Nextcloud Snap - how to check for login attempts?

I’m curious to know if anyone else has been trying to log into my Nextcloud

Well, there’s your Nextcloud logs. :slight_smile:

Admin → Logging

Afaik, login attempts are not logged in nextcloud server log.

you must activate the audit logfile (as a file, not in syslog). Then you can monitor all login attempts with a jq-filter:

tail -F /path/to/audit.log | jq -r 'select(.message | test("Login|Logout")) | [.time, .remoteAddr, .user, .method, .url, .message, .userAgent] | join(" - ")'

Here I explained it more in deep:

Much luck,

1 Like