WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture...
How can I stop bots consuming resources without blocking genuine visitors?
Start with the access logs: look for frequent requests to the same URLs, repeated searches or login attempts, and unusual traffic increases. Do not automatically block visitors based only on a bot’s declared name or an IP address’s country; neither is sufficient evidence on its own.
If a web application firewall or rate-limiting rules are available, apply restrictions to the affected routes first and monitor the results. Test forms, logins and checkout after each change. A robots.txt file gives instructions to cooperative bots, but does not enforce access restrictions. For persistent traffic, send your support team the relevant time periods and log examples, without passwords or unnecessary personal data.
