I am also seeing this since updating to 1.7.8.7
Only started after the update.
Customers are being created with random characters for names. email addresses appear legitimate although probably from public paste/leak.
Password recovery emails being sent
Here is extract of server log... Cannot block IP as multiple different IP are doing this.
Anyone.... How to stop please....
175.117.144.158 - - [02/Aug/2022:14:16:09 -0700] "POST / HTTP/1.1" 200 45014 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:18 -0700] "GET /contact-us HTTP/1.1" 200 35208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:19 -0700] "POST /contact-us HTTP/1.1" 200 35437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:21 -0700] "POST /contact-us HTTP/1.1" 200 35439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:22 -0700] "POST /contact-us HTTP/1.1" 200 35208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:24 -0700] "POST /contact-us HTTP/1.1" 200 35372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:25 -0700] "POST /contact-us HTTP/1.1" 200 35372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:26 -0700] "POST /contact-us HTTP/1.1" 200 35208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:28 -0700] "GET /my-account HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:29 -0700] "GET /login?back=my-account HTTP/1.1" 200 32050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:32 -0700] "POST /login?back=my-account HTTP/1.1" 200 32226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:34 -0700] "POST /login?back=my-account HTTP/1.1" 200 32226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:36 -0700] "POST /login?back=my-account HTTP/1.1" 200 32050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:38 -0700] "POST /login?back=my-account HTTP/1.1" 200 32236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:40 -0700] "POST /login?back=my-account HTTP/1.1" 200 32236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:42 -0700] "POST /login?back=my-account HTTP/1.1" 200 32050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:50 -0700] "GET /password-recovery HTTP/1.1" 200 30453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:56 -0700] "POST /password-recovery HTTP/1.1" 200 29781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:57 -0700] "POST /password-recovery HTTP/1.1" 200 29781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:16:59 -0700] "POST /password-recovery HTTP/1.1" 200 30453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:00 -0700] "POST /password-recovery HTTP/1.1" 200 29945 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:02 -0700] "POST /password-recovery HTTP/1.1" 200 29945 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:05 -0700] "POST /password-recovery HTTP/1.1" 200 30453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:06 -0700] "GET /login?create_account=1 HTTP/1.1" 200 35794 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:13 -0700] "POST /login?create_account=1 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:15 -0700] "GET / HTTP/1.1" 200 45314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:17 -0700] "POST /login?create_account=1 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:18 -0700] "GET /my-account HTTP/1.1" 200 31058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:20 -0700] "POST /login?create_account=1 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:22 -0700] "GET /my-account HTTP/1.1" 200 31058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:23 -0700] "POST /login?create_account=1 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:25 -0700] "GET /my-account HTTP/1.1" 200 31058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:27 -0700] "POST /login?create_account=1 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:29 -0700] "GET /my-account HTTP/1.1" 200 31058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:31 -0700] "POST /login?create_account=1 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:33 -0700] "GET /my-account HTTP/1.1" 200 31058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:35 -0700] "GET /new-products HTTP/1.1" 200 31749 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:37 -0700] "POST /new-products HTTP/1.1" 200 31913 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:39 -0700] "POST /new-products HTTP/1.1" 200 31913 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:41 -0700] "POST /new-products HTTP/1.1" 200 31749 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:43 -0700] "GET /?mylogout= HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:44 -0700] "GET / HTTP/1.1" 200 45009 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:46 -0700] "POST / HTTP/1.1" 200 45178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:47 -0700] "POST / HTTP/1.1" 200 45178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:49 -0700] "POST / HTTP/1.1" 200 45014 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:51 -0700] "GET /contact-us HTTP/1.1" 200 35208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:57 -0700] "POST /contact-us HTTP/1.1" 200 35441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:17:59 -0700] "POST /contact-us HTTP/1.1" 200 35208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:18:01 -0700] "POST /contact-us HTTP/1.1" 200 35372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:18:03 -0700] "POST /contact-us HTTP/1.1" 200 35372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:18:05 -0700] "POST /contact-us HTTP/1.1" 200 35208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:18:14 -0700] "GET /my-account HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:18:15 -0700] "GET /login?back=my-account HTTP/1.1" 200 32050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:18:29 -0700] "POST /login?back=my-account HTTP/1.1" 200 32226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:18:32 -0700] "POST /login?back=my-account HTTP/1.1" 200 32226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:18:34 -0700] "POST /login?back=my-account HTTP/1.1" 200 32050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:18:36 -0700] "POST /login?back=my-account HTTP/1.1" 200 32236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:18:37 -0700] "POST /login?back=my-account HTTP/1.1" 200 32236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:18:39 -0700] "POST /login?back=my-account HTTP/1.1" 200 32050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:18:46 -0700] "GET /password-recovery HTTP/1.1" 200 30453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:18:47 -0700] "POST /password-recovery HTTP/1.1" 200 29781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:18:52 -0700] "POST /password-recovery HTTP/1.1" 200 29781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:18:55 -0700] "POST /password-recovery HTTP/1.1" 200 30453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:18:57 -0700] "POST /password-recovery HTTP/1.1" 200 29945 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:18:59 -0700] "POST /password-recovery HTTP/1.1" 200 29945 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:19:01 -0700] "POST /password-recovery HTTP/1.1" 200 30453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:19:02 -0700] "GET /login?create_account=1 HTTP/1.1" 200 35794 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:19:19 -0700] "POST /login?create_account=1 HTTP/1.1" 200 36083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:19:21 -0700] "POST /login?create_account=1 HTTP/1.1" 200 36089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:19:22 -0700] "POST /login?create_account=1 HTTP/1.1" 200 35794 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:19:24 -0700] "POST /login?create_account=1 HTTP/1.1" 200 35980 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:19:26 -0700] "POST /login?create_account=1 HTTP/1.1" 200 35980 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
175.117.144.158 - - [02/Aug/2022:14:19:28 -0700] "POST /login?create_account=1 HTTP/1.1" 200 35794 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"