An authentication failure reports an error message describing the failure. However, this message appears to include the IP address of the server, rather than the client.
Thank you to Erik Colson for mentioning this on Github.
- is related to
SERVER-16452 Failed login attempts should log source IP address