1

Since this morning there have been non-stop login attempts against a particular username -all of them failing. There are no active Apex Jobs or batches running and the debug logs are not producing any logs, so we are not sure who or what is responsible.

Login History (showing the last few attempts)

Login Time                  Source IP               Login Type      Status              Browser Platfor App Cli API Type        API Version Login URL   Community
12/1/2015 9:22:33 PM CST    Salesforce.com IP       Other Apex API  Login Rate Exceeded Unknown Unknown N/A N/A SOAP Partner    33.0         
12/1/2015 9:22:33 PM CST    Salesforce.com IP       Other Apex API  Login Rate Exceeded Unknown Unknown N/A N/A SOAP Partner    33.0         
12/1/2015 9:22:32 PM CST    Salesforce.com IP       Other Apex API  Login Rate Exceeded Unknown Unknown N/A N/A SOAP Partner    33.0         
12/1/2015 9:22:32 PM CST    Salesforce.com IP       Other Apex API  Login Rate Exceeded Unknown Unknown N/A N/A SOAP Partner    33.0         
12/1/2015 9:22:31 PM CST    Salesforce.com IP       Other Apex API  Login Rate Exceeded Unknown Unknown N/A N/A SOAP Partner    33.0         
12/1/2015 9:22:31 PM CST    Salesforce.com IP       Other Apex API  Login Rate Exceeded Unknown Unknown N/A N/A SOAP Partner    33.0         
12/1/2015 9:22:30 PM CST    Salesforce.com IP       Other Apex API  Login Rate Exceeded Unknown Unknown N/A N/A SOAP Partner    33.0         
12/1/2015 9:22:30 PM CST    Salesforce.com IP       Other Apex API  Login Rate Exceeded Unknown Unknown N/A N/A SOAP Partner    33.0         
12/1/2015 9:22:30 PM CST    Salesforce.com IP       Other Apex API  Login Rate Exceeded Unknown Unknown N/A N/A SOAP Partner    33.0

This is locking up the user due to maximum login attempts.

Improve this question
6
  • in the source IP you are getting Salesforce.com IP?
    – Tushar Sharma
    Commented Dec 2, 2015 at 3:42
  • That's right. It's copy pasted from Login History.
    – Mossi
    Commented Dec 2, 2015 at 3:43
  • 1
    then its look SF is running some maintenance and they are trying to enter in your org. But i am not total sure here.
    – Tushar Sharma
    Commented Dec 2, 2015 at 3:45
  • Seems kinda odd if it is salesforce that they are using and old API version (v33.0).
    – Eric
    Commented Dec 2, 2015 at 5:05
  • What other Apps you have installed? This happened to my Org because I had Marketo API connecting all the time after changing the password in Salesforce.
    – Ninja King
    Commented Dec 2, 2015 at 5:33

1 Answer 1

Reset to default
2

Turned out it was our Metadata API integration (called via a managed package).

Improve this answer
1
  • 2
    Glad you found it - a good reminder that to the extent possible, API integrations should get dedicated users for traceability purposes.
    – cropredy
    Commented Dec 4, 2015 at 1:44

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .