How to check successful and failed SSH logins to the server ?
Use the following commands (as root) to achieve this :
last | less
This captures data from /var/log/wtmp and shows you the successful logins.
lastb | less
This captures data from /var/log/btmp and shows you the failed attempts.
Source : WHT