According to Cloudflare, “Bot Fight Mode is a simple, free product that helps detect and mitigate bot traffic on your domain”. It attempts to identify traffic from bots that are absent from Cloudflare’s good-bot list, and – unfortunately does not block them, but rather issues “computationally expensive” challenges to make them expend time and resources before moving forward with their potentially nefarious mission.
I can see the resulting actions by going to Security > Events in the CF dashboard. For example:
In this case a bot was attempting to access wp-cron using what looks to me like a suspicious query string. A bot has no business messing with my scheduled actions. Stay out of my cron, bot!
CF also offers Super Bot Fight Mode, but ya gotta pay for it.
