setting to block bad bots

Hello there @gerald55

You can harden up the Login Protection and 404s thresholds so the lockouts happen easier.
You can also add some specific blocklist in 404s for URLs that bots are trying to connect and do not exist in first place.

Finally, you can use some geo-location and allow only connections from specific countries (if that doesn’t affect the website’s nature).

Ref: https://premium.wpmudev.org/docs/wpmu-dev-plugins/defender/#firewall

Thank you,
Dimitris