who's online showing up to hundred sessions of the same IP

[didolim]

Hi zenners

my Who's online is working perfectly. never had any problem with it. But since a couple of days on several moments, there is ONE ip address showing up and this IP address shows up as hundred of sessions sometimes. I only have problem with this particular IP. also the pages visited by this IP are not usual pages.

the store = www.balletkledingwinkel.com
Please see attachment for who's online screenshot.


I am using version v1.3.9e
Maybe it is just a setting? Is this a hacker? This is annoying as my statistics are not correct anymore. Please advise.

[terraGirl]

The IP range 58.60.0.0 - 58.63.255.255 belongs to China Telecom. Could be a Chinese search engine spider or could be a hacker scanning all pages for a way in. If you don't have customers in China, you can block their range from accessing your site via .htaccess (if on a Linux server).

[DrByte]

terraGirl is correct. You're being spidered/indexed by a rogue agent who is trying to copy your site, or worse.
Her suggestion to block is a good one.

Additionally, you're missing one or more entries from your language file. ie: TIME_PASSED_LAST_CLICKED has no define() in whatever language you've selected for display. You need to copy the missing defines from the english version of the file.

[didolim]

Thanks DrByte and Terragirl.

Ok, will add the IP deny in my .htaccess. I am not familiar with it so i looked it up on the net how to do it. does it matter if I place the "Deny from" at the beginning or end of the .HTACCESS ?
this is my HTACCESS, please confirm if I did the block correctly:

Deny from 58.60.
Deny from 58.61.
Deny from 58.62.
Deny from 58.63.

RewriteEngine On
RewriteBase /

# From Ultimate SEO URLs
RewriteRule ^(.*)-p-(.*).html$ index\.php?main_page=product_info&products_id=$2&%{QUERY_STRING} [L]
RewriteRule ^(.*)-c-(.*).html$ index\.php?main_page=index&cPath=$2&%{QUERY_STRING} [L]
RewriteRule ^(.*)-m-([0-9]+).html$ index\.php?main_page=index&manufacturers_id=$2&%{QUERY_STRING} [L]
RewriteRule ^(.*)-pi-([0-9]+).html$ index\.php?main_page=popup_image&pID=$2&%{QUERY_STRING} [L]
RewriteRule ^(.*)-pr-([0-9]+).html$ index\.php?main_page=product_reviews&products_id=$2&%{QUERY_STRING} [L]
RewriteRule ^(.*)-pri-([0-9]+).html$ index\.php?main_page=product_reviews_info&products_id=$2&%{QUERY_STRING} [L]
RewriteRule ^(.*)-ezp-([0-9]+).html$ index\.php?main_page=page&id=$2&%{QUERY_STRING} [L]

# For Open Operations Info Manager
RewriteRule ^(.*)-i-([0-9]+).html$ index\.php?main_page=info_manager&pages_id=$2&%{QUERY_STRING} [L]

# For dreamscape's News & Articles Manager
RewriteRule ^news/?$ index\.php?main_page=news&%{QUERY_STRING} [L]
RewriteRule ^news/rss.xml$ index\.php?main_page=news_rss&%{QUERY_STRING} [L]
RewriteRule ^news/archive/?$ index\.php?main_page=news_archive&%{QUERY_STRING} [L]
RewriteRule ^news/([0-9]{4})-([0-9]{2})-([0-9]{2}).html$ index\.php?main_page=news&date=$1-$2-$3&%{QUERY_STRING} [L]
RewriteRule ^news/archive/([0-9]{4})-([0-9]{2}).html$ index\.php?main_page=news_archive&date=$1-$2&%{QUERY_STRING} [L]
RewriteRule ^news/(.*)-a-([0-9]+)-comments.html$ index\.php?main_page=news_comments&article_id=$2&%{QUERY_STRING} [L]
RewriteRule ^news/(.*)-a-([0-9]+).html$ index\.php?main_page=news_article&article_id=$2&%{QUERY_STRING} [L]

# All other pages
# Don't rewrite real files or directories
RewriteCond %{REQUEST_FILENAME} !-f [NC]
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*).html$ index\.php?main_page=$1&%{QUERY_STRING} [L]

[cyphercys]

An IP can show up hundreds of times if a company such as TrustKeeper is performing a PCI Scan for merchant services compliance. Check with your merchant services company / PCI Compliance Company to find out.