# failed attempt
grep sshd.\*Failed /var/log/auth.log | less
# successful attempts
grep sshd.\*Accepted /var/log/auth.log | less
# failed attempt
grep sshd.\*Failed /var/log/auth.log | less
# successful attempts
grep sshd.\*Accepted /var/log/auth.log | less