"Login excessive login failures" looks strange but apparently valid:
```
  char *err = "failed";
                /* cretins still haven't given up */
  if ((strlen (user) >= NETMAXUSER) ||
      (authuser && (strlen (authuser) >= NETMAXUSER))) {
    level = LOG_ALERT;      /* escalate this alert */
    err = "SYSTEM BREAK-IN ATTEMPT";
    logtry = 0;         /* render this session useless */
  }
  else if (logtry-- <= 0) err = "excessive login failures";
  else if (disablePlaintext) err = "disabled";
  else if (!(authuser && *authuser)) pw = valpwd (user,pwd,argc,argv);
  else if (valpwd (authuser,pwd,argc,argv)) pw = pwuser (user);
  if (pw && pw_login (pw,authuser,pw->pw_name,NIL,argc,argv)) return T;
  syslog (level|LOG_AUTH,"Login %s user=%.64s auth=%.64s host=%.80s",err,
      user,(authuser && *authuser) ? authuser : user,tcp_clienthost ());
```

but seems to be missing a sample log line