Rich N

I was pretty sure it worked for me on my home internet but maybe it was just in cache.. still not working for me. Refresh does sometimes re-load my site with me signed in. Front or back end. Invision Community site still has the same behavior as well. Maybe next release we will see a fix.

yep, I was just pointing out in this scenario. Where blocking India is not going to stop this wave.

The problem is it’s the time zone not the country. If they use a VPN and IP is US or UK or whatever… the time zone is Kolkata. This is certainly a red flag. I’m just assuming but we must be capturing time zone from the browser settings or users computer on submit. Or my theory is out the door, but where else is time zone coming from..

@maddog107_merged i think something would have to be done custom to push new signups with a certain time zone.. could maybe be something in the future for country watch filtering. I mean if Kolkata is the time zone for a US IP maybe we can mark it as a 3 or 4 the majority of mine, time zone is Kolkata but that’s not always case.

I think mine are up to date.. I’ll update just in case.

we are not getting that many but enough. are the accounts being activated, like they are verifying email? Also when you look at the time zone under the created profile what is is? im just curious I get a few account attempts with same ups which vary all over the world but the time zone is 98% Kolkata. Ive turned on manual verification for now. Im guessing the timezone is being sent from the users device regardless of there vpn location.. which makes me think maybe we could create a filter for this to flag users further. This would have stopped accounts that got in to start posting. 🤷🏼‍♂️

we got hit again. just updated to hcaptcha, see how that goes. i believe its the same source as the other day. although IPs are bounced and from all over, Timezone is always Kolkata or Karachi. saw some of the same domain emails as well.

@Chris59 if you login and get the error.. then hit refresh does your site load with you logged in?

interestingly... I can now from home internet which I could not last night but when I use my iPhone on cell network it presents the error.

Weirdly this seems to be working on my site and Invision today?! @Chris59 is Apple Sign in working for you now?

We got hit pretty hard this morning on account sign ups. Settings in place did pretty well 41 sign ups and 13 made it in. I pumped up to reCAPTCHA V2 so hopefully that breaks there bot or whatever is going on. Looking over things and the reason for my post, is there are 2 level 3's in the log. This should flag them for manual approval, only 1 of them was actually flagged. the other made it in and they signed in with Google. Made a post to new member section. The other one that was actually flagged for approval was not a google sign in and worked correctly. A few others from Google Sign in that got in ok as level 1 This might be something you guys want to look in to, mainly why a level 3 bypassed admin manual approval with google sign in and made it in the forums to post without admin approval. Im not deleting anything yet so if you want to get in and take a look.

As noted it’s the same behavior on invision community forum as well with Apple sign in. At least for me..

thanks Stuart, turned ModSecurity back on and found the google login errors in log and got the ID: 210580 and added it to white list.. seems to be ok. I guess I should look in to that ID Rule and maybe adjust it.

im getting this on Invision Site with Apple Login. As well as my site.

looks like Modsecurity blocking Cloudflare proxy.. For testing I turned off ModSecurity and google seems to work fine. however Sign in with Apple, is back to where it was. It does sign me in but it redirects me to a Can't open page, with a reload button. If I click the reload button it loads the site fine with me logged in. I just saw a related post. https://invisioncommunity.com/invision-community-5-bug-tracker/507-livesiteapple-sign-in-error-redirection-r1095/?&tab=comments#comment-272024 I'll follow that.