https://bugzilla.mindrot.org/show_bug.cgi?id=2199
Bug ID: 2199
Summary: "Too many authentication failures for root" does not
log IP
Product: Portable OpenSSH
Version: 6.4p1
Hardware: All
OS: Linux
Status: NEW
Severity: enhancement
Priority: P5
Component: sshd
Assignee: [email protected]
Reporter: [email protected]
It would be useful if all log messages relating to authentication
failures would include the IP of the remote host.
In particular, the remote host is currently missing for the following
message:
> Disconnecting: Too many authentication failures for root [preauth]
Including the remote host would enable countermeasures against the
flooding of the logs, e.g. by employing a filter for fail2ban, which is
currently not possible because no IP address can be correlated with the
auth failures.
--
You are receiving this mail because:
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs
