is my site under sql injection attack?

Hi all,

I noticed in the log table the following:


If you notice the short message column and full message column there are lot of invalid parameters being passed in the page URL.

The customer id turned out to be a guest. The IP address is from USA (my store is based out of India)

There are approximately 12000 logs from this user in a single day. All random logs with different short messages.

Does this indicate that someone is trying to attack the web portal? How do i prevent/protect the store from this? My hosting provider is Everleap.com

Yes, it looks like you are being attacked.  Not necessarily "SQL injection" (as most of those messages are not SQL, but you'd have to look at the actual 'Page URL'  info logged on the message to get more info.)  Also, I see it's not from US, but from China:  https://whatismyipaddress.com/ip/23.225.203.179

In any case, you can use rewrite rules, or search the market place for an IP blocking plugin.  But note that the attacker could likely change to another server / different IP.  You may want to block the entire country if you don't expect business from them.