diff --git a/plinth/modules/matrixsynapse/data/etc/fail2ban/filter.d/matrix-auth-freedombox.conf b/plinth/modules/matrixsynapse/data/etc/fail2ban/filter.d/matrix-auth-freedombox.conf
new file mode 100644
index 000000000..498135e3d
--- /dev/null
+++ b/plinth/modules/matrixsynapse/data/etc/fail2ban/filter.d/matrix-auth-freedombox.conf
@@ -0,0 +1,7 @@
+[INCLUDES]
+before = common.conf
+
+[Definition]
+_daemon = apache-access
+prefregex = %(__prefix_line)s
+failregex = \S+ <HOST> - \S+ \[[^\]]*\] "POST /_matrix/client/.*/login HTTP/\S+" 403
diff --git a/plinth/modules/matrixsynapse/data/etc/fail2ban/jail.d/matrix-auth-freedombox.conf b/plinth/modules/matrixsynapse/data/etc/fail2ban/jail.d/matrix-auth-freedombox.conf
new file mode 100644
index 000000000..3fb52a559
--- /dev/null
+++ b/plinth/modules/matrixsynapse/data/etc/fail2ban/jail.d/matrix-auth-freedombox.conf
@@ -0,0 +1,4 @@
+[matrix-auth-freedombox]
+enabled = true
+port = http,https
+journalmatch = SYSLOG_IDENTIFIER=apache-access