I've been having a hard time stopping them recently. All the orders fail and no payments actually go through but it's getting pretty frustrating.
I have Wordfence (which does nothing to help)
I recently started using Cloudflare and it reduced it slightly but I got attacked this evening again. At first it was hundreds of orders.. Tonight was only about 60..
I'm fresh out of ideas. Any suggestions? I do have captcha on the site as well and I can tell whoever is doing this is using a bot to do it.
I've blocked IPs manually in Wordfence but I can't sit around and wait for this to happen every day and night and do not want to play this game of cat and mouse anymore.
Please help!
You can install a reCaptcha plugin:
– [https://wordpress.org/plugins/recaptcha-woo/](https://wordpress.org/plugins/recaptcha-woo/)
– [https://woocommerce.com/products/recaptcha-for-woocommerce/](https://woocommerce.com/products/recaptcha-for-woocommerce/)
In addition to what u/toniyevych mentioned (which I also recommend), you should setup WAF rules in Cloudflare to block unscrupulous country – here’s an example of how to do that: [https://imgur.com/a/2B3sb6X](https://imgur.com/a/2B3sb6X) (don’t worry about the ASN rule).
I’ve found that card testers also prefer low-product-cost style sites, or products where the price is able to be varied to small amounts. If possible, don’t sell those type of products.