How to block sh*tty bots registering/accessing my wordpress website?

[taniya]

Hello,

I have shopperpress installed and im getting loads of bots registering on my website, generating fake traffic.

How can i end this? I googled it but those solutions didnt stop the problem.

If someone can help, it would be great.

thanks

 

[TZ2011]

What you googled ? What solutions you tried ?

- Do you need to have opened registrations to site ? If not, turn them off in admin panel.
- Same thing for comments - if you don't use it like blog and you don't want comments on your products or whatever you are doing on site, in admin panel are options to disable comments.
- Check this post, install that script like explained, it will stop bunch of bots. Put email credentials to receive logs of traffic, see what bots are passing protection and add them on bot list. For few days you will eliminate them.

 

[asiavirtualsolution]

I use a tool called Spyder Spanker to stop all bad bots automatically and also able to manually block them by agent name- Just Search for Spyder Spanker on Google.

 

[rans333]

Cool advice, will try it also

 

[blackberry]

Just us htaccess for this. I use it personally and blocks almost all spam registrations.
If your interested, reply to the thread and i will post the code here.

 

[taniya]

Just us htaccess for this. I use it personally and blocks almost all spam registrations.
If your interested, reply to the thread and i will post the code here.

yes, please paste your code here...



Rep+ added to all who replied.

thanks....will try everything

 

[TZ2011]

Look for Perishable 5g Firewall, set of rules and directives for .htaccess . Similar thing will do BulletProof Security wp plugin, free in wordpress repository. Prevents and harden against most of the web application hacks, sql/xss/rfi/lfi etc

 

[verilix]

What exactly did you try searching for?

 

[blackberry]

Here are a few examples:

# END spammers and trolls
# This example demands you manually add and block spammers etc by IP address
order allow,deny
deny from {IP ADDRESS}
deny from {SECOND IP ADDRESS ONE PER LINE}
deny from {YOU CAN ALSO USE DOMAIN NAME trollhostname.com}
allow from all
# END spammers and trolls


another way to do it is:

#This way blocks automated registrations if people did not come to your site directly
RewriteEngine On
RewriteCond %{REQUEST_METHOD} POST
RewriteCond %{HTTP_REFERER} !^http://www.urltoyoursite.com [NC]
RewriteRule .* - [F]
# END

another way is:

# With this example if the referrer is blank it stops them registering etc. Most spammers remove the referrer
RewriteEngine On
RewriteCond %{REQUEST_METHOD} POST
RewriteCond %{HTTP_USER_AGENT} ^$
RewriteRule .* - [F]
# END Block blank referrer


There are more but these examples should help you get started.