An open API service indexing awesome lists of open source software.

https://github.com/patrickbr/piwik-loginfaillog

Simple Piwik plugin that logs failed login attempts. May be used for securing Piwik with fail2ban or similar tools.
https://github.com/patrickbr/piwik-loginfaillog

Last synced: 9 months ago
JSON representation

Simple Piwik plugin that logs failed login attempts. May be used for securing Piwik with fail2ban or similar tools.

Awesome Lists containing this project

README

          

# Piwik / Matomo LoginFailLog Plugin

## Description

This simple plugin enables logging of failed authentication attempts in Piwik / Matomo, nothing more, nothing less. Failed login attempts are logged like this:

```
WARNING LoginFailLog[2017-07-22 23:35:20] [b215d] Failed login from 172.217.22.227 with username 'patrick'.
WARNING LoginFailLog[2017-07-22 23:35:20] [b215d] Failed login from 172.217.22.227 with username 'patrick'.
```

This is useful if you want to secure your Piwik instance with fail2ban or similar tools that work on log files. For example, the following filter can be used with fail2ban to detect and count login fails:

```
# Fail2Ban configuration file for Piwik with LoginFailLog plugin

[Definition]
failregex = .* Failed login from with username .*
```

## Where is the log file?

If you have trouble finding the log file of Piwik / Matomo, take a look [here](https://matomo.org/faq/troubleshooting/faq_115/). Basically, you have to enable file logging and specify a log file path.

## Incompatibility problems because of Piwik / Matomo UTC logging

By default, Piwik / Matomo logs everything in UTC time. This is not configurable and may cause problems with fail2ban. If your fail2ban jail does not work, **try increasing the `findtime` option in your jail by the offset between your local timezone and UTC**.

## License

GPL v3 or later