Zen Follower
- Join Date:
- Jul 2009
- Location:
- Texas
- Posts:
- 210
- Plugin Contributions:
- 0
Card Slamming
I've had similar problems in the past.. my cart is upgraded to 1.3.9h.
In my situation a customer was creating an account and then trying hundreds of different credit card #'s to try and place an order. Authorize.net caught every last one of these but nonetheless it caused a ton of spam email flying around. They would then create another account and try again. They did this for several hundred card #'s. With about 20 accounts.
Here's the first thing I ran into.. it wasn't easy to get a new customers IP address. I had to search through my logs for what IP was hitting the registration page and use that to place my bans. While IP addresses are stored for customers who ordered they don't seem to be saved for new customers. I would love an easy way to get a new customers IP. Authorize.net also doesn't seem to have this information.
Once I had the IP a quick iptable ban took care of him.. at least for that day. He ended up coming back later with a different but similar IP. I banned that too and haven't really heard from him yet.
There are plenty of things that could be done to prevent this sort of behavior. For example I believe he used the same email address for every account. He also created over 20 accounts using the same IP address. He wasn't going to get anywhere with what he was trying because we verify addresses at Authorize.net and he was using a clearly fake address each time. So nothing went through. But ideally if someone tries to use a credit card # say five times and it fails maybe the checkout should kick them out and bring them to a page asking to call or something. If someone creates an account more then five times in a day from the same IP zencart could fire off a warning email to admins.
Ideally though I'm happy and comfortable with just banning IP's with IPTable.. so the first thing I'm looking for in the line of defense is an easy way to get the IP of new customers.
