SSH Login: One login failure for every successful login?

RouterOS General
1

Hi,

I noticed that with every SSH login (RouterOS 2.9.:sunglasses: there are two entries in the log file:

09:03:20 system,error,critical login failure for user admin from 
    192.168.2.100 via ssh 
09:03:27 system,info,account user admin logged in from 192.168.2.100 via ssh

The first one appears after entering the username, before password.
The second one appears after entering the password.

Have any body else noticed this behaviour??

seandsl

2

Yes, I have noticed this behaviour as well.

Tony

3

Not a bug.
most SSH clients try out empty passwor first to prompt you for one. So the first failure is empty password.