Review writting page accessed by bots not logged in.

I have just recieved 900 of these in one day since yesterday:

[26-Sep-2026 13:06:21 Asia/Tokyo] Request URI: /index.php?main_page=product_reviews_write&cPath=1_33&products_id=637, IP address: 83.99.206.191, Language id 2
#0 ..\includes\modules\pages\product_reviews_write\header_php.php(45): zen_debug_error_handler()
#1 ..\index.php(40): require('...')
--> PHP Warning: Undefined array key "customer_id" in ..\includes\modules\pages\product_reviews_write\header_php.php on line 45.

[26-Sep-2026 13:06:21 Asia/Tokyo] Request URI: /index.php?main_page=product_reviews_write&cPath=1_33&products_id=637, IP address: 83.99.206.191, Language id 2
#0 ..\includes\templates\bootstrap\templates\tpl_product_reviews_write_default.php(83): zen_debug_error_handler()
#1 ..\includes\templates\bootstrap\common\tpl_main_page.php(233): require('...')
#2 ..\index.php(109): require('...')
--> PHP Warning: Undefined array key "customers_firstname" in ..\includes\templates\bootstrap\templates\tpl_product_reviews_write_default.php on line 83.

[26-Sep-2026 13:06:21 Asia/Tokyo] Request URI: /index.php?main_page=product_reviews_write&cPath=1_33&products_id=637, IP address: 83.99.206.191, Language id 2
#0 ..\includes\templates\bootstrap\templates\tpl_product_reviews_write_default.php(83): zen_debug_error_handler()
#1 ..\includes\templates\bootstrap\common\tpl_main_page.php(233): require('...')
#2 ..\index.php(109): require('...')
--> PHP Warning: Undefined array key "customers_lastname" in ..\includes\templates\bootstrap\templates\tpl_product_reviews_write_default.php on line 83.

Looking at file \includes\modules\pages\product_reviews_write\header_php.php There is a test to check if the customer is logged in. When not there should have been a redirect, but looking at those error logs, bots are going through.
The zen_is_logged_in() function seems to fail. The only way I see this possible is through the notifier in the function that allows you to change the result of the function to true.

It is not a big security issue but there is a week point here.
Forgot this: I use ZC v2.2.2, no reviews got through, just Debug logs. No plugin concerning reviews is installed.Each log has a different IP and try to let a review on different products.