74 Eastbourne Rd ROBOROUGH EX14 5HN
Anyone know anything about the fake orders in woocommerce on wordpress using an address 74 Eastbourne Rd ROBOROUGH EX14 5HN
Update: 20/01/2021
I had a comment from a postal worker today saying they are getting about 20 parcels and letters a week which are being sent to the fake address in Honiton the EX14 postcode area.
It goes to show that store owners are not being careful enough when checking addresses before sending items out, if you have sent a product to the fake address and not received it back, try contacting the Honiton sorting office.
Update 05/11/2020
It looks likes it adds them as a User to your WordPress installation
They are listed as a Customer – The username added to my site was bbbbb bbbbb
Looks like they are looking for weaknesses to exploit – More about it on WordPress Support Forum here – https://wordpress.org/support/topic/failed-orders-fake-information/
Update 01/01/2021
More information can now be found here – https://developer.woocommerce.com/2020/11/05/woocommerce-4-6-2-fix-release/
Judging by recent comments it looks like this is spreading and becoming more common.
I also had it happen to another of my little test sites again with another fake order coming though using the 74 Eastbourne Rd ROBOROUGH address.
One of the commenters below also reports that his site was hacked with an SQL injection
What to do about the Fake Orders – What I have done
It’s pretty easy to spot that they are fake Woocommerce orders so you can just cancel them, another thing to note though is it creates a new User in your WordPress Admin panel.
Rather than just deleting this user what I did was edit the User to change the email address, change the password and at the same time ensure they are logged out of all locations.
Let me know if it has happened to you and what you have done in the comments below
Comments are closed.
Recent Posts
- Frosty Morning in Honington
- BlackBand Relaunched
- Google Page Experience FAQ
- Local Search
- Lowest Fantasy Football Score by Player in Single Game -7 Jan Bednarek
- VW Campervans for Sale in Warwickshire
- Digital PR Specialist
- Campervan Hire Holidays UK 2021
- TSO Host Scam TsoHost TSO-host Team
- Have musicMagpie Stopped Selling on Amazon?
- You Are Not Alone Emeli Sande Jeremy Corbyn
- Campervans and the UK Staycation Boom
- Google Local Search
- VW Campervan Hire Midlands
- Campervan Hire Directory
- 74 Eastbourne Rd ROBOROUGH EX14 5HN Fake Orders
- Vaccinated Nurses Calling in Sick After Receiving COVID Vaccinations
- South Birmingham Locksmith
- Fantasy Football Weeks 18 and 19
- UK Small Business Directory Moving to New Server
- Proposed Tunnel Under River Avon at Stratford-upon-Avon
- Free SEO Advice & SEO Tips
- Missing the Google URL Submission Tool
- Optimize for The Searchers Intention & Neural Matching
- Google Business Finder
Search by business category starting with the letter -
Just had the same thing on one of the websites I manage.
Yes had two, one was 28th Oct the other was 27th Oct.
ME TOO! The first order was rejected straight away but this one says the payment was successful so I’m unsure how to go about it.
Yes I have had this 5 times over the last 2 weeks and then another just today. the order name and address details are exactly as you described.
Yup, I had this too, dated 27th Oct with same details.
The same thing happened on my site. The exact same address and username, etc. The transaction was cancelled on their end though.
I have this on my website!
2x order that has been cancelled by:
bbbbb bbbbb
bbbbb
74 Eastbourne Rd
ROBOROUGH
EX14 5HN
United Kingdom (UK)
Email address:
ffqxuohtcvdk@abbuzz.com
Phone:
078 1369 7987
Yes I’ve had it twice on my website. Has anyone informed Woo Commerce?
@David
There is a post on the WordPress support forum https://wordpress.org/support/topic/failed-orders-fake-information/ so I assume they are aware of it.
Just had this for the second time too with the following details:
bbbbb bbbbb
bbbbb
74 Eastbourne Rd
ROBOROUGH
EX14 5HN
Email address:
adbxaasulia@mail.com
Phone:
078 1369 7987
Just had this on my site too. In the last few minutes.
Will cancel the order
On my website too only a few hours after I updated woocommerce from a staging site. The site has not yet been set up properly, not operational, I haven’t even listed the site in google.
I’ve had one too that placed an order here on December 30th
bbbbb bbbbb
bbbbb
74 Eastbourne Rd
ROBOROUGH
EX14 5HN
United Kingdom (UK)
078 1369 7987
Yes this has happened to me several times with this “person”. I’ll block them.
Hi Chris. How do I go about blocking them…I’m quite new at this business thing lol
I’ve had a failed order on my website at 3.08 this morning l.
Yep me too today at 3.30pm
bbbbb bbbbb
bbbbb
74 Eastbourne Rd
ROBOROUGH
EX14 5HN
Email
tawlggusskam@abbuzz.com
Phone
078 1369 7987
Payment via
PayPal
I got two FAILED orders back to back this evening, 30 December, same details listed elsewhere here. The attempted orders were for the same product in this instance (not a new product as some have noted).
I also had several failed attempts from the same source some months ago.
Woocommerce is up date on my site, BTW.
just had the same order… and it says payment done.. when I dont even have my bank details on it.
This.these filth has/have been doing this to several of my Woocommerce shops since mid 2020. The hacker eventually took a site down in November using a sql exploit that i couldn’t heal… Site’s db completely rifled with porn links…. Not a single db item was left untouched.
So if he/she/they is/are sniffing around ur shop… wake up. this/these folk/folks have no conscience. The site he/she/they took down is projectorrepair.uk.
Michael, did they attempt to contact you and demand payment in exchange for ‘restoring your site’ anything like that? Curious if they amateurs trying ransomware or just malicious aholes
Yes has been happening to me..same details as mentioned above…4 /5times now and it gets rejected straight away…
Anyone know how to block this person please/
Just experienced two fake orders on December 31:
bbbbb bbbbb
bbbbb
74 Eastbourne Rd
ROBOROUGH
EX14 5HN
078 1369 7987
clahqugtbkda@abbuzz.com
Billing address
bbbbb bbbbb
bbbbb
74 Eastbourne Rd
ROBOROUGH
EX14 5HN
078 1369 7987
plkmfpehurjh@abbuzz.com
this has happened twice in two days for the same latest listed item
Have received same details as above today (or last night as 12.30am), but order failed. Let me know how I can block them PLEASE.
Same thing happened to me – they have ‘ordered’ before but 31st Dec & 1st Jan. I have changed their password and deleted the user
just got a fake order today from the same people.
The same too on my site. It failed.
Same thing they ordered cash and local pick up. I’m in Hawaii.
Also had the same ‘person’ trying to order – failed 3 times. Order IP address is located in the USA. We only sell a very limited number of items with little likelihood of repeat orders so took a conscious decision not to allow customers to create accounts – in retrospect this seems like a very good decision.
Just had the same as the above, same user name, address & phone number via Woocommerce plugin on our site.
No WordPress users added but have deleted the orders.
Wordfence is picking up lots of attempts by these users.
You should report abuse to the domain host, and email host for appropriate action.
You can find the email host using mxtoolbox, and the domain host using most domain purchasing websites. I use 1stdomains.nz
If you get onto any new ones fast it will help.
Hi guys, had exactly the same as yourselves. Installing Woo Manage Fraud Orders plugin seems to work, just tested it on my personal email and it restricted me placing an order. I understand they can easily use different details but at least you can block the details they have already used such as mobile number, email address, name etc. There are two plugins, the one I’m on about has 12 reviews and 700+ downloads. All the best!
We received notifications from Stripe of TWO ‘failed’ orders that were placed yesterday_ using exactly the same details mentioned in above comments
yes me too 3 times now
I’m a postal worker in Honiton, UK. Our towns postcode is EX14, and we keep getting parcels and letters with this address. All we can do is return to sender. I’d say we get about 20 items a week.
Thanks Postie,
Just goes to show that a lot of small store owners could be getting tricked in to sending products out without even receiving payment for them.
What happens to the parcels if there is no return address?
Is there an actual address – 74 Eastbourne Rd ROBOROUGH ?
I’m seeing this too. They are using Digital Ocean (IP 68.183.8.48) for the failed Stripe orders on my sites. As they are using Go-http-client/1.1, I blocked that at Cloudflare using a worker, but you could use Wordfence’s user agent block instead.