Occasionally I get notifications about failed login attempts from random places in the world. This is obviously concerning. I tried to turn on debug logging for auth and http.ban but even that didn’t tell me what usernames were used for the failed attempts.
Ideally I would like to be able to see a log of all successful and unsuccessful login attempts incl. username, timestamp, and IP, since it’s obviously much more concerning if someone tried to login using an existing username, and much more concerning if they actually successfully logged in.
At least I would like to be able to see the username that was used for a failed login attempt.