Could someone add this to the next release please?
org.jivesoftware.openfire.net.SASLAuthentication
before
Line 288
Log.info("User Login Failed. " + e.getMessage());
after
Log.info("User Login Failed. " + e.getMessage() + " " + session.getHostAddress());
//add try/catch around this line, because getHostAddress() might throw an exception
Enable fail2ban to monitor openfire login logs.
THX