403 - access denied
Access denied
If cloudflare is enabled for site is not able to reach wordpress rest api
Setup waf to skip ips was done but still is identified as bot access and connection is blocked. If i turn of cloudare protection it works
If you’re connecting WooCommerce as follows on the article from below:
Seems like you’d need those IPs to allow as well:
52.2.100.140, 34.234.177.217, or 18.185.251.22
May I ask if the above WAF rule from the screenshot is the 1st on the list of Custom WAF Rules? 
Add your origin host/server IP as well to “allow” or “skip” if it’s coming from the origin host/server (WordPress itself).
It knows to happend that Security Level is set to high, or some Bot Fight Mode is blocking.
Kindly, see my post here for help and troubleshooting to figure out which service is triggered in the Security Events and how to prevent it:
This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.