it seems to me, that the X-Forwarded-For is not used as intended.
I have in the oc_bruteforce_attempts table always the proxy ip.
i have tested the forwarded-for setting of the proxy with a little php script where i get my real ip on HTTP_X_FORWARDED_FOR
(I’m on nextlcoud 11.0.3)
Someone else can reproduce the same behavior?
am I missing a setting?