[Skip to main content](#vessel-content)

#   Maybe a bug or hacked website

##

- **[verzevoul](/forum/user/8351-verzevoul "View verzevoul's Profile")**
- [![verzevoul's Avatar](https://www.hikashop.com/media/kunena/core/svg/person.svg)](/forum/user/8351-verzevoul "View verzevoul's Profile") Topic Author
- [ Offline](/forum/user/8351-verzevoul)

Less More

- Posts: 1193
- Thank you received: 13
-
-

4 years 2 months ago [\#343787](#343787) by [verzevoul](/forum/user/8351-verzevoul "View verzevoul's Profile")  *[Maybe a bug or hacked website](/forum/3-bug-report/904826-maybe-a-bug-or-hacked-website#343787 "Hello! I have a website with 2 tables beeing spammed and causing a high load on he server. lad2y&#95;hikashop&#95;cart and lad2y&#95;hikashop&#95;cart&#95;product. I just truncated and in minutes i get thousand of lines. Can you please help?  small example:  Thank you")* was created by *[verzevoul](/forum/user/8351-verzevoul "View verzevoul's Profile")*

Hello!
I have a website with 2 tables beeing spammed and causing a high load on he server.
lad2y_hikashop_cart and lad2y_hikashop_cart_product.
I just truncated and in minutes i get thousand of lines.
Can you please help?

small example: Code:

INSERT INTO &#96;lad2y_hikashop_cart&#96; (&#96;cart_id&#96;, &#96;user_id&#96;, &#96;session_id&#96;, &#96;cart_modified&#96;, &#96;cart_type&#96;, &#96;cart_coupon&#96;, &#96;cart_currency_id&#96;, &#96;cart_payment_id&#96;, &#96;cart_shipping_ids&#96;, &#96;cart_billing_address_id&#96;, &#96;cart_shipping_address_ids&#96;, &#96;cart_name&#96;, &#96;cart_current&#96;, &#96;cart_share&#96;, &#96;cart_params&#96;, &#96;cart_fields&#96;, &#96;cart_ip&#96;) VALUES (1, 0, '55f35bc4e8f94f6856de0f3ee72955ef', 1660109492, 'cart', '', 1, 1, '147@0', 0, '', '', 1, 'nobody', '{}', NULL, '65.108.99.41'), (2, 0, '0719c47b2001884e570f273b1a92c3fc', 1660109493, 'cart', '', 1, 1, '1@0', 0, '', '', 1, 'nobody', '{}', NULL, '65.108.99.41'), (3, 0, 'b4ee3ae4fe8235dc014cc100a53e117f', 1660109493, 'cart', '', 1, 1, '1@0', 0, '', '', 1, 'nobody', '{}', NULL, '65.108.99.41'), (4, 0, '76aef90b79c5f02e3839f01b0f78ab06', 1660109494, 'cart', '', 1, 1, '147@0', 0, '', '', 1, 'nobody', '{}', NULL, '65.108.99.41'),

Thank you

Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzMtYnVnLXJlcG9ydC85MDQ4MjYtbWF5YmUtYS1idWctb3ItaGFja2VkLXdlYnNpdGU/dG1wbD1tYXJrZG93bg==) or [Create an account](/register) to join the conversation.

- **[verzevoul](/forum/user/8351-verzevoul "View verzevoul's Profile")**
- [![verzevoul's Avatar](https://www.hikashop.com/media/kunena/core/svg/person.svg)](/forum/user/8351-verzevoul "View verzevoul's Profile") Topic Author
- [ Offline](/forum/user/8351-verzevoul)

Less More

- Posts: 1193
- Thank you received: 13
-
-

4 years 2 months ago [\#343788](#343788) by [verzevoul](/forum/user/8351-verzevoul "View verzevoul's Profile")  Replied by *[verzevoul](/forum/user/8351-verzevoul "View verzevoul's Profile")* on topic *[Maybe a bug or hacked website](/forum/3-bug-report/904826-maybe-a-bug-or-hacked-website#343788 "Hello! I have a website with 2 tables beeing spammed and causing a high load on he server. lad2y&#95;hikashop&#95;cart and lad2y&#95;hikashop&#95;cart&#95;product. I just truncated and in minutes i get thousand of lines. Can you please help?  small example:  Thank you")*

I tried to change db pass and cpanel , just in case but still after seconds a script runs and writes these rows.
I attached my error_log and found some logs for "mod_sj_hk_slider".
I disabled the modules and tried again truncate on these tables and stil after seconds rows were coming

Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzMtYnVnLXJlcG9ydC85MDQ4MjYtbWF5YmUtYS1idWctb3ItaGFja2VkLXdlYnNpdGU/dG1wbD1tYXJrZG93bg==) or [Create an account](/register) to join the conversation.

- **[Philip](/forum/user/34318-philip "View Philip's Profile")**
- [![Philip's Avatar](https://www.hikashop.com/media/kunena/avatars/resized/size144/users/avatar34318_2015-11-18-2.png)](/forum/user/34318-philip "View Philip's Profile")
- [ Offline](/forum/user/34318-philip)

Less More

- Posts: 4820
- Thank you received: 654
-
-

4 years 2 months ago -  4 years 2 months ago [\#343792](#343792) by [Philip](/forum/user/34318-philip "View Philip's Profile")  Replied by *[Philip](/forum/user/34318-philip "View Philip's Profile")* on topic *[Maybe a bug or hacked website](/forum/3-bug-report/904826-maybe-a-bug-or-hacked-website#343792 "Hello! I have a website with 2 tables beeing spammed and causing a high load on he server. lad2y&#95;hikashop&#95;cart and lad2y&#95;hikashop&#95;cart&#95;product. I just truncated and in minutes i get thousand of lines. Can you please help?  small example:  Thank you")*

Hello,

Can't be sure but did you check that you haven't some **MassAction** that are triggered regularly, or a **Cron task**?
On our side, we did not find to whom corresponds the term "**mod\_sj\_hk\_slider**"...
Can you maybe elaborate more around this error log? Or provide this error log (through the **[ Contact us](https://www.hikashop.com/support/contact-us.html)** form)
**Note :** In your message for our **[ Contact us](https://www.hikashop.com/support/contact-us.html)** form, add an **Url link to this topic**.

Awaiting your returns to progress on your subject.
Regards

Last edit: 4 years 2 months ago by [Philip](/forum/user/34318-philip "View Philip's Profile").

Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzMtYnVnLXJlcG9ydC85MDQ4MjYtbWF5YmUtYS1idWctb3ItaGFja2VkLXdlYnNpdGU/dG1wbD1tYXJrZG93bg==) or [Create an account](/register) to join the conversation.

- **[verzevoul](/forum/user/8351-verzevoul "View verzevoul's Profile")**
- [![verzevoul's Avatar](https://www.hikashop.com/media/kunena/core/svg/person.svg)](/forum/user/8351-verzevoul "View verzevoul's Profile") Topic Author
- [ Offline](/forum/user/8351-verzevoul)

Less More

- Posts: 1193
- Thank you received: 13
-
-

4 years 2 months ago [\#343810](#343810) by [verzevoul](/forum/user/8351-verzevoul "View verzevoul's Profile")  Replied by *[verzevoul](/forum/user/8351-verzevoul "View verzevoul's Profile")* on topic *[Maybe a bug or hacked website](/forum/3-bug-report/904826-maybe-a-bug-or-hacked-website#343810 "Hello! I have a website with 2 tables beeing spammed and causing a high load on he server. lad2y&#95;hikashop&#95;cart and lad2y&#95;hikashop&#95;cart&#95;product. I just truncated and in minutes i get thousand of lines. Can you please help?  small example:  Thank you")*

No there isn't any mass action.
After truncating yesterday after 24 hours I have 850 rows of these data like I showed you above.
Do you need access to check it?

Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzMtYnVnLXJlcG9ydC85MDQ4MjYtbWF5YmUtYS1idWctb3ItaGFja2VkLXdlYnNpdGU/dG1wbD1tYXJrZG93bg==) or [Create an account](/register) to join the conversation.

- **[lousyfool](/forum/user/28604-lousyfool "View lousyfool's Profile")**
- [![lousyfool's Avatar](https://www.hikashop.com/media/kunena/avatars/resized/size144/users/avatar28604.jpg)](/forum/user/28604-lousyfool "View lousyfool's Profile")
- [ Offline](/forum/user/28604-lousyfool)

Less More

- Posts: 2143
- Thank you received: 746
-
- [](http://www.inphase.one)
-

4 years 2 months ago -  4 years 2 months ago [\#343812](#343812) by [lousyfool](/forum/user/28604-lousyfool "View lousyfool's Profile")  Replied by *[lousyfool](/forum/user/28604-lousyfool "View lousyfool's Profile")* on topic *[Maybe a bug or hacked website](/forum/3-bug-report/904826-maybe-a-bug-or-hacked-website#343812 "Hello! I have a website with 2 tables beeing spammed and causing a high load on he server. lad2y&#95;hikashop&#95;cart and lad2y&#95;hikashop&#95;cart&#95;product. I just truncated and in minutes i get thousand of lines. Can you please help?  small example:  Thank you")*

Hi verzevoul,

"mod_sj_hk_slider" is for sure a SmartAddons extension: [ www.smartaddons.com/joomla-extensions/fr...?searchword=hikashop](https://www.smartaddons.com/joomla-extensions/free-extensions/search?searchword=hikashop)
However, I don't think -- can actually not imagine -- that this is causing the many carts.

The IP address 65.108.99.41 as of your initial post belongs to [ a US server of Hetzner Online GmbH](https://whoislookupdb.com/domain.php?domain=65.108.99.41) in Germany. Hetzner is notorious for bots on their servers. I had many, many of such "attacks" from them on clients' HikaShop sites, they simply create tons of carts within very short amounts of time (your initial posts shows e.g. 4 carts within 4 seconds from that same Hetzner IP).
And Hetzner is only one of many bots. I'm maintaining long lists of blocked bot IPs, haha.

Two things you can do:
1. If it annoys you, block the relevant IP addresses or address ranges in your .htaccess file. You find them in the backend cart listing, obviously. It's a bit of work, but over time it will become much, much quieter.
Or 2. if it doesn't annoy you too much and your server can take it (yours seem to be a bit on the "weaker" side if this affects its load critically), reduce the "Cart retaining period" in the HikaShop configuration to something like 3 days or so, so that carts are being auto-deleted once they are older than 3 days without an order created.

General side note: When blocking IPs, make sure you don't block [ "good" search engines like Google or Bing etc](https://myip.ms/info/bots/Google_Bing_Yahoo_Facebook_etc_Bot_IP_Addresses.html), of course. By the way, Microsoft's Bing often also creates carts, seemingly by often ignoring the "nofollow" attribute. Complaints have been filed already, but they do "add to cart" every now and then, still. One has to live with this, I guess.

---

Need help with customisations of layouts, style or other site development? [ PM me!](/component/uddeim/?task=new)
(Don't forget to turn on [ "E-mail notification of new messages"](/component/uddeim/?task=settings))

Last edit: 4 years 2 months ago by [lousyfool](/forum/user/28604-lousyfool "View lousyfool's Profile"). Reason: Links

The following user(s) said Thank You: [nicolas](/forum/user/63-nicolas "View nicolas's Profile"), [verzevoul](/forum/user/8351-verzevoul "View verzevoul's Profile")

Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzMtYnVnLXJlcG9ydC85MDQ4MjYtbWF5YmUtYS1idWctb3ItaGFja2VkLXdlYnNpdGU/dG1wbD1tYXJrZG93bg==) or [Create an account](/register) to join the conversation.

Board Categories HikaShop Install &amp; Update Product &amp; Category Display Content Creation Sales and Orders Orders management Reports &amp; Statistics Customers Checkout Payment Methods Shipping Methods Import &amp; Export (CSV, XLS…) Specific Features Affilation Taxes Wishlist Vote Carousel &amp; Slider Mass Actions Filters &amp; Search Discount &amp; Coupon Feature Request Integrations Showcase General Talk about HikaShop Development HikaShop 3.0 Beta Translation Commercial Jobs HikaShop Components HikaMarket Market: Feature requests Market: How to? Market: Bug Report HikaSerial General talk about HikaSerial Serial: Bug Report Serial: How to? Support en Français de HikaSerial (French Support) HikaSubscription HikaAuction Auction: Feature requests Auction: How to? Auction: Bug report Hikashop around the world Support en Français (French Support) Russian FAQ. Курс выживания с Hikashop. Частые вопросы и о Расширения Hikashop Наши сайты на Hikashop 日本語版サポート(Japanese Support) Thai German Archives Bug Report How to?

[](/forum/topics/feed/mode-topics?format=feed&type=rss)

Time to create page: 0.086 seconds

[Powered by](/forum/credits) [Kunena Forum](https://www.kunena.org)
