Where is the SSH auth.log file?

[Lecaramel]

Hi!

I want to check my SSH users who tried to login, to see if someone is trying to enter on my server via brutforce.

But I can't find the SSH login log. Anybody know its location?

By the way, I changed the SSH port and make the root login impossible.

Thanks!

[chillax]

I believe the file you want is:
/var/log/secure

LogWatch generates an email report of this activity as well.

[Lecaramel]

I don't have the secure directory ;)
I never had an email about an error with the login from watchdog, even when I did some mistakes :)

[chillax]

'secure' is the file name, not a directory.