A bot is trying to put through 100s of orders. They are being declined by Braintree, but logging down the site and cause issues for customers.

I tried blocking the ips, that worked for a bit, then they started using random ip's.

For now I shut down the "braintree" method, what else can I do?

try turning on recaptcha for checkout for a short while.
See if that all have the same email address too - they is a way to block that too.
Thanks,
David

Dave it should be on already.



And the emails are as random as the first and last name.

You might put the store in vacation mode for a few hours and see if that chases them away.
Thanks,
David

Thanks, i disabled Braintree and went to Paypal only.

Are they using the same email as you can add this to your includes.php file

$bad_emails=array("test@email.com","test2@email.com","sample@email.tst");

Email addresses have to be in quotes and separated by commas, and you have to be on at least 7.7.4 I believe.

Marshall
CENLYT Productions - ms designs
Affordable Web Design
Custom Ecommerce Designs
Responsive Websites
Cenlyt.com

Thanks, but the emails are as random as the first and last names they have left