I'd like to block any activity to the IP address
1.2.3.*. I've noticed 18.104.22.168 and 22.214.171.124 in use, or if anyone can give me any better solutions, I'd be happy to try.
I have to agree with George Edison with
That sounds like a terrible ISP. The plot thickens ... while playing around with iptables and the like, I noticed that as soon as I blocked
126.96.36.199, the script was simply injected from another domain. I blocked that, it moved on to another.
In my web browser, I can access the script from ANY DOMAIN! What the heck is the ISP doing here? For example, these URIs all respond with the script: