Hello, rhysmomo and kristan1,
I still has not figure out how to set this plugin correctly. But I did find another article address this “credit card test” attack: https://developer.woocommerce.com/2024/12/18/card-testing-attacks-and-the-store-api/
I am going to test this method for a week, let’s see if it solves the problem once for all.