Blocking Certain IP addresses

[RDavis]

I have a certain IP that visits the store and adds large amounts to a cart then abandons it (SWIFT VENTURES Inc ) they do this every 2 weeks or so 8 or 9 times within a 20 minute period
obviously its a automated script robot for search Im assuming is there a way fellow 3D carters to block certain IPs from adding items to cart
or blocking certain IP addresses that are known robots?

I guess its a small quirk to deal with but annoying

Thanks in advance for responses

RDavis

www.firstsourcecellular.com

[Mark]

Go to Settings> General> IP Security and enter the IP addresses there....:)

I think that is where you put the blocked IPs

[RDavis]

Thanks for the response
I did try that before posting here
but they still placed orders after that
either it doesnt take affect right away or it doesn't work that way

if it were a nice LEGIT 500 and some dollar order yeehaa Id be happy but these random shopping cart items and never doing anything but coming back every few minutes and repeating the process is sort of annoying

[Mark]

Sounds like a software bug.
Open a support ticket.

[Mark]

we have had the problem in the past.
I think the "referer" always showed up as _short or something like that. Definately a hacker or a robot. Would fill the cart up and then repeat. Very annoying.
It eventually stopped.
Was a source in Washington state if I recall correctly....

[RDavis]

OrgName: SWIFT VENTURES Inc
OrgID: SWIFTV
Address: 2001 Sixth Avenue
Address: Suite 2222
City: Seattle
StateProv: WA
PostalCode: 98121
Country: US


Well Washington at the least anyways


Really wish there was a way to block the IP address

7 Times in the last 40 minutes

208.99.193.1

[3dCartRobb]

OrgName: SWIFT VENTURES Inc
OrgID: SWIFTV
Address: 2001 Sixth Avenue
Address: Suite 2222
City: Seattle
StateProv: WA
PostalCode: 98121
Country: US


Well Washington at the least anyways


Really wish there was a way to block the IP address

7 Times in the last 40 minutes

208.99.193.1

You should really open a support ticket at support.3dcart.com so that we can assist you and look into the issue.

Simply click on submit a ticket and give us the pertinent information so that we can see why he is bypassing the filters.

Although the forums is a GREAT place to communicate, technical issues like this should be brought to our support team because they have the resources to look into the servers and see whats up. :D

[Mark]

What is the IP Security setting do anyway?
There is no help for the page, nothing in the knowledgebase and no description whatsoever that I can find.
Thanks.

[ScribeTime]

What is the IP Security setting do anyway?
There is no help for the page, nothing in the knowledgebase and no description whatsoever that I can find.
Thanks.

I've used this setting to block spammers from Amsterdam (at least that's what the ARIN Whois saysthey're from).

If the IP address is 100.100.1.1 - then you would put 100.100.1.1 in both fields to block that particular IP address. If you want to block a range then you would put the range in the appropriate fields.

[Mark]

Thanks.
The "tiltle" is confusing.
This isn't a "security" thing.
The IP security thing is restricting access to the admin based on IP address, which is GREAT in my opinion. However, there is no data on the IP security "feature" we are talking about.
Is this a ACL?

[ScribeTime]

Thanks.
The "tiltle" is confusing.
This isn't a "security" thing.
The IP security thing is restricting access to the admin based on IP address, which is GREAT in my opinion. However, there is no data on the IP security "feature" we are talking about.
Is this a ACL?

My understanding (from tech support) was that the IP security feature blocks certain "problem" IP addresses from accessing the entire website. Perhaps I misunderstood, but it sure seems to be working for us in reducing the number of incomplete spammy orders.

[domnisch]

Venture

We've had the same issue with this 'Venture' character from WA. We submitted a ticket and they blocked the IP for us. I think we've had to do it twice, as Venture popped back up with a different IP, but overall its been very effective.

[Java]

You should really open a support ticket at support.3dcart.com so that we can assist you and look into the issue.

Simply click on submit a ticket and give us the pertinent information so that we can see why he is bypassing the filters.

Although the forums is a GREAT place to communicate, technical issues like this should be brought to our support team because they have the resources to look into the servers and see whats up. :D

Rob,

For what it's worth, I also get hit regularly by this company and I did submit a ticket:

Me:
I noticed 14 cart abandonments today by a single IP address (208.99.195.54). I check the address and it's from Swift Ventures in WA state. From a quick internet search it looks like they have hit a lot of people in similar fashion, but no one seems to know who they are or what they are doing.

Any thoughts? Legit bot?

If you don't know if its legit, I'd like to ban the IP. Can you do that more effectively than me? If I'm the best avenue, I do that in IP Security?


Response:
Not sure. But you can do that on the IP security section, it'll ban them from the entire site.

I set up the IP ban, but they just changed IP ranges and are back at it. I'm less concerned about the hassle factor than I am in the why Swift keeps hitting my shopping cart.

Java

[RDavis]

Swift Co

Swift Ventures Inc (Swift Desk)
6010 27th Ave Ne, Seattle, WA 98115-7112

Contact Phone: (206) 854-4436
URL (web address): www.traffictrader.net
Business Category: Web Hosting/Servicing & Computer Consulting in Seattle, WA
Industry (SIC): Computer Processing and Data Preparation and Processing Services


NetRange: 208.99.192.0 - 208.99.223.255
CIDR: 208.99.192.0/19
NetName: SWIFTV-3RDBLOCK-2005
NetHandle: NET-208-99-192-0-1
Parent: NET-208-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.SWIFTCO.NET
NameServer: NS2.SWIFTCO.NET
Comment:
RegDate: 2006-01-24
Updated: 2006-06-27

OrgAbuseHandle: HG234-ARIN
OrgAbuseName: Goss, Henry
OrgAbusePhone: +1-206-728-2736
OrgAbuseEmail: [email protected]

OrgTechHandle: ABU30-ARIN
OrgTechName: bunjamin, andry
OrgTechPhone: +1-866-794-3826
OrgTechEmail: [email protected]

maybe just block the range of IP addresses known to be used by swift ventures?

xxx.xx.xxx.xx1 - xxx.xx.xxx.255


RDavis

www.firstsourcecellular.com

[3dCartRobb]

Swift Ventures Inc (Swift Desk)
6010 27th Ave Ne, Seattle, WA 98115-7112

Contact Phone: (206) 854-4436
URL (web address): www.traffictrader.net
Business Category: Web Hosting/Servicing & Computer Consulting in Seattle, WA
Industry (SIC): Computer Processing and Data Preparation and Processing Services


NetRange: 208.99.192.0 - 208.99.223.255
CIDR: 208.99.192.0/19
NetName: SWIFTV-3RDBLOCK-2005
NetHandle: NET-208-99-192-0-1
Parent: NET-208-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.SWIFTCO.NET
NameServer: NS2.SWIFTCO.NET
Comment:
RegDate: 2006-01-24
Updated: 2006-06-27

OrgAbuseHandle: HG234-ARIN
OrgAbuseName: Goss, Henry
OrgAbusePhone: +1-206-728-2736
OrgAbuseEmail: [email protected]

OrgTechHandle: ABU30-ARIN
OrgTechName: bunjamin, andry
OrgTechPhone: +1-866-794-3826
OrgTechEmail: [email protected]

maybe just block the range of IP addresses known to be used by swift ventures?

xxx.xx.xxx.xx1 - xxx.xx.xxx.255


RDavis

www.firstsourcecellular.com

The problem is, we could block the entire class B, but that is a LOT of ip addresses..

Is that something you'd want to do ?