Hello Bob,

If there is some specific IP that is causing much load - then you can ban it. Blocking one IP should not cause issues for many customers.

The main problem is that Cloudflare works at www.yourdomain.com. Bots still can access the server directly via yourdomain.com link.

I suggest you creating a robots.txt file in your public_html folder and blocking all bots except of those you'd like to visit your website.

For example, to allow only bots from Google, Yahoo and MSN visiting your website, you can create a robots.txt file with following contents:

User-agent: googlebot
Disallow:

User-agent: Slurp
Disallow:

User-agent: msnbot
Disallow:

User-agent: *
Disallow: /
Also, you should be able to see in stats what exact file is usually accessed by bots. If it is something like login.php being attacked by bad bots, we can provide you with instructions to rename that file properly. Please open a support ticket for this.