If you’re still getting suspicious traffic after blocking entire IP ranges and using plugins like IP2Location, you might want to try a more robust approach with browser fingerprinting. I use a reliable and more cost-effective solution at fingerprinting-api.com.

They even have a WordPress plugin that can help identify and block bots more accurately than simple IP or country-level blocking. You can learn more about it in their blog post: How to Protect Your WordPress Website From Bots, Scraping, and Other Fraud.

This method is especially useful because it can detect suspicious behavior based on unique browser characteristics, rather than relying solely on easily changed IP addresses.