nobody can access login page

[autoescala]

Hello, since yesterday, noboy can login to my forum!!

I can't access to the CP admin panel, and some users can post if they have remember the credentials, but they can't access to private messages, etc.

Every time I try to login my account is blocked, and this happen with all users.. with different browsers or clients

any idea how to fix this? We are very scared

PD: I use 4.2.2 version

[Dragonsys]

did you edit your cookie settings recently, or your .htaccess?

[autoescala]

nope...

I disable hooks but nothing happen!

[Maghrebia]

I hope for you sombody know this problem to fix it.

[Dragonsys]

delete your cookies and try again. If it still doesn't work log into your database, open the settings table and search for %cookie% and post the info you find.

Can you share a link to your site?

[Lynne]

Did you, or your host (please ask them - do not guess about this), change ANYTHING on the server just before this happened?

[autoescala]

The problem is intermitent, this morning can access to log during 1h or less, now I had the same problems

--------------- Added [DATE]1450181356[/DATE] at [TIME]1450181356[/TIME] ---------------

If I truncate the strikes table on DB, I can login again! but the thing is in this table appear all the users blocked with same ip, a private ip!!!!



striketime

strikeip

username






1450179594

127.0.0.1

grupoB



1450179565

127.0.0.1

grupoB



1450179531

127.0.0.1

El Castor



1450179539

127.0.0.1

grupoB



1450179519

127.0.0.1

Nombre de Usuario



1450180557

127.0.0.1

HoseaPilpe



1450180460

127.0.0.1

LashayPeac



1450177412

127.0.0.1

GolfilloGTI



1450177648

127.0.0.1

B.i.k.e.r.



1450178553

127.0.0.1

davidmataro



1450178590

127.0.0.1

davidmataro



1450179369

127.0.0.1

grupoB



1450179427

127.0.0.1

grupoB



1450179508

127.0.0.1

f_speed



1450179510

127.0.0.1

grupoB



1450178444

127.0.0.1

davidmataro



1450178224

127.0.0.1

Javier



1450178298

127.0.0.1

davidmataro



1450179126

127.0.0.1

grupoB



1450179127

127.0.0.1

LashayPeac

[Dragonsys]

127.0.0.1 is local host. meaning someone/something is trying to access the user accounts from your server, You need to contact your host support and get them looking at the logs asap.

[Dave]

Are you using some kind of proxy server perhaps? Or something like Cloudflare/Incapsula?
It affects the $_SERVER['REMOTE_ADDR'] value, you'll have to edit config.php or includes/class_core.php to use the right IP header if that's the case.

[autoescala]

Originally Posted by Dave

Are you using some kind of proxy server perhaps? Or something like Cloudflare/Incapsula?
It affects the $_SERVER['REMOTE_ADDR'] value, you'll have to edit config.php or includes/class_core.php to use the right IP header if that's the case.

My hosting migrates to a new server, and now is using some kind of proxy.


What I have to edit/replace ??

I try this guide: https://support.cloudflare.com/hc/en...with-vBulletin

But doesnt work with my 4.2.0 !

Regards