diff --git a/public/.htaccess b/public/.htaccess
index 534d4ca..d63f6f7 100644
--- a/public/.htaccess
+++ b/public/.htaccess
@@ -1,4 +1,11 @@
 RewriteEngine On
+
+# Block known spam/probe queries on the root URL -> 404
+RewriteCond %{REQUEST_URI} ^/$
+RewriteCond %{QUERY_STRING} ^post_type=wfacp_checkout$ [OR]
+RewriteCond %{QUERY_STRING} ^rest_route
+RewriteRule ^$ - [R=404,L]
+
 # The following rule allows authentication to work with fast-cgi
 RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
 # The following rule tells Apache that if the requested filename