These days I had a problem to add my instance at Discover and this was the reason:
Everytime that I enable this function bot was blocked some chance report this false-positive to cloudflare?
If you know the IP of the requests you should be able to add a Cloudflare rule to let them through.
Not enough to tier free I had to disable this mode for Discourse Hub gets my instance infos but I needs to enable this every time that I receiving DDos