projectmyst Posted August 23, 2020 Share Posted August 23, 2020 Hi I know failed logins get logged on the database, but is there a way to log failed logins to the admin section on a login.log? The reason for this is because I want to setup a rule for fail2ban. I'm just looking for some things like: failed to login user test@test.com from 192.168.1.1 any help would be appreciated. 0 Quote Link to comment Share on other sites More sharing options...
WHMCS Dan Posted August 23, 2020 Share Posted August 23, 2020 Hi, Admin login failures should be logged to the activity log (tblactivitylog) - could you perhaps query this for the failed login data you're looking for? 0 Quote Link to comment Share on other sites More sharing options...
projectmyst Posted August 23, 2020 Author Share Posted August 23, 2020 As far as I'm aware fail2ban can only query .log files, I don't thinking you can setup fail2ban filters using database. 0 Quote Link to comment Share on other sites More sharing options...
DennisHermannsen Posted August 23, 2020 Share Posted August 23, 2020 See this: https://developers.whmcs.com/hooks-reference/admin-area/#authadmin You could log the failed attempts using that hook. 0 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.