2150x the same visitor

[Guest]

Look at this line:

195.198.149.10 23:26:07 23:26:07 /catalog/advanced_search.php/language/en/includes/includes/includes/includes/includes/includes/includes/includes/includes/includes/includes/external/jscookmenu/includes/external/jscookmenu/includes/includes/external/jscookmenu/jscookmenu.js

 

195.198.149.10 does visit our shop with 2150 calls at the same time, often to the same page.

Who is this, and what is his aim ??!

what is a jscookmenu.js

 

Would be great if anybody could tell me how to stop this.

Feels like someone is trying to break in. Of course we dont want anybody to trouble our shop.

 

..anybody !? got any ideas or experience with this.

 

Suggestions would be appreciated very much! :blink:

 

Patrick

[Bushmaster]

It's from Sweden. There is a contribution for banning IP's or you can do it with .htaccess How ever you chose to do it will work. It's possable that he is on a dynamic IP which means you may end up banning half of Sweden before your done.

[spooks]

You can prevent any injection attacks with Security Pro http://addons.oscommerce.com/info/5752

 

You can monitor sites for unauthorised changes with SiteMonitor http://addons.oscommerce.com/info/4441

 

You can block elicit access attempts with IP trap http://addons.oscommerce.com/info/5914

 

You can stop Cross Site Scripting attacks with Anti XSS http://addons.oscommerce.com/info/6044

 

Also make sure that all files, except for the two configure.php files have permissions no higher than 644.

 

The permissions for the two configure.php files will vary according to the server your site is on - it could be 644, 444 or 400 which is correct.

 

Permissions on folders should be no higher than 755. If your hosting setup demands permissions of 777 on folders then change hosts.