Fail2Ban

install fail2ban from slackbuilds.org

copy jail.conf to jail.local

cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local

open jail.local

nano /etc/fail2ban/jail.local

scroll down to the section [SSHD]

[sshd]

To use more aggressive sshd modes set filter parameter "mode" in jail.local:

-normal (default),

-ddos,

-extra or

-aggressive (combines all).

See "tests/files/logs/sshd" or "filter.d/sshd.conf" for usage example and details. mode = normal

logpath = /var/log/secure backend = auto enabled = true port = ssh 2200 filter = sshd maxretry = 2 findtime = 300 bantime = 86400 ignoreip = 127.0.0.1 192.168.0.*