SSH log lines
idefix at fechner.net
Tue Aug 4 05:22:50 UTC 2020
Am 03.08.2020 um 21:37 schrieb @lbutlr:
> When some moon tires to login to an account like root, ssh does n’t log the IP address in the failure line as it does with non-existent users.
> sshd error: PAM: Authentication error for root from vps-94314d13.vps.ovh.ca
> sshd Connection closed by authenticating user root 220.127.116.11 port 46226 [preauth]
> sshd Invalid user pi from 18.104.22.168 port 46438
> Is there anyway that I can change this so that the IP address appears not eh same line as the Authentication error, it would make my blacklisting these people much easier.
try fail2ban, it can handle all of this correctly.
"Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning." --
More information about the freebsd-questions