Essentially off is, well, not quite off. Very bad scores will hit it
#Client is getting a managed challenge even though request is legitimate. Cannot tell why.
gleaming hinge
If the DNS record isn't proxied then nothing Cloudflare does will take effect since the traffic won't go through Cloudflare.
Depends if the R2 team have a security level set on that zone.
It's not an "are you a bot" check, it's if that IP is the source of abuse.
The threat score measures IP reputation across Cloudflare services. This score is calculated based on Project Honeypot, external public IP information, as well as internal threat intelligence from our WAF managed rules and DDoS.