Super Bot Fight Mode not preventing bots

Website, Application, Performance Security
1

What is the name of the domain?

thelimbic.com

What is the issue you’re encountering

After enabling Super Bot Fight Mode and switching ‘Definitely automated’->Block we unnamed bots are still able to make dozens of requests per second to our site and cause it to go down temporarily

What steps have you taken to resolve the issue?

We’ve enabled Super Bot Fight Mode and switching ‘Definitely automated’
After there was an outage on our server, looked at http access logs of the time and noted that a single ip address made hundreds of requests to the server within a short period of time at the time of the outage
Checked cloudflare WAF and noticed that it was not flagged at the time

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full

2

Hello,

By reviewing your configuration, Cloudflare Managed Ruleset is disabled.

Could you kindly enable the WAF rule ? It will help you to mitigate from attacks.

For further information, kindly review this document : WAF Managed Rules

2 Likes
3

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.