Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Possible Hack Attemt???


muhsinb

Recommended Posts

Posted

When looking on who's online in the admin section, i always see an IP Address 216.113.188.202 trying to access /mywebsite.com/ext/modules/payment/paypal_ipn/ipn.php

 

Is this person trying to do something malicious, cos its begining to pi$$ me off :angry:

 

Theres no way he can reach the file, since it has file attrib settings of 644 and 755 above.

 

Should i be worried?

Posted
When looking on who's online in the admin section, i always see an IP Address 216.113.188.202 trying to access /mywebsite.com/ext/modules/payment/paypal_ipn/ipn.php

 

Is this person trying to do something malicious, cos its begining to pi$$ me off :angry:

That's strange. That ip number belongs to Ebay.

Posted
That's strange. That ip number belongs to Ebay.

 

Bizarre...doing a ping -a resolves to notify.paypal.com

 

WTF is going on?

Posted
Bizarre...doing a ping -a resolves to notify.paypal.com

 

WTF is going on?

 

 

Ebay own Paypal do they not ?

Posted
Ebay own Paypal do they not ?

 

Correct...i have sold on eBay in the past quite heavily over the past 5 years or so, but over the last 2 months have refused to use them since they tried to hang on to almost £2.5k in my PayPal account for 180 days!

 

Anyway...can anyone explain whats going on here?

Posted
Correct...i have sold on eBay in the past quite heavily over the past 5 years or so, but over the last 2 months have refused to use them since they tried to hang on to almost £2.5k in my PayPal account for 180 days!

 

Anyway...can anyone explain whats going on here?

I think Paypal is insane. I can see if you are a new store owner, but if you can swing the 50 bucks a month for a real merchant account, you're so much better off. It's nice to have the money wired into my account daily. I use Authorize.net

Posted
I think Paypal is insane. I can see if you are a new store owner, but if you can swing the 50 bucks a month for a real merchant account, you're so much better off. It's nice to have the money wired into my account daily. I use Authorize.net

 

The problem with eBay / PayPal is as follows:

 

Charges to the seller:

 

Advertising Fees

Final Value Fees

PayPal fees when receiving money from buyer

 

Charges to the buyer:

 

0

 

The annoying part is, they can restrict suspend your accounts with no reasoning. Its what happened to me with £2.5k stashed in there! I fought at a small claims court in the end and bust PayPal's bollox :lol:

 

Is there an authorize.net equivalent in the UK?

 

Cheers

Posted
The problem with eBay / PayPal is as follows:

 

Charges to the seller:

 

Advertising Fees

Final Value Fees

PayPal fees when receiving money from buyer

 

Charges to the buyer:

 

0

 

The annoying part is, they can restrict suspend your accounts with no reasoning. Its what happened to me with £2.5k stashed in there! I fought at a small claims court in the end and bust PayPal's bollox :lol:

 

Is there an authorize.net equivalent in the UK?

 

Cheers

I'm not sure, I was I could answer that. I'd search the oscommerce message boards for one that merges nicely with oscommerce. I know it cost me 300.00 to have it set-up, but it's all down hill from there. I just feel that PAYPAL is more for Ebayers. That's just my opinion of course.

Posted

I am a designer and programmer I use paypal.com all the time and never have had a problem with them I put 51,476 dollars USD last year through the account without an issue. I appreciate paypal.com and it shocks me when I hear these horrible stories all the time about them.

 

Sometimes I wonder...

 

Generally when I hear of these problems it is with people that ebay a lot not from stores that sell. A stiff tone and a little bit&*&ing and you can get things done if you do hit a bump with paypal.com

 

But thats just me I understand everyone views.

Posted

Back to the original problem.

 

Are you paypal on your shop? Paypal needs to communicate with this file when notifying you of a received payment (IPN). So if you are not using them and you haven't got the paypal IPN module installed, then it's something fishy. Otherwise you should check your orders.

 

abra

The First Law of E-Commerce: If the user can't find the product, the user can't buy the product.

 

Feedback and suggestions on my shop welcome.

 

Note: My advice is based on my own experience or on something I read in these forums. No guarantee it'll work for you! Make sure that you always BACKUP the database and the files you are going to change so that you can rollback to a working version if things go wrong.

Posted
Back to the original problem.

 

Are you paypal on your shop? Paypal needs to communicate with this file when notifying you of a received payment (IPN). So if you are not using them and you haven't got the paypal IPN module installed, then it's something fishy. Otherwise you should check your orders.

 

abra

 

Yes am using the Official osCommerce PayPal IPN and thinking about it now, it seems when anyone makes a payment (like just now) i get that guest from the PayPal ip address come up.

 

Bizare...does this happen to anyone else?

Posted

Everytime someone purchases something in my shop using the paypal gateway (with official paypal IPN module), paypal accesses above mentioned file.

 

As far as I can recall, it works something like this: customer pays and paypal calls up /ext/modules/payment/paypal_ipn/ipn.php with a "code". The ipn file sends "code" back to paypal. This is to make sure the payment is made to the right recipient. Depending on paypals notification, the order status is updated.

 

So I would say, everything is exactly as it should be.

 

abra

The First Law of E-Commerce: If the user can't find the product, the user can't buy the product.

 

Feedback and suggestions on my shop welcome.

 

Note: My advice is based on my own experience or on something I read in these forums. No guarantee it'll work for you! Make sure that you always BACKUP the database and the files you are going to change so that you can rollback to a working version if things go wrong.

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...