I recently suffered 2 credit card attacks on my live site with traffic on the first attack coming from Singapore and on the second it came via the USA from someone in Vietnam.
By card attacks I mean someone added the cheapest item on our site to their basket and then submitted hundreds of payment cards through out checkout triyng to find which were valid. The first attack was circa 800 cards attempted and the second was circa 600 before I got alerts and shut the site down.
We don't sell other than in the UK as we run a Butcher's shop so I thought I'd block all traffic excluding EU and UK. We do sometimes get people pre-ordering from outside the UK if they holiday somewhere in the UK but this is rare.
I've added the following to my .htaccess file but now I'm getting Google, Bing and Facebook Catalogue problems and both Facebook catalogue uploads and SEO is being heavily impacted.
GeoIPEnable On SetEnvIf GEOIP_COUNTRY_CODE UK AllowCountry SetEnvIf GEOIP_CONTINENT_CODE EU AllowCountry Deny from all Allow from env=AllowCountry
I'm not that advanced on how to configure .htaccess and would really appreciate any advice you could offer.
What I'm trying to achieve is to block user traffic but allow services/bots / FB to reach me.
I hope that makes sense.