Hi @sorinv, we have seen a few customers wanting to stop these hits lately.
You could absolutely remove Facebook’s fully allowlisted status using the checkbox in Wordfence > All Options > Firewall Options > Advanced Firewall Options > Allowlisted Services. Unchecking Facebook would ensure Wordfence fully throttles Facebook, but removal can lead to issues with how content from your website displays on Facebook when it is shared etc.
If you’d prefer not to uncheck Facebook altogether, you could try adding a crawl delay to your robots.txt file instead of blocking the IP: https://developers.facebook.com/docs/sharing/bot/
Real Facebook crawlers should respect the crawl delay to automatically throttle themselves on your site, which may reduce the amount of data they’re using up on your site.
Thanks,
Peter.
