"/var/log/auth.log talán, de az üres"
Így van, ott kellene lennie, hasonlóképpen:
Apr 11 22:33:44 dexter sshd[12345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=host1.example.net user=d3xt3r
Apr 11 22:33:44 dexter sshd[12345]: Failed password for d3xt3r from 192.0.2.1 port 54321 ssh2