SSH log lines
kremels at kreme.com
Mon Aug 3 19:38:06 UTC 2020
When some moon tires to login to an account like root, ssh does n’t log the IP address in the failure line as it does with non-existent users.
sshd error: PAM: Authentication error for root from vps-94314d13.vps.ovh.ca
sshd Connection closed by authenticating user root 188.8.131.52 port 46226 [preauth]
sshd Invalid user pi from 184.108.40.206 port 46438
Is there anyway that I can change this so that the IP address appears not eh same line as the Authentication error, it would make my blacklisting these people much easier.
I never wanted to do this in the first place.
More information about the freebsd-questions