mirror of
https://github.com/dani-garcia/vaultwarden.git
synced 2026-05-22 16:14:20 -05:00
wrong 2FA OTP Code produces logs without IP #4017
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @iBLtz on GitHub (Aug 16, 2019).
While playing with OTP, I noticed that when I typed the wrong OTP, the event was logged, but not the IP.
Could you print the IP in the log, so this could be used by fail2ban?
Could you adapt the sentance , so only one Jail from fail2ban is needed?
Example _:
or would it be prefered to add another Jail for this?
(OK, I think I have to install Rust and commit someday :D )
@dani-garcia commented on GitHub (Aug 18, 2019):
I think adding this makes sense, but using the same message would be confusing.
@dani-garcia commented on GitHub (May 13, 2020):
Ip is now included in
0807783388