A log file is created whenever someone tries to log in to a server using SSH. SSH was created as a protocol for creating connections between two systems that rely on a client/server architecture, allowing administrators and users to access the server or computer remotely. The rsyslog daemon in Linux keeps track of every attempt to login to an SSH server and records it in a log file. How to find all failed ssh login attempts in Ubuntu is explained in this article.