aureport shows "Number of failed logins" increased after successful ssh login
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
audit (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
aureport version 2.8.5
Ubuntu 20.04 LTS
Using ssh to login to the system and then evuating aureport shows the "Number of failed logins" increased - every time I repeat ssh.
When I use a wrong password the "Number of failed logins" and the "Number of failed authentications" increases.
Summary Report
=======
Range of time in logs: 01/01/70 00:00:00.000 - 25/04/22 12:43:35.847
Selected time for report: 01/01/70 00:00:00 - 25/04/22 12:43:35.847
Number of changes in configuration: 0
Number of changes to accounts, groups, or roles: 0
Number of logins: 5
Number of failed logins: 10
Number of authentications: 8
Number of failed authentications: 5
Number of users: 6
Number of terminals: 9
Number of host names: 3
Number of executables: 5
Number of commands: 1
Number of files: 0
Number of AVC's: 0
Number of MAC events: 0
Number of failed syscalls: 0
Number of anomaly events: 0
Number of responses to anomaly events: 0
Number of crypto events: 0
Number of integrity events: 0
Number of virt events: 0
Number of keys: 0
Number of process IDs: 27186
Number of events: 163290
Regards