CRE Loaded Community



Board index » CRE Loaded 6.2 » Security Issues

All times are UTC - 5 hours




Post new topic Reply to topic  [ 4 posts ] 
Author Message
 Post subject: CRE Loaded v6.2 B2B Guess, random IP address?
PostPosted: Thu Aug 27, 2009 3:29 pm 
Offline
CRE Newbie
User avatar

Joined: Sat Jan 28, 2006 1:00 am
Posts: 22
CRE Loaded v6.2 B2B[13.1 (SP1)]

We have a suspicious guess visiting our site with a random IP address and no osCsid. They've been online for 16 hours now, and their IP address changes every 5-10 minutes.

I don't know why they appear as the same Guest, and not different ones. They show as:

17:09:03 Guest 65.55.106.133 04:16:58 21:26:01 /shop/down_for_maintenance.php Session=Y
Name: Guest
Customer ID: 0
IP Address: 65.55.106.133
User Agent:
osCsid:

The IP address seems to originate from around the world.

Any suggestions?


Top
 Profile  
 
 Post subject: Re: CRE Loaded v6.2 B2B Guess, random IP address?
PostPosted: Sat Sep 05, 2009 3:05 pm 
Offline
CRE Legend
User avatar

Joined: Sun Nov 09, 2003 1:00 am
Posts: 7178
Location: Baconton, GA USA
All guests are labeled "guest". When down for maintenance there are not very many links for bots to move to. Get your store fixed and opened and this should resolve.

David

_________________
<a href="http://www.oscommerceuniversity.com/faq.php?cID=5">My CRE Loaded FAQ List</a>
[url="http://www.oscommerceuniversity.com/faq.php?cID=5"]My CRE Loaded FAQ List[/url]


Top
 Profile  
 
 Post subject: Re: CRE Loaded v6.2 B2B Guess, random IP address?
PostPosted: Sat Sep 05, 2009 3:23 pm 
Offline
CRE Newbie
User avatar

Joined: Sat Jan 28, 2006 1:00 am
Posts: 22
Nimitz1061 wrote:
All guests are labeled "guest". When down for maintenance there are not very many links for bots to move to. Get your store fixed and opened and this should resolve.


But would not each guest have a separate entry? We have one guess entry whose IP address changes.

Regards,
Ian


Top
 Profile  
 
 Post subject: Re: CRE Loaded v6.2 B2B Guess, random IP address?
PostPosted: Sat Sep 05, 2009 3:53 pm 
Offline
CRE Legend
User avatar

Joined: Sun Nov 09, 2003 1:00 am
Posts: 7178
Location: Baconton, GA USA
Yes, they should have separate entries provided they are all on at the same time.

This could be an issue with a table index, but its not an issue I've seen on any CRE site before.

You might try posting this as a bug report in the tracker at CRE Forge..

David

_________________
<a href="http://www.oscommerceuniversity.com/faq.php?cID=5">My CRE Loaded FAQ List</a>
[url="http://www.oscommerceuniversity.com/faq.php?cID=5"]My CRE Loaded FAQ List[/url]


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 

Board index » CRE Loaded 6.2 » Security Issues

All times are UTC - 5 hours


Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
It is currently Fri Jul 30, 2010 11:47 am
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group

Login

Top Listing

1. Credit Card with CCV
    Category: Payment Modules
    
2. CC7333_ATS
    Category: Templates
    
3. Points & Rewards PLUS!...
    Category: Add-Ons
    
4. One Page Checkout...
    Category: Fixes
    
5. Configuration Server...
    Category: Fixes
    
Show more...

Follow Us on Twitter

@likeOMGitsFEDAY we do offer a wiki and other resources at www.creloaded.org
@smellgoodslady 6.2 is old code, we are at 6.4 now. come and get the latest.
@smellgoodslady what version/release are you running?
CRE Secure in the news: Payment News Article about Hosted Payment Pages reducing PCI friction - http://is.gd/ba0CH
@smellgoodslady yes it should work for 6.2 as well. let me know of you have any issues.

CRE Loaded Community Chat hosted by CRE Loaded.

Join now


Chat about what's on your mind. More about public chats.


© CRE Loaded is a product of Chain Reaction Ecommerce, Inc. Usage & Privacy Policy