nextcloud / suspicious_login

Detect and warn about suspicious IPs logging into Nextcloud
GNU Affero General Public License v3.0
84 stars 25 forks source link

Detects non-suspicious logins as suspicious #938

Open kale1d0code opened 1 week ago

kale1d0code commented 1 week ago

How to use GitHub


Steps to reproduce

  1. Login from the same location (ip address)

Expected behaviour

To Sign in without notification Tell us what should happen

Actual behaviour

Sign-in with notification stating my ip address is suspicious Tell us what happens instead, if possible also add a screenshot

Server configuration

Web server: Apache/Nginx nginx

Database: MySQL/Maria/SQLite/PostgreSQL mariadb

PHP version: 8.1/8.2/8.3 8.3

Nextcloud version: (see Nextcloud admin page) 29.07

List of activated apps ``` If you have access to your command line run e.g.: sudo -u www-data php occ app:list from within your Nextcloud installation folder ```
Nextcloud configuration ``` If you have access to your command line run e.g.: sudo -u www-data php occ config:list system from within your Nextcloud installation folder ```

Browser

Browser name: Firefox/Chrome/Safari/…

Browser version: 124/125/…

Operating system: Windows/Ubuntu/Mac/…

Browser log ``` Insert your browser log here, this could for example include: a) The javascript console log b) The network log c) ... ```
ChristophWurst commented 3 days ago

Steps to reproduce

1. Login from the same location (ip address)

Could you be a bit more precise?

What time frames are we talking? Did the daily model training job have a chance to learn your latest IP address(es) or did you just log in twice from a new IP address within a few minutes/hours?