For all the newbies out there who didn’t know (I was one of them a few minutes ago), sshd logs unsuccessful login attempts to /var/log/auth.log.
The same file is used by sudo to log its users, the commands they ran and their outputs.
For all the newbies out there who didn’t know (I was one of them a few minutes ago), sshd logs unsuccessful login attempts to /var/log/auth.log.
The same file is used by sudo to log its users, the commands they ran and their outputs.