Important Notice from AspDotNetStorefront
It is with dismay that we report that we have been forced, through the action of hackers, to shut off write-access to this forum. We are keen to leave the wealth of material available to you for research. We have opened a new forum from which our community of users can seek help, support and advice from us and from each other. To post a new question to our community, please visit: http://forums.vortx.com
Results 1 to 5 of 5

Thread: sudden disturbing jump in anonymous customers

  1. #1
    singproinc is offline Member
    Join Date
    Oct 2006
    Posts
    51

    Question sudden disturbing jump in anonymous customers

    We have a small ML store, vs. 9. We typically have 5 to 7 registering customers in a day, and anywhere from 4 to 10 anonymous customers.

    Today, so far (mid afternoon) we have 5 registering customers, and in the last few hours alone, *40* anonymous customers. And, it keeps rising every few minutes.

    Security & maintenance logs look clean, the failed transaction log is clean, the number of visitors for today is actually a little lower than average.

    Is this anything to be concerned about? We've never seen this in 4 years of having the web store.

  2. #2
    DotNetDevelopments is offline Senior Member
    Join Date
    Jul 2008
    Location
    Harlow / Essex / UK
    Posts
    619

    Default

    We had something along these lines and found it was a rogue crawler bot. We tracked it down, found it used 3 different IPs and blocked them.

    Check your database for the customers - look at the ones without email address - then compare IP addresses and times created. From there you can work out what is happening.

    Hope it helps.

    edit:
    for checking IPs I would advise
    http://www.projecthoneypot.org
    Last edited by DotNetDevelopments; 09-03-2010 at 02:52 AM.
    =====
    Version (Code/DB): AspDotNetStorefront MSx 9.1.0.1/9.1.0.0
    Execution Mode: 64 Bit
    Dot Net Developments - E-commerce By Experience

  3. #3
    singproinc is offline Member
    Join Date
    Oct 2006
    Posts
    51

    Default

    Thanks for the tip, e-trade.

    Looked over the customer list, and they all have email addresses; it's something we require on our site, and nobody has been able to circumvent it.

    The run on anonymous customers is continuing today; already 25 and there were probably 80 (est) by the end of yesterday.

    No bogus orders, no apparent slow-down, but it's really skewing our numbers.

    I'm going to check our web-stats and see if there is something to be found there.

    Any other suggestions?

  4. #4
    DotNetDevelopments is offline Senior Member
    Join Date
    Jul 2008
    Location
    Harlow / Essex / UK
    Posts
    619

    Default

    Here, this might help.

    Run this SQL query
    C#/VB.NET Code:
    SELECT
        CreatedOn
    ,
        
    LastIPAddress,
        
    Referrer
    FROM
        Customer WITH 
    (NOLOCK)
    WHERE
        Email 
    ''
        
    AND    CreatedOn dateadd(dy, -7getdate())
    ORDER BY
        CustomerID DESC 
    It will show when the anon customer was created (something was added to the basket thus they are added as an anon customer), the last IP address - use this to check against on the honey pot project (if you see the same IP multiple times) and the referrer - so where they came from, spam bots etc. do not normally have referrers.

    It will get the information from the customer table where they have a blank email (thus an anon customer) and they were created within 7 days ago (change the value from -7 for less days i.e. -3 for today and two days back.)

    Finally it will order them from the latest to the oldest.

    From here you will get a clearer indication of what is going on with your anon customers.

    Hope it helps out!
    =====
    Version (Code/DB): AspDotNetStorefront MSx 9.1.0.1/9.1.0.0
    Execution Mode: 64 Bit
    Dot Net Developments - E-commerce By Experience

  5. #5
    singproinc is offline Member
    Join Date
    Oct 2006
    Posts
    51

    Default

    Rockin'. I'll pass it on to our IT guy.

    Thanks for your kindness.