Platform
Cloudflare edge block
DataCops catches the bots that look human enough to get past edge protection. On the Organization plan, it hands the repeat offenders back to your Cloudflare, so they are stopped before they reach your site next time.
What it is
You connect your Cloudflare account with one scoped API token. DataCops creates an IP list and a firewall rule in your Cloudflare. Every 10 minutes it adds any IP that showed up as a bot on your site 2 or more times in the last 24 hours. Cloudflare then challenges those IPs (or blocks them, if you choose) for 30 days.Detection and blocking usually live in two separate tools that never talk. DataCops sees the bot on your page, Cloudflare guards the door. The edge block joins them, so what DataCops learns becomes a rule Cloudflare enforces.
Why at the edge
Cloudflare is very good at stopping obvious bad traffic. But some automation is built to look human. It runs a real browser, comes from a clean-looking network and passes the first checks. DataCops catches much of that on the page, by reading the browser and the behaviour behind the visit.
Catching a bot after it lands keeps it out of your reports and your ad platforms. Stopping it at the edge goes one step further: it never loads your pages again, never clicks through your funnel and never fills your forms. That saves server load and keeps junk away from every tool behind Cloudflare, not just DataCops.
How it works
- Connect. You paste a Cloudflare API token with permission for your zone. DataCops creates a managed IP list and one firewall rule that points at it.
- Watch. DataCops scores every visit for bots as usual, using IP intelligence, browser fingerprint and behaviour.
- Pick repeat offenders. Every 10 minutes, DataCops looks at the last 24 hours and finds IPs with 2 or more separate bot visits. One odd visit is not enough. A pattern is.
- Push. New IPs are added to the list in your Cloudflare. The rule applies straight away.
- Expire. After 30 days, each IP is taken off the list again, both in Cloudflare and in DataCops. IPs change hands, so nothing stays blocked forever.
If one run is still going when the next one is due, DataCops simply skips that tick and catches up on the following one, so runs never pile on top of each other.
The rules
| Setting | Value |
|---|---|
| Who goes on the list | An IP with 2 or more bot visits on your site in the last 24 hours. |
| How often it updates | Every 10 minutes. |
| How long an IP stays | 30 days, then it is removed from your Cloudflare automatically. |
| What Cloudflare does | Managed challenge by default. You can switch it to block. |
| Plan | Organization. |
A managed challenge is the safe default. Cloudflare decides how to test the visitor, and a real person who happens to share an IP with a bot can still get through. If you would rather shut the door completely, switch the action to block.
Set it up
- Make sure your site runs through Cloudflare and you are on the DataCops Organization plan.
- In Cloudflare, create an API token scoped to your site's zone, with three permissions: Account Filter Lists Edit, Zone Read and Zone WAF Edit, on your zone only.
- In the DataCops dashboard, open the Cloudflare bot block section and paste the token.
- DataCops creates the IP list and the rule for you. Choose challenge or block.
That is the whole setup. There is nothing to install on your site and no rule to write by hand.
Stay in control
- See every IP. The dashboard lists recently pushed IPs and how many bot visits each one had.
- Unblock one IP. If an address should not be there, remove it with one click. It comes off your Cloudflare list too.
- Change the action. Switch between challenge and block whenever you like.
- Disconnect. Disconnecting removes the list and rule DataCops created, leaving the rest of your Cloudflare setup untouched.
Good to know before you start
- It runs on your Cloudflare. Your site needs to be on Cloudflare for the edge block to apply.
- It updates every 10 minutes. A new repeat bot is on your list within minutes, not hours.
- It is for the Organization plan. Detection and Real people only work on every plan.
- It works with refund evidence. The same bot visits also feed your Google Ads refund evidence export.