2024-05-18, 10:27 AM
(This post was last modified: 2024-05-18, 01:15 PM by brommeltje. Edited 1 time in total.)
I'm running 10.9.2 in docker on a debian server.
I have fail2ban setup to read the jellyfin logs and get triggered when it shows a few failed attempts, however, i recently noticed the IP addresses are no longer being logged.On a failed attempt my logs only show this:
[2024-05-18 11:36:44.084 +02:00] [ERR] [22] Jellyfin.Api.Middleware.ExceptionMiddleware: Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2024-05-18 11:38:14.950 +02:00] [ERR] [30] Jellyfin.Api.Middleware.ExceptionMiddleware: Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
Fail2ban is expecting a line like:
failregex = ^.*Authentication request for .* has been denied \(IP: "<ADDR>"\)\.
Is there a way to get those IP's back or is my install just broken and should it still post those lines?