[错误] SSH 登录 IP 变化警报未按预期工作

2026-09-15T22:20:36.523331+08:00 [SERVER] sshd[4036900]: Accepted publickey for [USER] from [IP_A] port 47138 ssh2: RSA SHA256:[SSH_KEY_FINGERPRINT] 2026-09-15T22:20:36.527185+08:00 [SERVER] sshd[4036900]: pam_unix(sshd:session): session opened for user USER by (uid=0) 2026-09-15T22:20:37.064356+08:00 [SERVER] sshd[4036900]: pam_env(sshd:session): deprecated reading of user environment enabled 2026-09-15T22:20:37.066930+08:00 [SERVER] sshd[4036900]: fatal: ssh_packet_send_debug: send DEBUG: Broken pipe 2026-09-15T22:20:37.067075+08:00 [SERVER] sshd[4036900]: pam_unix(sshd:session): session closed for user [USER] 2026-09-15T22:20:38.713556+08:00 [SERVER] sshd[4036923]: Accepted publickey for [USER] from [IP_A] port 47140 ssh2: RSA SHA256:[SSH_KEY_FINGERPRINT] 2026-09-15T22:20:38.716954+08:00 [SERVER] sshd[4036923]: pam_unix(sshd:session): session opened for user USER by (uid=0) 2026-09-15T22:20:38.753225+08:00 [SERVER] sshd[4036923]: pam_env(sshd:session): deprecated reading of user environment enabled 2026-09-15T22:28:17.701746+08:00 [SERVER] sshd[4036923]: pam_unix(sshd:session): session closed for user [USER] 2026-09-15T22:28:51.516092+08:00 [SERVER] sshd[4038462]: Connection closed by [IP_C] port 40608 [preauth] 2026-09-15T22:44:08.678378+08:00 [SERVER] sshd[4040743]: Connection closed by [IP_D] port 43418 [preauth]