Results 1 to 6 of 6

Thread: Anyone else see lots of fake login attempts?

  1. #1
    Member
    Anyone else see lots of fake login attempts?


    Join Date
    May 2017
    Posts
    40
    Total Contributions For

    Markcm     $ 0.00
    Rep Power
    0


    Default Anyone else see lots of fake login attempts?

    Looking at my admin panel HOME Customer Log tab, and I can also see the activity in my WOL, I get at about 30 fake login attempts per day. None of the emails are actual accounts. I exported the log file and sorted by IP to analyze and can see some repeat use of the same email from different IP and also multiple different emails from the same IP. There are so many I don't think .htaccess blocks are worth the effort.

    Does everyone get this same activity or is there maybe something drawing this malicious sniffing to my site?

  2. #2
    osCMax Development Team

    Anyone else see lots of fake login attempts?

    ridexbuilder's Avatar
    Join Date
    Jul 2008
    Location
    Haggisland
    Posts
    4,062
    Total Contributions For

    ridexbuilder     $ 15.00
    Rep Power
    94


    Arrow Re: Anyone else see lots of fake login attempts?

    I've seen it on occasions, with some sites.
    Perhaps a recaptcha on the account login page would help, especially if a login infobox isn't available/disabled. You have to weigh up whether that would put off potential 'real' customers though; I guess it would!

    Developers resource at bitbucket
    *** *** ***
    oscmax.co.uk / ejsolutions.co.uk
    Hosting plans with installation, configuration, contributions, support and maintenance.
    *** FREE osCmax hosting available ***
    oscmaxtemplates.com

  3. #3
    Member
    Anyone else see lots of fake login attempts?


    Join Date
    May 2017
    Posts
    40
    Total Contributions For

    Markcm     $ 0.00
    Rep Power
    0


    Default Re: Anyone else see lots of fake login attempts?

    I do have the login InfoBox enabled, I don't think that is necessary. Do you think it might help cut down if I turn that off? I don't get a lot of traffic, most of my customers are specifically looking for my niche product.

  4. #4
    osCMax Development Team

    Anyone else see lots of fake login attempts?

    ridexbuilder's Avatar
    Join Date
    Jul 2008
    Location
    Haggisland
    Posts
    4,062
    Total Contributions For

    ridexbuilder     $ 15.00
    Rep Power
    94


    Thumbs up Re: Anyone else see lots of fake login attempts?

    Quote Originally Posted by Markcm View Post
    I do have the login InfoBox enabled, I don't think that is necessary. Do you think it might help cut down if I turn that off?
    It's worth a try, as long as you have a clear route for a customer to access their account, egs. login/off button and My Account link.

    Developers resource at bitbucket
    *** *** ***
    oscmax.co.uk / ejsolutions.co.uk
    Hosting plans with installation, configuration, contributions, support and maintenance.
    *** FREE osCmax hosting available ***
    oscmaxtemplates.com

  5. #5
    Member
    Anyone else see lots of fake login attempts?


    Join Date
    May 2017
    Posts
    40
    Total Contributions For

    Markcm     $ 0.00
    Rep Power
    0


    Default Re: Anyone else see lots of fake login attempts?

    Follow up,

    After months of about 25 fake login attempts per day, I turned off the home page Login Infobox and it immediately stopped.

  6. #6
    Active Member
    Anyone else see lots of fake login attempts?


    Join Date
    Sep 2009
    Location
    Vancouver, BC, Canada
    Posts
    444
    Total Contributions For

    JRR     $ 180.00
    Rep Power
    62


    Default Re: Anyone else see lots of fake login attempts?

    I use ridexbuilders' myaccount for customer logins on the pages instead of loginbox and haven't seen any false logins. Mind you not really looking for them either. I did turn off the loginbox (under admin/Configuration/Templates/Infoboxes) quite a while ago, and I seem to recall discussion here about problems with it and Google Chrome back in 2014. I have no complaints from customers trying to login (Sign In) using the myaccount version
    Last edited by JRR; 11-12-2017 at 10:46 PM.

Similar Threads

  1. Replies: 3
    Last Post: 10-04-2013, 01:26 PM
  2. Replies: 0
    Last Post: 07-19-2013, 10:17 AM
  3. I'm going nuts with this; lots of questions; I need help!
    By puggybelle in forum osCmax v2 Customization/Mods
    Replies: 4
    Last Post: 10-26-2005, 11:45 AM
  4. Lots of Products all with the same attributes.
    By JGofGFS in forum osCommerce 2.2 Modification Help
    Replies: 0
    Last Post: 05-04-2004, 09:55 AM
  5. Odd problem in Admin/ File manager--- lots of "n's"
    By vortexblue in forum osCommerce 2.2 Modification Help
    Replies: 1
    Last Post: 11-17-2003, 02:12 PM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •