Fail2Ban

install fail2ban from slackbuilds.org

copy jail.conf to jail.local

cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local

open jail.local

nano /etc/fail2ban/jail.local

scroll down to the section [SSHD]

[sshd]

To use more aggressive sshd modes set filter parameter "mode" in jail.local:

-normal (default),

-ddos,

-extra or

-aggressive (combines all).

See "tests/files/logs/sshd" or "filter.d/sshd.conf" for usage example and details. mode = normal

logpath = /var/log/secure

backend = auto

enabled = true

port = ssh 2200

filter = sshd

maxretry = 2

findtime = 300

bantime = 86400

ignoreip = 127.0.0.1 192.168.0.*