Get ip-address from login attempts in log level warning

[TheDreadPirate]

You're using the filter as provided in our documentation, correct? If so, there should be an INF level log with the public IP of the failed login.

Code:

[2024-09-27 08:54:44.271 -04:00] [INF] [112] Jellyfin.Server.Implementations.Users.UserManager: Authentication request for "Chris" has been denied (IP: "[My Public IP]").

The filter we provide in our documentation looks for this line.

Code:

2024-09-27 08:54:44,274 fail2ban.filter         [1684]: INFO    [jellyfin-testing] Found [My Public IP] - 2024-09-27 08:54:44