Configure Cloudflare To Resolve A WordPress Error

Our client created a new rule in Cloudflare so that their company's location would bypass Super Bot Fight mode and other rules. After he set it up, he noticed an error in the WordPress Dashboard:

"WordPress.com requests to your site are being blocked, usually by a firewall or security rule. See Site Health for details and next steps."

I've tried troubleshooting but can't seem to fix it. I've also had our hosting support at Flywheel allow list XML-RPC.

The client would also like to find a way to keep the site up and running without Under Attack mode enabled. Every time we've turned it off in the past, the site gets overwhelmed with bots and crashes. I've blocked a handful of countries the bots seem to originate from, but I'm not sure how else we can configure Cloudflare without Under Attack mode.