prosody/plugins/mod_log_auth.lua

module:hook("authentication-failure", function (event)
	module:log("info", "Failed authentication attempt (%s) from IP: %s", event.condition or "unknown-condition", event.session.ip or "?");
end);