I see failed authentication attempts are logged, but it would be useful if the client IP could be included in the message to help identify malicious access attempts. Then I could just deal with them with iptables.
I guess this might just mean appending client_addr to msg in http.py
thanks.