@TimWardCam@c.im @jerry@infosec.exchange True. I did say it was tricky. If what ends up in the username field is not a valid username, then just log a failed attempt with the ip address but not the username field. The problem could happen today, just via simple user error. The logs will look fine if your password is the same as your username, such as admin/admin. /s