Is there any way to block traffic to our website? ...
# suitecommercew
wes_w
10/28/2021, 2:16 PMIs there any way to block traffic to our website? We are currently under attack by a bot that is creating customer records (not Guest accounts) and trying hundreds of credit cards, which is causing our payment gateway to not take legitimate orders.
l
LMG
10/28/2021, 2:18 PMMaybe mark it as offline for maintenance?
s
Steve Goldberg
10/28/2021, 2:29 PMHi Wes. The standard response to this is to add a reCAPTCHA to before login, before register and before order submit events. We are working on adding a reCAPTCHA feature to the product in a future release, but in the meantime you can add one yourself if you feel confident or you can approach ACS who have a ready-made solution, or one of our partners.
You can also raise a case to let us know.
w
wes_w
10/28/2021, 2:29 PMI don't want to block all traffic, just this bot
wes_w
10/28/2021, 2:31 PMThanks Steve! I really hate CAPTCHA but it might be the best solution for this. I was really hoping there was a way to block traffic from outside the US, as our site will only ship domestically.
s
Steve Goldberg
10/28/2021, 2:33 PMHonestly, I'm not sure geoblocking would be effective. It's pretty easy nowadays to pretend to be from a particular region when visiting a website
w
wes_w
10/28/2021, 2:33 PMtrue, but it would require extra work on the attacker's side
wes_w
10/28/2021, 2:34 PMkind of like having an alarm sticker on your door without actually installing the alarm. The thieves will just go to an easier house
wes_w
10/28/2021, 2:45 PMI entered a support case. Maybe we can get on the short list for the reCAPTCHA solution
s
Steve Goldberg
10/28/2021, 2:46 PMWell, just to be clear, if you want it right now you can pay ACS for the solution; otherwise you're waiting for at least until the next release for us to implement something in the product (and I cannot promise anything)
w
wes_w
10/28/2021, 2:51 PMYeah I get it. I could try to create an extension, but I'm not sure where to start.
d
Dominic B
10/28/2021, 2:57 PMWe use Cloudflare CDN which helps mitigate issues like this. Possibly not something to do in the heat of the moment, but does just require changing nameservers to Cloudflare, then copying over DNS entries from your current domain host. I don't doubt Netsuite's CDN has things like DDoS protection, but there's obviously no user configuration - Cloudflare allows blocking on IP, geolocation and countless other options.
Dominic B
10/28/2021, 3:00 PMWe challenge all traffic from one particular country and it has all but eliminated bot issues.
Dominic B
10/28/2021, 3:02 PMIf your issues are coming from a single originating IP or netblock, you could possibly hard code a hack into shopping.ssp to check the visitor IP and throw an error if it's the attacker.
f
Flo
11/02/2021, 2:16 PMHi Wes,
Do you have a support case for this? I am pretty sure that with a support case the NS security team will be ok about blocking that IP address. Let me know the case number and I will check with them.
p
PlanetJupiter
11/02/2021, 4:21 PM@wes_w Not sure if this is allowed, but Anchor Group look to have a reCapture extension. https://www.anchorgroup.tech/netsuite-suitecommerce-google-recaptcha
w
wes_w
11/02/2021, 4:36 PM@Flo Support was less than helpful. All they told me is that they're adding me to the existing enhancement request for Captcha. Case# 4466974. Can support look into what IP addresses are creating junk leads and fraudulent transactions? My website was hit repeatedly last night from midnight to 5AM Eastern.
wes_w
11/02/2021, 4:36 PM@PlanetJupiter Thanks for the link. I'll check it out.
f
Flo
11/02/2021, 4:37 PMNo, I don´t think support has access to that, but they should have followed up with an issue record and talked with security.
Flo
11/02/2021, 4:37 PMLet me see what I can do.
w
wes_w
11/02/2021, 4:37 PMthanks Flo!
p
PlanetJupiter
11/02/2021, 4:37 PMIt's features like reCaptch that other providers have enabled via a simple checkbox in the Admin portal. SCA really do need to catch-up.
4 Views