Failed login attempts linux

Top source IPs of failed SSH logins in last 24h

journalctl -u ssh --since '24h ago' | grep 'Failed password' | awk '{print $(NF-3)}' | sort | uniq -c | sort -rn | head -10