enabled:1
enforce:1
log_entity:journalctl -u ssh --since "1 minute ago"
regex_file:sshd_regexes
number_of_hits:6
time_frame:120
