Anybody ever experienced CC fraud or other kinds of abuse? I'm about to install https://ozgurkazancci.com/block-spammers-abusive-ip-addresses-with-pf-badhost-in-openbsd/ on my Solidus server which should block all known bad IPs (including Tor and some VPNs).

yes, I used to work on a store with tons of bots and even human driven automatic traffic, bots using consumer ip proxies etc. …my take is that there’s no silver bullet and you kinda need to grow your defenses as needed so not to pour resources for attacks that will never happen