Bot fight mode blocking Bing Bot

[munchkinmindersirela]

What is the name of the domain?

example.com

What is the error number?

None

What is the error message?

None

What is the issue you’re encountering

AS8075 is blocked by bot fight mode

What steps have you taken to resolve the issue?

I tried to add the ASN to a WAF rule but it seems bot fight mode takes precedence over WAF rules:

(cf.verified_bot_category eq “AI Crawler” and not ip.geoip.asnum in {15169 139190 8075 396982 20940 13335 4113 19551 36040 32934 63293 30148 16509 5466 15502 396982 8075})

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full

What are the steps to reproduce the issue?

Turn on bot fight mode on an Irish website and see several blocked attempts from AS8075.

Screenshot of the error

[dmartin1]

You can skip bot fight mode with custom WAF rules.

Other than that all requests pass through bot fight mode before the WAF so the behavior you have shared seems expected.

Which rule works first: Bots Fight Mode or custom WAP rules?

Bot Fight Mode should be running first, and as such, your custom WAF rules shouldn’t ever see a bot that has been blocked by Bot Fight Mode .

[munchkinmindersirela]

If I skip bot fight mode, does that mean that all bots will be able to access the site? Or that my WAF rules will filter first (allowing the bing bot for example) and then bot fight mode will kick in and block the unwanted bots?

[munchkinmindersirela]

Sorry, I’m a total cloudflare newbie. I have found where to skip but I have managed challenges/block actions in these rules. How do I structure this to skip bot mode? Do I make a custom rule and put it in first position with skip as the action? My current rules would then follow offering managed challenges to specific traffic and blocking unknown bots. And then I imagine bot mode would kick in after these rules?

[cscharff]

What makes you think these are Bing bot requests? aSN is not how it is identified.

https://www.bing.com/webmasters/help/how-to-verify-bingbot-3905dc26

[munchkinmindersirela]

Oh! I didnt know that. I googled different ASNs to identify what they were and AS8075 seemed like an important one to allow for indexing purposes from what I had read. Other posts on this forum had labelled it a bing bot.

I can’t try out the link you posted at the moment but will check it this evening against my traffic.

[munchkinmindersirela]

Oh, you were right! The IP address is flagged as malicious. I guess I’ll just leave things as they are in this case. Thanks for sharing the link and info with me.