I'd like to block any activity to the IP address
1.2.3.*. I've noticed 188.8.131.52 and 184.108.40.206 in use, or if anyone can give me any better solutions, I'd be happy to try.
I have to agree with George Edison with
That sounds like a terrible ISP. The plot thickens ... while playing around with iptables and the like, I noticed that as soon as I blocked
220.127.116.11, the script was simply injected from another domain. I blocked that, it moved on to another.
In my web browser, I can access the script from ANY DOMAIN! What the heck is the ISP doing here? For example, these URIs all respond with the script: