Originally Posted by
lopinc1
You log the failed passwords from failed login attempts in a log in clear text? That's not something you should be able to see. What about successful attempts, are those passwords logged as well?
Yes as soon as we noticed what what happening we started logging everything from those IPs.