This is ridiculous! - AASA-Bot/1.0.0 Requests gets blocked

Website, Application, Performance
1 
*{**

**"action"** **:** **"managed_challenge"** **,**

**"clientASNDescription"** **:** **"AMAZON-02"** **,**

**"clientAsn"** **:** **"16509"** **,**

**"clientCountryName"** **:** **"IE"** **,**

**"clientIP"** **:** **"18.202.189.68"** **,**

**"clientRequestHTTPHost"** **:** **"www.gizi.site"** **,**

**"clientRequestHTTPMethodName"** **:** **"GET"** **,**

**"clientRequestHTTPProtocol"** **:** **"HTTP/1.1"** **,**

**"clientRequestPath"** **:** **"/apple-app-site-association"** **,**

**"clientRequestQuery"** **:** **""** **,**

**"datetime"** **:** **"2023-07-12T06:49:20Z"** **,**

**"rayName"** **:** **"7e57587ccd531b7a"** **,**

**"ruleId"** **:** **"bot_fight_mode"** **,**

**"rulesetId"** **:** **""** **,**

**"source"** **:** **"botFight"** **,**

**"userAgent"** **:** **"AASA-Bot/1.0.0"** **,**

**"matchIndex"** **:** **0****,**

**"metadata"** **: [],**

**"sampleInterval"** **:** **1**

**}**
3

Hi there,

Please check this document to see how you can “Skip” Cloudflare’s WAF/Super Bot Fight Mode security.

Thank you.

2 Likes
4

It doesn’t work. I had setup the skip rules.
(http.request.uri.path contains “/apple-app-site-association”) or (http.request.uri.path contains “/.well-known/apple-app-site-association”) to skip, but still goes to bot fight

{

“action” : “managed_challenge” ,

“clientASNDescription” : “AMAZON-02” ,

“clientAsn” : “16509” ,

“clientCountryName” : “US” ,

“clientIP” : “52.9.188.236” ,

“clientRequestHTTPHost” : “gizi.site:443” ,

“clientRequestHTTPMethodName” : “GET” ,

“clientRequestHTTPProtocol” : “HTTP/1.1” ,

“clientRequestPath” : “/.well-known/apple-app-site-association” ,

“clientRequestQuery” : “” ,

“datetime” : “2023-07-18T14:25:21Z” ,

“rayName” : “7e8b64ba4fa5d021” ,

“ruleId” : “bot_fight_mode” ,

“rulesetId” : “” ,

“source” : “botFight” ,

“userAgent” : “node-superagent/1.3.0” ,

“matchIndex” : 0**,**

“metadata” : [],

“sampleInterval” : 1

}

5

Note that Bot Fight Mode

For more granular control - including the ability to use the Skip action for bot mitigation - consider using Super Bot Fight Mode.