Blocking FAKE orders / Spam bots - brute force attack

Question

We are under attack. We had over 6K "public user" shopping carts in an hour. Some bot is attaching the site. Any ideas how to stop them, set a script for to many requests per minute? We need something as this is filling our shipping department with tons of junk orders and using up resource. It's almost a brute force attack.
*Using Odoo SH and Odoo 12

alex · Accepted Answer

use cloudflare...

Javier Ruiz Diez - 71341924H · Answer

please check:-
https://apps.odoo.com/apps/modules/18.0/recaptcha_signup [1]

[1] https://apps.odoo.com/apps/modules/18.0/recaptcha_signup

Russ Schneider · Answer

I've had this happen twice now.  Odoo12 CE.
You can see from the access logs numerous lines like this (X's are my own):
None [1] None [2] None [3] None [4] 45\.227\.254\.6\ \-\ \-\ $$27/Jan/2022:01:42:22\ \-0500$$\ "GET\ /shop/cart/update\?category=1459\&csrf_token=XXXXXXXXXXXXXXXXXXXe3d651o1638288418\&product_id=4XXX\&product_template_id=XXXX%27%29 UNION ALL SELECT NULL\-\- NFmu\ HTTP/1\.1"\ 405\ 178\ "\-"\ "Mozilla/5\.0\ $Windows;\ U;\ Windows\ NT\ 5\.2;\ de\-DE$\ AppleWebKit/532\.0\ \(KHTML

المنشورات ذات الصلة	الردود	أدوات العرض
How can I block an email or a contact from sending me a message ? phishing spam	1 نوفمبر 25	1356
How to remove "Create a free website with Odoo" from the footer? تم الحل remove spam	12 سبتمبر 22	48161
Emails at Spam destination email spam	0 سبتمبر 22	5218
Messages from Openerp in Outlook as phishing messages phishing spam	0 مارس 15	6021
Portal User Spam تم الحل user portal spam	6 مايو 25	3938

لقد تم الإبلاغ عن هذا السؤال

هل أعجبك النقاش؟ لا تكن مستمعاً فقط. شاركنا!