SSH log lines

@lbutlr kremels at
Mon Aug 3 19:38:06 UTC 2020

When some moon tires to login to an account like root, ssh does n’t log the IP address in the failure line as it does with non-existent users.

sshd[99328] error: PAM: Authentication error for root from
sshd[99328] Connection closed by authenticating user root port 46226 [preauth]

sshd[7202] Invalid user pi from port 46438

Is there anyway that I can change this so that the IP address appears not eh same line as the Authentication error, it would make my blacklisting these people much easier.

I never wanted to do this in the first place.

More information about the freebsd-questions mailing list