Unknown users trying to log in? Where is it logged?

Sat Dec 6 17:06:31 UTC 2008

Chris Mohler wrote:
> On Thu, Dec 4, 2008 at 12:53 PM, Dotan Cohen <dotancohen at gmail.com> wrote:
> If I have a SSH server exposed to the net, I usually tell sshd to
> listen on a different port (higher than 1024) - that will get rid of
> 99% of people "banging on the door".  Of course there are other things
> you can do to harden sshd, but I've found that moving the port is a
> good start.

I use fail2ban (http://www.fail2ban.org/wiki/index.php/Main_Page). It's 
also available in the Ubuntu repositories.