report a recurring issue with high bot traffic on our website, sonsof1776.com, despite enabling Bot Fight Mode in Cloudflare.

Previously, we received a notification about increased bot traffic, and in response, we enabled Bot Fight Mode on Medium as per Cloudflare’s recommendation. After this change, the bot traffic appeared to reduce temporarily. However, we have again received a notification this week indicating a significant spike in bot traffic.

We are concerned about the following:

Why is this happening again? After enabling Bot Fight Mode, why is new bot traffic bypassing the protections?
Do we need stricter settings? Should Bot Fight Mode be set to High, or are there additional rules we should configure to block or challenge these bots?
Origin of the Traffic: Can you help us analyze where this new traffic is coming from (e.g., IPs, countries, or specific URLs)?
We have attached images for your reference:

Bot Fight Mode status (Medium setting).
Current bot traffic metrics showing the increase.
Please advise on the best way to resolve this issue permanently. If additional configurations, such as custom firewall rules or rate limiting, are required, your guidance would be greatly appreciated.

Screenshot of the error

Currently your apex domain and www are not proxied so requests to those do not pass through your Cloudflare account and settings and instead go direct to your host, WP Engine (who also use Cloudflare).
https://cf.sjr.dev/tools/check?ee0dd983595142ed90007436bad326ce#dns

To proxy records for WPEngine, follow this guide…

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.