Products being added to cart without site view

Hi @smitterer, thanks for getting in touch.

Have you already contacted WooCommerce or taken a look if they offer any add-ons or settings to prevent this kind of interaction, where items are added to cart automatically and abandoned? There might be a non-invasive reCAPTCHA type solution to verify the first item is being added by a human. Only bots from legitimate sources will observe robots.txt generally, so I can see why that method may not have helped in this case.

As bots/humans are getting harder to differentiate, Wordfence looks into the type and intent of any visit. The most likely blocks you’d see are if a bot/script falls foul of your Rate Limiting or Brute Force settings because they’re trying to hit your site too many times in a short period of time. We also have a global blocklist, so any known sources of problematic visits would be blocked too.

Unless you can enforce items to be added to cart by logged-in users (I can see why that might not be desirable), therefore forcing Wordfence’s reCAPTCHA and/or 2FA checks to be completed first it may be difficult to block IPs behaving like this unless they’re known beforehand.

Let us know how you get on,
Peter.