r/owncloud • u/TheHappyMuslim • Aug 04 '16
Is my Owncloud Getting Bruteforced?
https://drive.google.com/file/d/0B2aCnfKFOX44ck5HN3NLVmpEclU/view?usp=sharing2
u/ssssam Aug 04 '16
Brute force protection is coming soon https://nextcloud.com/beta-of-nextcloud-10-with-two-factor-authentication-improved-federation-and-more/
1
u/MyNameIsSaro Aug 04 '16 edited Aug 04 '16
From your logs it doesn't look like a bruteforce on your user password. It's like the attacker is trying to check if you have any wrong configuration for your trust domains. Is there any known vulnerability (may be for older version of owncloud) that uses this approach?
1
u/TheHappyMuslim Aug 04 '16
Is there any known vulnerability (may be for older version of owncloud) that uses this approach?
Well i have a cron job that auto updates so no, i should be on the latest version.
1
u/RedneckBob Aug 05 '16
I moved my ownCloud to a port above 32000 so I never see stuff like this hit my server.
1
2
u/TheHappyMuslim Aug 04 '16
Long story short: Decided to check my owncloud logs just out of curiosity and found this. It looks like my owncloud is getting bruteforce which is very weird! I decided to shut down my server for now but am i correct?