1 前言

一个问题，一篇文章，一出故事。
我们最近发现有用户因为输入错误的nextcloud分享连接密码而无法定性的问题，即我们无法通过日志确定用户是否输入了错误的密码，于是我们总结该解决方案。

2 最佳实践

2.1 环境信息

如何部署CentOS 8.x nextCloud？

2.2 最佳实践

2.2.1 解决方案

vim /var/www/nextcloud/config/config.php

修改日志的级别，

  'log_type' => 'file',
  'logfile' => '/var/log/nextcloud/nextcloud.log',
  'loglevel' => 1,
  'logtimezone' => 'Asia/Shanghai',
  'log.condition' =>

2.2.2 以错误密码访问共享连接

https://nextcloud.cmdschool.org/index.php/s/dFS38pSM93iF2ss

2.2.3 查看暴力破解产生的日志

grep "Bruteforce attempt" /var/log/nextcloud/nextcloud.log

修改日志的级别，

{"reqId":"F4vTpDvL4gQZcnAwha8s","level":1,"time":"2025-04-01T16:38:17+08:00","remoteAddr":"10.168.0.165","user":"--","app":"core","method":"POST","url":"/index.php/s/dFS38pSM93iF2ss/authenticate/showShare","message":"Bruteforce attempt from \"10.168.0.165\" detected for action \"publicLinkAuth\".","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0","version":"23.0.2.1"}