Filtering the Journal
You need only errors or worse from the SSH service in the last hour. Which command gives that?
Choose one answer
journalctl -k -u sshd --since -60
journalctl | grep sshd | grep error | tail -60
journalctl -f -p 3 sshd
journalctl -u sshd -p err --since "1 hour ago"