Advertisement:

Author Topic: Mysterious guest with no IP and critical errors  (Read 6611 times)

Offline bluejay51

  • Semi-Newbie
  • *
  • Posts: 85
Re: Mysterious guest with no IP and critical errors
« Reply #20 on: October 29, 2013, 03:24:03 PM »
I had not realized until sometime after the message had been sent the link in your signature. Please feel free to reply only at your convenience and thanks in advance for your help. Here then is the original post...

In spite of the removal of the cb|Email Login MOD (which I was hoping might correct a few issues), the mysterious guest with no IP address is continuing to rack up login attempts, repeatedly reaching the login threshold and then returning again and again causing critical errors in the logs and many more elsewhere.

Since this guest only seems to be affected by the login threshold, I was wondering if someone here could tell me how to change the number of seconds (currently 30) that members who pass the login threshold must wait to a different number. For example, how to change the 30 second wait time to something like 60 or 120, etc. Also, is there a way to automatically ban/block a guest after a certain number of failed login attempts?.

Thank you.
« Last Edit: October 29, 2013, 03:44:32 PM by bluejay51 »
Community operated support group for people living with anxiety disorders.
http://www.anxietyzone.com

Offline butchs

  • SMF Hero
  • ******
  • Posts: 1,728
  • Lost 7GB bandwidth!
    • EastCoastRollingThunder
Re: Mysterious guest with no IP and critical errors
« Reply #21 on: November 29, 2013, 09:35:57 PM »
Maybe my post is a tad late.  I have been busy at work and have not visited as often as I used to...  But if Forum Firewall has both "Enable Testing", "Block Violations", "Logging" and "Enable IP Validation" checked and the visitor has an ipv4 address then the user will get blocked because it is using a reserved ip address.  A visitor can show up on the SMF log and still be blocked.  Next time you see it, check the Forum Firewall log around the date and time the visitor with the "Invalid ip".

I suggest looking into the "DOS Attack" option to rid yourself of the bot.
I have been truly inspired by the SUGGESTIONS as I sit on my throne and contemplate the wisdom imposed upon me.

Offline Chas Large

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 3,108
  • Gender: Male
  • Running 2.0.xx on Apache.
    • Chas.Large on Facebook
    • https://www.linkedin.com/in/charles-large-568ba213 on LinkedIn
    • @https://twitter.com/ on Twitter
    • Chas Large's Site
Re: Mysterious guest with no IP and critical errors
« Reply #22 on: November 30, 2013, 06:20:24 AM »
I get lots of error messages with no IP address and I remember somewhere in the dim distant past, this question was asked before, the answer being (I think) that these missing addresses were most likely IPV6 addresses which is why SMF does not show them.

I could be mistaken, "ze littel grey cells are not wat zey once were mon ami" ;)
My Modifications :)  My Forum

Please DO NOT PM me with support requests. Post the problem in the appropriate Support Board so everyone can benefit from the advice given.

Offline cortez

  • Senior Translator
  • Jr. Member
  • *
  • Posts: 109
Re: Mysterious guest with no IP and critical errors
« Reply #23 on: November 30, 2013, 03:02:40 PM »
+1

I also started getting the exactly same thing in last couple of days. No changes to forum software in weeks.

Guest permissions, smf 2.0.6, no ip, security.php (default, with no changes to it by any mod) and line 831.

But it spams my error log heavily, like 1000-2000 entries per day. Could this be a bot?