How to get daily statistics of failed password attempt for SSH login

In order to get daily statistics of failed password attempt for SSH login, use below command

$ sudo zcat -f /var/log/auth.log* | grep 'Failed password' | grep sshd | awk '{print $1,$2}' | sort | uniq -c

Example output :

112 Dec 29
223 Dec 30

Here you can see that there were total 112 incorrect failed password attempt for ssh login on 29th.

More more ways to analyse SSH logs, please visit SSH Log Analysis