install fail2ban from slackbuilds.org copy jail.conf to jail.local cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local open jail.local nano /etc/fail2ban/jail.local scroll down to the section [SSHD] [sshd] To use more aggressive sshd modes set filter parameter "mode" in jail.local: -normal (default), -ddos, -extra or -aggressive (combines all). See "tests/files/logs/sshd" or "filter.d/sshd.conf" for usage example and details. mode = normal logpath = /var/log/secure backend = auto enabled = true port = ssh 2200 filter = sshd maxretry = 2 findtime = 300 bantime = 86400 ignoreip = 127.0.0.1 192.168.0.*