Possible attack?

[harnessg]

I've noticed recently that my stats show traffic going to URL's on my site like this:

 

http://finearttouch.harnesshouse.com/shop/....eclub.lv/index?

 

(This is really going to finearttouch.com/shop/product_info etc; the stats program just shows me the listing as a subdomain).

 

I'm getting a TON of traffic from different IP addresses like this.

 

I guess the question is, is this something I need to be concerned about? Is this some kind of security issue with osCommerce that they're trying to exploit?

 

We're using a version of osCommerce from about a year ago. We had a fellow modify it to make it look like our main site (I think he used some add ins or enhancements from the community to do that).

 

Glen

[web-project]

Yes, someone trying to hack the website. I recommend to setup firewall on your server or if on shared hosting account ask the provider to activate it.

[♥FWR Media]

I've noticed recently that my stats show traffic going to URL's on my site like this:

 

http://finearttouch.harnesshouse.com/shop/....eclub.lv/index?

 

(This is really going to finearttouch.com/shop/product_info etc; the stats program just shows me the listing as a subdomain).

 

I'm getting a TON of traffic from different IP addresses like this.

 

I guess the question is, is this something I need to be concerned about? Is this some kind of security issue with osCommerce that they're trying to exploit?

 

We're using a version of osCommerce from about a year ago. We had a fellow modify it to make it look like our main site (I think he used some add ins or enhancements from the community to do that).

 

Glen

 

These are querystring attacks. If you are not totally confident of the coding of your site and would like some peace of mind try installing Security Pro ..

 

http://addons.oscommerce.com/info/5752

 

Security Pro takes a whitelist approach to querystring variables and does a pretty good job of killing these sort of attacks.