I have someone on Russia who has been on my site for like 24 hours now. They have searched things like “0 xor if now says date sleep 15 0 xor z”, if now sysdate sleep 15 0”, and more weird searches.
They are also viewing anywhere from 2-200 pages a minute so I know it’s a bot or hacker. is there any way to get someone off your site or kick an IP off of your site.
I completely appreciate how unsettling it can be to see erratic, bizarre behavior like this on your site. While there is no way of blocking someone from visiting your store, there are certain measures you can take to ensure that visitors do not place any fraudulent orders!
Your best way of doing this is a combination of Shopify’s own fraud analysis algorithm, which cross-references billing and shipping addresses with card details and names, to try to ascertain the credibility of the buyer, your own investigative efforts by using our Fraud Prevention Tips and using the Fraud Filter app.
Another thing you could try doing is ensuring you are manually authorizing your orders, instead of doing it automatically. This will give you the opportunity to have a look at the order to see if anything seems off to you. You could cross-reference with the fraud prevention tips I listed above. You’d change this setting by going to Settings > Payments:
You could then once again place details from the suspicious orders into your Fraud Filter app.
If you’re based in the US, you may also be eligible for our Fraud Protect feature, which is a type of insurance against chargebacks. Only businesses that meet certain criteria are eligible for Fraud Protect. For example, your business must be based in the United States and must use Shopify Payments. If you see a Fraud Protect section on the Shopify Payments page in your Shopify admin, then you are eligible for Fraud Protect.
I hope this all helps, but do let me know if you have any further questions.