Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Possible Security Issue?


futuremillions

Recommended Posts

Posted

Hello. I am a total newbie about this but I installed the Who's Online 3.4 contribution and it is working great! I was on it and noticed I had something that was not a bot hitting every category within a few seconds. A few of the links that it visits have additional information added onto my original link directing to other websites. I've seen this happen about 3 times today from different IP addresses. Is this something that I should be worried about? I am adding the information here. Thanks.

 

213.136.34.9

 

Online Name IP Address Entry Last Click Last URL Session? Referer?

Inactive with no Cart 00:02:29 Guest magic.infotropic.com 16:07:56 16:10:25 /./product_reviews_write.php/products_id/161 Yes Not Found

Inactive with no Cart 00:01:32 Guest magic.infotropic.com 16:08:51 16:10:23 Necklaces / Miss CZ Collection (Category) Yes Not Found

Inactive with no Cart 00:00:18 Guest magic.infotropic.com 16:10:03 16:10:21 Necklaces (Category) Yes Not Found

Inactive with no Cart 00:00:17 Guest magic.infotropic.com 16:10:02 16:10:19 Sets (Category) Yes Not Found

Inactive with no Cart 00:00:42 Guest magic.infotropic.com 16:09:33 16:10:15 Red Coral Ring (Product) Yes Not Found

Inactive with no Cart 00:01:29 Guest magic.infotropic.com 16:08:45 16:10:14 /./pave-nested-heart-ring-pr-221.html Yes Not Found

Inactive with no Cart 00:00:21 Guest magic.infotropic.com 16:09:51 16:10:12 Necklaces (Category) Yes Not Found

Inactive with no Cart 00:00:55 Guest magic.infotropic.com 16:08:50 16:09:45 /./shipping.php/language/en Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:37 16:09:37 Sets (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:36 16:09:36 Sets (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:34 16:09:34 Sets (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:25 16:09:25 Rings (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:23 16:09:23 Rings (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:22 16:09:22 Rings (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:18 16:09:18 /./hammered-gold-ring-pr-30.html?action=http%3A%2F%2Fwww.soeasywebsite.com%2Fsoeasycasino%2Fenosucu%2Fijani%2F& Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:15 16:09:15 /./hammered-gold-ring-pr-30.html?action=http%3A%2F%2Fwww.soeasywebsite.com%2Fsoeasycasino%2Fenosucu%2Fijani%2F& Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:14 16:09:14 /./hammered-gold-ring-pr-30.html?action=http%3A%2F%2Fwww.municipioxii.it%2Fsunnyway%2Figodoq%2Fbukosud%2F& Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:08 16:09:08 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:06 16:09:06 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:05 16:09:05 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:04 16:09:04 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:03 16:09:03 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:02 16:09:02 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:01 16:09:01 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:08:59 16:08:59 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:08:58 16:08:58 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:08:56 16:08:56 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:08:54 16:08:54 Watches (Category)

If at first you don't succeed, restore your backup files!

Posted
Hello. I am a total newbie about this but I installed the Who's Online 3.4 contribution and it is working great! I was on it and noticed I had something that was not a bot hitting every category within a few seconds. A few of the links that it visits have additional information added onto my original link directing to other websites. I've seen this happen about 3 times today from different IP addresses. Is this something that I should be worried about? I am adding the information here. Thanks.

 

213.136.34.9

 

Online Name IP Address Entry Last Click Last URL Session? Referer?

Inactive with no Cart 00:02:29 Guest magic.infotropic.com 16:07:56 16:10:25 /./product_reviews_write.php/products_id/161 Yes Not Found

Inactive with no Cart 00:01:32 Guest magic.infotropic.com 16:08:51 16:10:23 Necklaces / Miss CZ Collection (Category) Yes Not Found

Inactive with no Cart 00:00:18 Guest magic.infotropic.com 16:10:03 16:10:21 Necklaces (Category) Yes Not Found

Inactive with no Cart 00:00:17 Guest magic.infotropic.com 16:10:02 16:10:19 Sets (Category) Yes Not Found

Inactive with no Cart 00:00:42 Guest magic.infotropic.com 16:09:33 16:10:15 Red Coral Ring (Product) Yes Not Found

Inactive with no Cart 00:01:29 Guest magic.infotropic.com 16:08:45 16:10:14 /./pave-nested-heart-ring-pr-221.html Yes Not Found

Inactive with no Cart 00:00:21 Guest magic.infotropic.com 16:09:51 16:10:12 Necklaces (Category) Yes Not Found

Inactive with no Cart 00:00:55 Guest magic.infotropic.com 16:08:50 16:09:45 /./shipping.php/language/en Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:37 16:09:37 Sets (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:36 16:09:36 Sets (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:34 16:09:34 Sets (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:25 16:09:25 Rings (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:23 16:09:23 Rings (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:22 16:09:22 Rings (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:18 16:09:18 /./hammered-gold-ring-pr-30.html?action=http%3A%2F%2Fwww.soeasywebsite.com%2Fsoeasycasino%2Fenosucu%2Fijani%2F& Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:15 16:09:15 /./hammered-gold-ring-pr-30.html?action=http%3A%2F%2Fwww.soeasywebsite.com%2Fsoeasycasino%2Fenosucu%2Fijani%2F& Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:14 16:09:14 /./hammered-gold-ring-pr-30.html?action=http%3A%2F%2Fwww.municipioxii.it%2Fsunnyway%2Figodoq%2Fbukosud%2F& Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:08 16:09:08 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:06 16:09:06 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:05 16:09:05 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:04 16:09:04 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:03 16:09:03 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:02 16:09:02 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:09:01 16:09:01 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:08:59 16:08:59 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:08:58 16:08:58 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:08:56 16:08:56 Watches (Category) Yes Not Found

Inactive with no Cart 00:00:00 Guest magic.infotropic.com 16:08:54 16:08:54 Watches (Category)

 

Looks like a standard hackbot looking for XSS attack routes.

Posted
What can I do?!

 

All you can do is make sure that your oscommerce is fully up to date with all security fixes.

 

You could also install the Security Pro contribution. There's another contribution, I think by jackmcs that checks your oscommerce files for untoward changes.

 

You would drive yourself mad trying to block each individual hacker though as there are tens of thousands of them out there just dying to ruin your shop.

 

Lovely people.

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...