Where can I find log entry for failed webgui login attempt?


Since I have my urbackup server open to the web, I would like to setup a fail2ban jail that bans an IP if there are a certain number of failed login attempts.

Fail2ban looks through log files like /var/log/auth.log, /var/log/messages, etc. to find these failed login attempts.

My question is: if a user attempts to login on the web interface and fails, is that captured in any log file? I’m under the impression that /var/log/urbackup.log and /var/log/urbackup-client.log are only used for backup related purposes.

Thanks in advance for any help.

Currently only successful logins are logged to the database.

I added logging to auth-syslog. Will be in the next version:

since adding this feature, I have been able to create a custom filter for fail2ban and block malicious IPs.

thanks a lot Uroni