[Bug 2199] New: "Too many authentication failures for root" does not log IP

[bugzilla-daemon at mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=2199

            Bug ID: 2199
           Summary: "Too many authentication failures for root" does not
                    log IP
           Product: Portable OpenSSH
           Version: 6.4p1
          Hardware: All
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: sshbugzilla.apriori at spamgourmet.com

It would be useful if all log messages relating to authentication
failures would include the IP of the remote host.

In particular, the remote host is currently missing for the following
message:
> Disconnecting: Too many authentication failures for root [preauth]

Including the remote host would enable countermeasures against the
flooding of the logs, e.g. by employing a filter for fail2ban, which is
currently not possible because no IP address can be correlated with the
auth failures.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.