After updating to Nextcloud 17, fail2ban stops working. Has something changed in the logfile? Does anyone have a working regex that works with Nextcloud 17.
Hi,
The log entries slightly changed and you need to modify your filter.
The new working filter is:
[Definition]
failregex= ^{"reqId":".*","level":2,"time":".*","remoteAddr":".*","app":".*".*","message":"Login failed: .* \(Remote IP: <HOST>\)".*}$
The filters are usually stored as *.conf files and can be found in /etc/fail2ban/filter.d/`
2 Likes
Thanks for the quick answer, works fine again