In recent versions, with "LogLevel INFO", the following is logged:
Connection closed by 172.16.0.1 [preauth]
But setting "LogLevel VERBOSE" gives this:
Connection from 172.16.0.1 port 42049 on 172.16.0.2 port 22
Failed publickey for simon from 172.16.0.1 port 42049 ssh2: RSA ab:cd:ef:00:11:22:33:44:55:66:77:88:99:aa:bb:cc
Connection closed by 172.16.0.1 [preauth]
In recent versions, with "LogLevel INFO", the following is logged:
Connection closed by 172.16.0.1 [preauth]
But setting "LogLevel VERBOSE" gives this:
Connection from 172.16.0.1 port 42049 on 172.16.0.2 port 22 00:11:22: 33:44:55: 66:77:88: 99:aa:bb: cc
Failed publickey for simon from 172.16.0.1 port 42049 ssh2: RSA ab:cd:ef:
Connection closed by 172.16.0.1 [preauth]