#!/bin/sh

# Number of failed SSH login attempts in the last 24 hours

journalctl -u ssh.service -u sshd.service --since "24 hour ago" 2>/dev/null | grep -c -E "Failed (password|publickey)|Invalid user" || true