Hola, Nextcoud community,
Nextcloud version 15.0.2)
Server Operating system and version Ubuntu 18.04 (on vultr VPS):
Client Operating system and version Pop!-OS 18.10 (self-installed on non-System76 laptop):
Apache version 2.4.29 (Ubuntu):
PHP version 7.2:
My issue:
Installed Nextcloud sync client on a Linux laptop (running Pop!-OS – System76’s tweaked version of Ubuntu). Got it set up and working, no issues. Days (weeks?) later, I finally noticed constant failed login attempts in my NC log … may have started immediately upon my sync client install, maybe later.
All failed logins are coming for my NC admin user, from my laptop’s IP address. I get anywhere from 1-4 login attempts at a time, every 10, 12, 15, or 20 minutes, but most commonly, every 30 minutes.
This behavior stops when I turn off the laptop, or disconnect it from the Internet (duh), but nothing else seems to stop it. I have now uninstalled and purged the Nextcloud sync client from that laptop … and it is still doing it.
There is a Nextcloud GUI sync connection wizard that keeps randomly popping up on the laptop screen, inviting me to connect to either my own, or a publicly hosted, NC instance … I have no idea where this wizard is coming from, nor how it got installed, nor how to remove it. I also don’t actually know if it is the culprit for the continuous failed login attempts – just assuming it’s the guilty party at this point.
I have multiple other sync clients working just fine with my NC instance, running on Linux Mint and on mobile (custom Android ROM) … though no other instances of Pop!.
Thoughts? Thanks in advance.
Is this the first time you’ve seen this error? Yes:
Steps to replicate it:
- Turn on laptop.
- Wait up to 30 minutes.
The output of your Nextcloud log in Admin > Logging:
{"reqId":"12345678987654321","level":2,"time":"2019-03-28T12:30:53+00:00","remoteAddr":"99.99.99.99","user":"--","app":"core","method":"GET","url":"/remote.php/webdav/","message":"Login failed: 'caretaker' (Remote IP: '99.99.99.99')","userAgent":"--","version":"15.0.2.0","id":"123456789"}
The output of your config.php file in /path/to/nextcloud
(make sure you remove any identifiable information!):
Skipping this ... pretty sure this is clientside issue, but I can add it if you like.
The output of your Apache/nginx/system log in /var/log/____
:
Skipping this, too, for now. 1) it's huge, and 2) I looked through it, and I'm not seeing any kind of relevant log entries on/about the time of the failed login attempts (and nothing at all in the error.log) -- although, y'know, I may just not understand what I'm looking at. Ask me if you think this is needed, and I'll post it.