False positive login errors in owncloud.log

[kkw]

Hi,

Debian 12, OC: 10.14.0.3, only https connections.
My desktop app: ownCloud 4.2.0.11670, Libraries Qt 5.15.8, OpenSSL 1.1.1t 7 Feb 2023

It’s old thing. I’m trying to use fail2ban to secure OwnCloud instance.
Even though logins work correctly, the following errors appear in the log (owncloud.log) and cause fail2ban to work incorrectly. These errors occur at specific intervals, e.g. every two hours. From the ID provided, I concluded that they are generated by the desktop application. My desktop application, which also causes errors in the log, works normally. What can I do?

{“reqId”:“161e9bf7-7dfa-4bf6-b0c8-bf8afaa442ca”,“level”:2,“time”:“April 14, 2024 22:22:13”,“remoteAddr”:“(his ip)”,“user”:“(another user)”,“app”:“core”,“method”:“POST”,“url”:“/index.php/apps/oauth2/api/v1/token”,“message”:“Login failed: ‘xdXOt13JKxym1B1QcEncf2XDkLAexMBFwiT9j6EfhhHFJhs2KM9jbjTmf8JBXE69’ (Remote IP: ‘(his ip)’)”}
{“reqId”:“4daa153a-c782-43ba-b6cf-025be1fc038b”,“level”:2,“time”:“April 14, 2024 23:31:32”,“remoteAddr”:“(my ip)”,“user”:“(me)”,“app”:“core”,“method”:“POST”,“url”:“/index.php/apps/oauth2/api/v1/token”,“message”:“Login failed: ‘xdXOt13JKxym1B1QcEncf2XDkLAexMBFwiT9j6EfhhHFJhs2KM9jbjTmf8JBXE69’ (Remote IP: ‘(my ip)’)”}

[alfredb]

Interesting issue, unfortunately I cannot help. I’m using the Brute-Force Protection app.

[tom42]

Hey,

i think there is an open issue reported to the ownCloud people about this here:

Hourly Login failed in owncloud.log