I found a good way to stop many of the hacking attempts that generate errors in the AbleCommerce logs, as well as other events such as users trying to reset our passwords. If anyone knows of a better way, please comment here. I use the RDPGuard program in Windows Server with a very specific set of rules because the default rules in there for HTTP Protection can block legitimate users depending on how your website is set up. I have attached the new rules for reference.
1. Download and install RDPGuard from rdpguard.com
2. Enable HTTP Protection and add the path to your IIS log files
3. Choose "override standard detection rules" and add in the rules from the text file here

RDPGard_HTTP_Rules for AbleCommerce.txt (2kb) downloaded 2 time(s).

Edited by user Monday, August 31, 2026 9:37:50 PM(UTC)  | Reason: Clarification