# Registrar tentativas de login inválidas para Fail2ban e ação do servidor upstream

**URL:** <https://meta.discourse.org/t/log-invalid-login-attempts-for-fail2ban-and-upstream-server-action/171884>\
**Category:** Feature\
**Created:** [1 Dezembro , 2020 15:33 UTC](https://meta.discourse.org/t/log-invalid-login-attempts-for-fail2ban-and-upstream-server-action/171884 "2020-12-01T15:33:38Z")\
**Posts on this page:** 1\
**Showing post:** 9

<div class="post-metadata">

**Author:** ![jieiku](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jieiku/32/201699_2.png) [@jieiku](https://meta.discourse.org/u/jieiku)\
**Post date:** [20 Dezembro , 2021 16:38 UTC](https://meta.discourse.org/t/log-invalid-login-attempts-for-fail2ban-and-upstream-server-action/171884/9 "2021-12-20T16:38:39Z")

</div>

Olá @Falco, obrigado pela resposta. Verifiquei os logs imediatamente, uma tentativa de senha correta e uma tentativa de senha incorreta parecem iguais para mim (resposta 200):

(Sanitizei o endereço IP e o domínio, o resto está intacto)

senha errada:

```plaintext
[20/Dec/2021:08:07:31 -0800] "community.example.com" 10.111.222.33 "GET /session/csrf HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:95.0) Gecko/20100101 Firefox/95.0" "session/csrf" 200 1185 "https://community.example.com/" 0.016 0.017 "-"
[20/Dec/2021:08:07:32 -0800] "community.example.com" 10.111.222.33 "POST /session HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:95.0) Gecko/20100101 Firefox/95.0" "session/create" 200 1111 "https://community.example.com/" 0.552 0.550 "-"

```

senha correta:

```plaintext
[20/Dec/2021:08:24:50 -0800] "community.example.com" 10.111.222.33 "GET /session/csrf HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:95.0) Gecko/20100101 Firefox/95.0" "session/csrf" 200 1185 "https://community.example.com/" 0.020 0.020 "-"
[20/Dec/2021:08:24:51 -0800] "community.example.com" 10.111.222.33 "POST /session HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:95.0) Gecko/20100101 Firefox/95.0" "session/create" 200 2251 "https://community.example.com/" 1.216 1.216 "-"

```

Portanto, como ambos retornam uma resposta 200, você não pode usar isso para fail2ban, você banirá todos os usuários com senha boa ou ruim.

---

_[View the full topic](https://meta.discourse.org/t/log-invalid-login-attempts-for-fail2ban-and-upstream-server-action/171884)._