diff --git a/host_vars/debian-test-awx-ct.yaml b/host_vars/debian-test-awx-ct.yaml
index 48179ac..5b57555 100644
--- a/host_vars/debian-test-awx-ct.yaml
+++ b/host_vars/debian-test-awx-ct.yaml
@@ -6,7 +6,7 @@ jails:
   - name: sshd
     enabled: true
     filter: sshd
-    logpath: /var/log/lastlog
+    logpath: /var/log/auth.log
     port: ['ssh', '22']
     maxretry: 10
     bantime: 10m
diff --git a/host_vars/debian-test-awx-vm.yaml b/host_vars/debian-test-awx-vm.yaml
index ce5bb5c..ec37c22 100644
--- a/host_vars/debian-test-awx-vm.yaml
+++ b/host_vars/debian-test-awx-vm.yaml
@@ -6,7 +6,7 @@ jails:
 - name: sshd
   enabled: true
   filter: sshd
-  logpath: /var/log/lastlog
+  logpath: /var/log/auth.log
   port: ['ssh', '22']
   maxretry: 10
   bantime: 10m
diff --git a/host_vars/k3s128test.yaml b/host_vars/k3s128test.yaml
index 28ca897..cf2be49 100644
--- a/host_vars/k3s128test.yaml
+++ b/host_vars/k3s128test.yaml
@@ -6,7 +6,7 @@ jails:
 - name: sshd
   enabled: true
   filter: sshd
-  logpath: /var/log/lastlog
+  logpath: /var/log/auth.log
   port: ['ssh', '22']
   maxretry: 10
   bantime: 10m