Results 1 to 7 of 7
  1. #1
    Join Date
    Jan 2008
    Posts
    2
    Plugin Contributions
    0

    Default "Flood" of Duplicate IP Addresses Showing On Site Simultaneously

    I have searched the forums but have found no specific reference to this problem: I have a client using the latest stable release of Zen Cart. The client is reporting that they are seeing 'floods' of duplicate IP addresses showing up on the site at the exact same time. These do not seem to me to be a Denial of Service attack (not enough volume) but there is obviously something going on. The IP's will show (simultaneously) to be viewing multiple pages and products at the same instant and then just as quickly the IP's will drop-off.

    Is this a common occurrence? Is it a "false positive", a flaw in Zen Cart's admin screens?

    Any help would be appreciated...

    Thanks,
    Chris

  2. #2
    Join Date
    Aug 2005
    Location
    Arizona
    Posts
    27,761
    Plugin Contributions
    9

    Default Re: "Flood" of Duplicate IP Addresses Showing On Site Simultaneously

    If a visitor is not logged in, a new session can be created as they navigate through the store
    Zen-Venom Get Bitten

  3. #3
    Join Date
    Jan 2004
    Posts
    66,364
    Blog Entries
    7
    Plugin Contributions
    274

    Default Re: "Flood" of Duplicate IP Addresses Showing On Site Simultaneously

    Quote Originally Posted by chrislg1970 View Post
    Is this a common occurrence? Is it a "false positive", a flaw in Zen Cart's admin screens?
    I'm not aware of any false-positives in the current code (v1.3.8a as of this writing).

    When you say "floods", are you talking about 10, 100, or 1000?
    Are these who's-online entries colored with a pink background? If so, those are search-engine spiders ... which could easily exhibit the behavior you mention.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  4. #4
    Join Date
    May 2007
    Location
    SW Florida
    Posts
    1,051
    Plugin Contributions
    2

    Default Re: "Flood" of Duplicate IP Addresses Showing On Site Simultaneously

    I get 2 to 6 like this from time to time. Doesn't happen often enough to mention it.

    I see this behavior sometimes from AOL's proxy servers too,

    JOhn ><>
    Newest Site: ChargerPros - Stuff4Toys

  5. #5
    Join Date
    Jan 2008
    Posts
    2
    Plugin Contributions
    0

    Default Re: "Flood" of Duplicate IP Addresses Showing On Site Simultaneously

    Quote Originally Posted by DrByte View Post
    I'm not aware of any false-positives in the current code (v1.3.8a as of this writing).

    When you say "floods", are you talking about 10, 100, or 1000?
    Are these who's-online entries colored with a pink background? If so, those are search-engine spiders ... which could easily exhibit the behavior you mention.
    These are not search engine spiders (I checked to make sure) and they don't come from any one origin or country. There can be as many as 80 of them at any given time or 80 instances of the same IP, rather. And it's not always the same IP either - there's no rhyme or reason.

  6. #6
    Join Date
    Mar 2006
    Location
    Tennessee
    Posts
    310
    Plugin Contributions
    0

    Default Re: "Flood" of Duplicate IP Addresses Showing On Site Simultaneously

    We've been seeing the same thing on some of our carts. Most of the IPs (if you do a Google search) show up on lists of bad bots or scrapers.

    I was hoping to find a way to stop them. When they show up our good bots leave and with the number of pages they hit at once, it has to be slowing the site down too. So far we've just been IP banning them one at a time, but I would love to find a way to stop them before they hit.


    Any and all suggestions will be greatly appreciated!
    I'll finish that project tomorrow, I've made enough mistakes today!

  7. #7
    Join Date
    Oct 2006
    Posts
    5,477
    Plugin Contributions
    11

    Default Re: "Flood" of Duplicate IP Addresses Showing On Site Simultaneously

    Basically, banning ips is not a good solution, since the ips are not fixed.
    I dont see a good and cheap solution for this. This is a fundamental problem with the internet in general, everyone can send you packages/requests, and you dont really know what it is until you open the package.
    I no longer provide installation support on forum for all my modules. However, if there are real bugs with the modules please feel free to contact me

 

 

Similar Threads

  1. Replies: 4
    Last Post: 8 Jan 2016, 09:29 AM
  2. v150 BULK copy functionality using the "Duplicate Product" "Copy Method"
    By Zean in forum Setting Up Categories, Products, Attributes
    Replies: 1
    Last Post: 28 Jun 2012, 12:57 AM
  3. v150 "Admin Settings" and "Email Welcome" not showing up under Tools Menu
    By chad2012 in forum Installing on a Mac Server
    Replies: 2
    Last Post: 28 Jan 2012, 07:56 PM
  4. Comment out "Check for Updates" Button, "Support Site" Link, & "Version" Link?
    By g00glethis1 in forum Customization from the Admin
    Replies: 4
    Last Post: 15 Mar 2010, 06:32 AM
  5. The word "Products" showing up all over site
    By smoke133 in forum General Questions
    Replies: 4
    Last Post: 17 Sep 2008, 05:27 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR