Strange Log Errors

For the last few days I have been getting some strange Indigo Event Log errors. These errors seem to occur at a random time about once a day with not much else going on. The referenced URL (185.53.91.24) seems to be blacklisted, and as far as I know is not referenced in any of my plugins or scripts. Anyone have any idea regarding what is going on? Example error log follows:

Code: Select all

Apr 8, 2019 at 1:02:15 AM
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Client authentication failed - bad XML received (185.53.91.24)
   Client disconnected (185.53.91.24)
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 1 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 1 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 1 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 2 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: syntax error
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: syntax error
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: syntax error
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: syntax error
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: syntax error
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: syntax error
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: syntax error
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 1 of line number 1.
   Error                           XML Parse Error: syntax error
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: syntax error
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: syntax error
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: syntax error
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: syntax error
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: syntax error
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: syntax error
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: unclosed token
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: syntax error
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: unclosed token
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: no element found
   Error                           On character 1 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           XML Parse Error: not well-formed (invalid token)
   Error                           On character 0 of line number 1.
   Error                           socket client key does not exist

Looks to me like someone is trying to gain access to your Indigo Server:

Code: Select all

Client authentication failed - bad XML received (185.53.91.24)
Client disconnected (185.53.91.24)

[jay (support)]

Note: this kind of attack will most likely only happen if you've opened up a port on your router to let Mac client traffic through (port 1176). You can stop it by closing that port.

Do you have a recommendation of a port to use for Indigo remote client access if I close port 1176?

[matt (support)]

If you need remote Indigo client access (from the macOS client, not just Indigo Touch) then you'll have to leave a port open. You can change which port is open on your router though (and just have that port forwarded to 1176 on the Mac). You can change Indigo's port number as well, but really in this case what might help is changing the port number it is mapped to on the router. Even then it might not help if the attacker (more likely a bot) is just scanning all available ports. Some routers will have the smarts to shutdown those types of scans. Lastly, you could try to get your cable/DSL modem to get (renew) a new IP address. That might avoid the problem and be the easiest sol'n.