Hi,
HikaShop 6.1.0 now comes with some improvements regarding this, so it is already more effective at preventing bots than before.
Still, there are a few things you can do:
- set the "Frequency of the check for the carts" setting of the HikaShop configuration to the lowest value. This won't prevent carts created by bots, but it will help deleting old carts faster.
- edit the robots.txt file of your website to disallow */product/updatecart/* URLs for bots.
Now, even with all these, it's not a perfect solution. Bots will still try to create carts and it won't clear all the old carts you might have in your database.
If the old carts in the database are a problem at the moment for you, you can empty the hikashop_cart and hikashop_cart_product tables via your PHPMyAdmin. It will clear all the carts on the website at once.
Hopefully, with everything else above in place, it will help avoiding the problem from happening again.