Is your SSH password revealed when you attempt to connect to the wrong server?
I highly recommend to move off password-based SSH at all in favor of SSH keys or (even better, certificates).<p>Here are some projects to help you roll out new infrastructure without SSH passwords:<p><a href="https://github.com/gravitational/teleport" rel="nofollow">https://github.com/gravitational/teleport</a> ( I work on this one with our team) and 
<a href="https://github.com/Netflix/bless" rel="nofollow">https://github.com/Netflix/bless</a> (heard great things about it, especially if you are using AWS)