Today, I've had a massive 'bot visit' now for 1 hour - with several of hundreds hits to /bot-traffic.icu - which of course does not exist.
They seem to come from a source with the same name (bot-traffic.icu).
I know others have had the same issue with the same bot and also with trafficbot.live.
I've been in touch with Shopify Support, but as usual there is not really much understanding there.
Is there anyway I can block these bots? I know I can exclude them (or try to...) in Google Analytics, and I know I can try to prevent them from going throug checkout - but I just want to completely blok access to my shop.
I really do dot want yet another app running to do this, but as I cannot control it server side myself - do you have any ideas on how to handle this?
You're absolutely correct in that there's no server side way to block bots or visitors based on their website of origin.
However Blockade does offer that functionality on the client side. We do a reverse DNS lookup on each IP address and run it by your blocked websites list.
If the IP address is associated with a blocked website, they will be redirected away from your store.
This is a premium feature in the app, but it's just $5 per month.
I haven't googled the IP but Shopify shows IP's and one we checked was 2000 miles away lol. Yeah the inventory gets immediately pulled out of stock and added to cart and then ordered. It happened in under 2 minutes today and we had to manually cancel a bunch of sales and take the product offline. Shopify should offer protection for this but they don't unless you use Shopify Plus and that is not affordable at our level. There's a third party app but they charge .5% of your total revenue each month LMAO. So yeah, this is a problem that no one wants to fix I guess.