Skip to main content

Limit Orders Per IP

Category: Security  ·  Type: Free first-party

Cap how many orders a single IP address can place in a given time window. Stops bots and spammers without affecting real customers.

🎬 Video

Why install

When you run paid ads, scrapers and bots will hit your checkout repeatedly. Each fake order costs you a courier round-trip + your team's call-confirm time.

This add-on caps per-IP orders to a sane number (e.g. 3 per 24 hours). Real customers never hit the cap; bots get blocked.

Features

  • Configurable threshold (e.g. 3 orders / 24 hours per IP)
  • Configurable window (15 min, 1 hour, 24 hours, 7 days)
  • Whitelist IPs (your office, dev machines)
  • Blocked-attempts log (visible in dashboard)
  • Per-store rules

How to use

  1. Install + activate from Dashboard → Add-ons → Limit Orders Per IP.
  2. Settings → Limit Orders Per IP:
    • Max orders: e.g. 3
    • Window: e.g. 24 hours
    • Whitelist: your IP(s)
  3. Save.

What blocked customers see

"Too many orders from this IP. Try again in X hours."

If a real customer hits this (e.g. shared corporate IP), they email support and you whitelist them.

Combining with other security

  • Captcha Protection — blocks bots at form-submit
  • This add-on — blocks repeat order spam

The two work together — captcha stops the bot from submitting; if it bypasses captcha somehow, IP limit stops repeat attempts.

Frequently asked

Q: Will this affect customers behind shared IPs (NAT, mobile networks)? A: Possibly. Set the threshold loose enough (e.g. 5/24h) that legitimate shared-IP traffic isn't caught.

Q: Is the IP captured the customer's true IP or the courier's? A: True customer IP — we capture at order-submit on the storefront, not at courier hand-off.