Topic: Mysterious guest with no IP and critical errors

[bluejay51]

I had not realized until sometime after the message had been sent the link in your signature. Please feel free to reply only at your convenience and thanks in advance for your help. Here then is the original post...

In spite of the removal of the cb|Email Login MOD (which I was hoping might correct a few issues), the mysterious guest with no IP address is continuing to rack up login attempts, repeatedly reaching the login threshold and then returning again and again causing critical errors in the logs and many more elsewhere.

Since this guest only seems to be affected by the login threshold, I was wondering if someone here could tell me how to change the number of seconds (currently 30) that members who pass the login threshold must wait to a different number. For example, how to change the 30 second wait time to something like 60 or 120, etc. Also, is there a way to automatically ban/block a guest after a certain number of failed login attempts?.

Thank you.

[butchs]

Maybe my post is a tad late.  I have been busy at work and have not visited as often as I used to...  But if Forum Firewall has both "Enable Testing", "Block Violations", "Logging" and "Enable IP Validation" checked and the visitor has an ipv4 address then the user will get blocked because it is using a reserved ip address.  A visitor can show up on the SMF log and still be blocked.  Next time you see it, check the Forum Firewall log around the date and time the visitor with the "Invalid ip".

I suggest looking into the "DOS Attack" option to rid yourself of the bot.

[Chas Large]

I get lots of error messages with no IP address and I remember somewhere in the dim distant past, this question was asked before, the answer being (I think) that these missing addresses were most likely IPV6 addresses which is why SMF does not show them.

I could be mistaken, "ze littel grey cells are not wat zey once were mon ami"

[cortez]

+1

I also started getting the exactly same thing in last couple of days. No changes to forum software in weeks.

Guest permissions, smf 2.0.6, no ip, security.php (default, with no changes to it by any mod) and line 831.

But it spams my error log heavily, like 1000-2000 entries per day. Could this be a bot?