doesn't trigger in WAF rules

I’m having problems with bad bots at my site. They don’t obey the robots.txt file, and they click on affiliate ads. Pretty much all of the bots use a hostname with this structure:

I’ve added a WAF rule in Cloudflare for my domain, that should block these requests:
( contains “”)

But for some reason, this rule doesn’t trigger. I still get these bots, but I don’t understand why. Is it not possible to block by

I think they use too many different IPs for me to block them by IP Source Address. is your hostname, not the source host name. If you want to block all traffic coming from AWS you can use an expression like this:

(ip.geoip.asnum in {16509} and not

Thank you. Now I understand. :+1:

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.