Keep track of failed ssh login attempts

Your sshd configuration is probably kept in:
/etc/ssh/sshd_config

change the line with LogLevel to:
LogLevel DEBUG

You can track login attempts in:
/var/log/auth