Hello,
in my logs, I received this warning:
Trusted domain error. "107.182.128.20" tried to access using "XXX.XXX.X.X:XXX" as host.
Other IPs include:
- 142.54.177.164
- 2.56.59.10
These IPs does not belong to my so I checked them and AbuseIPDB says:
This IP was reported 1,226 times. Confidence of Abuse is 100%
Do I have to take any measures except keeping my Nextcloud up to date, which it is (NC 24, php8.1, no security & setup warnings, ncp)?
Many thanks!
1 Like
Keeping Nextcloud and your system up to date is one thing.
https://geekflare.com/secure-web-application-server/
1 Like
I also just discovered the app GeoBlock for NC.
It may not solve the problem for everyone but by blocking USA (the origin of this IP), it works for me so far since I am not operating from there. My logs showed that the IP tried to access my server every 15 minutes but now, no more log warnings.
The integrated fail2ban of nextcloudpi is also a good tool for such a case
1 Like