Drupal Bots, scrapers, and proxies: defending Drupal sites in an automated internet Bots are over half of web traffic. Here is the layered defence I use to keep Drupal sites running - companion to my DrupalSouth Wellington 2026 talk.
Cloudflare Analyzing Cloudflare Logs (formally ELS) with the command line If you have an enterprise zone with Cloudflare, there is the ability to request the raw request logs using 'Cloudflare Logs' (formally called Enterprise Log Share or ELS for short).
Drupal Custom Cloudflare WAF rules that every Drupal site should run This blog post helps to summarise some of the default rules I will deploy to every Drupal (7 or 8) site as a base line.