Date: 2020apr15 OS: Linux Keywords: secure shell, faillog Q. Linux: See failed ssh login attempts A. If you're using systemd (as most are now) use jouralctl

journalctl -u sshd | grep 'invalid user'