Has anyone seen this in there customer lists?

[fwood2]

I haven't posted in so long I had to make a new ID but I did so because I am stumped.

This is happening with one of my Zencart installations. v1.54. I have blocked IPs. I have all the should_be_empty changed to an unfathomable string and the script (I assume) is adapting.
Some of the IP addresses are resolving to nothing in a DNS check (I suppose maybe a proxy could do that but I thought it would at least resolve to the proxy site).

Has anyone addressed this successfully?

[fwood2]

Okay so maybe I haven't blocked enough and I will update this if it works. Seems like "some" were Kyvistar, so I blocked them at the root and see what is happening.

Here is a list if someone needs them


deny from 109.162.0.0/17
deny from 134.249.0.0/16
deny from 176.8.0.0/16
deny from 178.137.0.0/16
deny from 188.163.0.0/17
deny from 193.41.60.0/22
deny from 37.115.0.0/16
deny from 37.229.0.0/16
deny from 46.118.0.0/15
deny from 46.185.0.0/17
deny from 46.211.0.0/16
deny from 5.248.0.0/16
deny from 81.23.16.0/20
deny from 94.153.0.0/16
deny from 2a02:2378::/32

[fwood2]

Did NOT work

[Maynards]

Did NOT work

I have a list also but mine is different than yours and I still get them also. All from Russia.