A curl request blocks an ssh session

[AMG-A]

Describe the bug
A request like

curl -k -X GET "https://192.168.65.252/api/v2/version" -H "Authorization: Bearer "
or
curl -k -u 'admin:passwd!' "https://192.168.65.252/api/v2/system/version"

blocks a existing ssh session and this call is interfering with the firewall.

pfSense Version & Package Version:

• pfSense Version: 2.8.1-RELEASE (amd64)
• Package Version 26.3

Affected Endpoints:

curl -k -X GET "https://192.168.65.253/api/v2/firewall/alias" -H "Authorization: Bearer "

After the restart, the following error message appears

[26-Oct-2025 12:28:49 Europe/Berlin] PHP Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/pfblockerng/pfblockerng.inc:5333
Stack trace:
#0 /usr/local/pkg/pfblockerng/pfblockerng.inc(5556): pfb_collect_localhosts()
#1 /usr/local/pkg/pfblockerng/pfblockerng.inc(1024): pfb_daemon_filterlog()
#2 {main}
thrown in /usr/local/pkg/pfblockerng/pfblockerng.inc on line 5333
[26-Oct-2025 12:29:22 Europe/Berlin] PHP Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/pfblockerng/pfblockerng.inc:5333
Stack trace:
#0 /usr/local/pkg/pfblockerng/pfblockerng.inc(5556): pfb_collect_localhosts()
#1 /usr/local/pkg/pfblockerng/pfblockerng.inc(1024): pfb_daemon_filterlog()
#2 {main}
thrown in /usr/local/pkg/pfblockerng/pfblockerng.inc on line 5333

[jaredhendrickson13]

This behavior sounds like Login Protection's expected behavior, assuming those requests failed to authenticate at least. Are there any logs in the system or authentication log after this happens?

That crash report appears to be from the pfblocckerng package so it's likely unrelated.

[github-actions]

This issue has been automatically marked as stale because it has had no recent activity in the last 60 days.