this is a malware in your shop. collects credit cards/checkout data.
this site points to some russian gateway that also sends lots of ddos and bruteforce requests from different ip addresses
http://80.87.205.143/mage.js
block it
80.87.205.0/24
------------
MagenX - Magento and Server optimization