Log ip address to asl.log for ssh attempts

Question

Hello,
I am running os x server 10.4.4.
How do I log ip address to asl.log for ssh attempts? I notice alot of ssh login attempts but there is no ip/host info:
[Time 2006.02.03 08:50:39 UTC] [Facility authpriv] [Sender com.apple.SecurityServer] [PID -1] [Message Failed to authorize right system.login.tty by process /usr/sbin/sshd for authorization created by /usr/sbin/sshd.] [Level 5] [UID -2] [GID -2] [Host kane]
[Time 2006.02.03 08:50:42 UTC] [Facility authpriv] [Sender com.apple.SecurityServer] [PID -1] [Message authinternal failed to authenticate user guest.] [Level 3] [UID -2] [GID -2] [Host kane]
[Time 2006.02.03 08:50:42 UTC] [Facility authpriv] [Sender com.apple.SecurityServer] [PID -1] [Message Failed to authorize right system.login.tty by process /usr/sbin/sshd for authorization created by /usr/sbin/sshd.] [Level 5] [UID -2] [GID -2] [Host kane]
[Time 2006.02.03 08:50:45 UTC] [Facility authpriv] [Sender com.apple.SecurityServer] [PID -1] [Message authinternal failed to authenticate user public.] [Level 3] [UID -2] [GID -2] [Host kane]
Soo

Answer 1

First and foremost, do you intend to allow access via ssh ?
For all but those accounts that absolutely must have it, go to each account, and set: shell: to none.
If you must allow ssh access, disallow root access (as you've done).
Setup a non-obvious admin account (so, not admin or administrator, certainly not "test") that can su/sudo, and allow access for that one account only. IE, edit /etc/sshd_config (NOT with a GUI editor, use at least pico please) as follows:
change:
#PermitRootLogin yes
to:
PermitRootLogin no
then, after the line that says StrictMode,
add:
AllowUsers mysrvradmn
Where "mysrvradmn" (still too obvious, just an example), is your non-obvious admin account name that you will allow to access your server via ssh.
Then, setup key pairs for ssh login (see link below).
Last but not least, setup rules at your firewall, to restrict ssh access (port 22)
For setting up ssh keys, read here, starting with "Create authentication keys"
http://www.bombich.com/mactips/rsync.html