[TYPO3-english] Many 'Login-attempt from %s (%s), username '%s' not found!!' records inside sys_log table

Jerome P portal.j at hotmail.fr
Sun Aug 23 01:15:10 CEST 2015


Hi everyone,


I just realized that there is a problem on 2 TYPO3 instances (the first is 4.5.25, the second is 6.2.12) : the sys_log table is litterally filled with 'Login-attempt from %s (%s), username '%s' not found!!' records, they represent more than 80% of sys_log ! And i don't know why/how...

About the content of each of these records, it's the same on the 2 instances, for the following columns :

details : 'Login-attempt from %s (%s), username '%s' not found!!'
userid : 0
action : 3
error : 3
tablename : (empty field)
type : 255
details_nr : 2
workspace : -99

For the "IP" column, it seems it contains the backend user IP ; however, users never have to "reconnect" to the BE (there are no connection problems, they don't loose connection).

I also saw that, for a given IP, there are entries every 2 to 33 seconds ! (but only when the user is logged in, it seems)

Lastly, I saw that the "log_data" column of these entries could be of 7 different types :

a:3:{i:0;N;i:1;N;i:2;N;}
a:3:{i:0;N;i:1;s:0:"";i:2;N;}
a:3:{i:0;s:13:"10.20.30.40";i:1;s:0:"";i:2;N;}
a:3:{i:0;s:14:"10.20.30.40";i:1;N;i:2;N;}
a:3:{i:0;s:14:"10.20.30.40";i:1;N;i:2;s:0:"";}
a:3:{i:0;s:14:"10.20.30.40";i:1;s:0:"";i:2;s:18:"myusermail (at) foo.com";}
a:3:{i:0;s:13:"10.20.30.40";i:1;N;i:2;s:7:"myuserlogin";}:
(note : there isn't 10.20.30.40 each time, it's only to show that the user IP is here)

I really don't understand what may cause that, especially since the 2 TYPO3 instances are working correctly.

Does anyone have any idea/explanation about this ? I'm quite lost... (and my friend Google didn't really help)


Thank you in advance !


More information about the TYPO3-english mailing list