Fail2Ban jail local

jail.local

[sshd]

# To use more aggressive ssh modes set filter parameter "mode":
# normal (default), ddos, extra or aggressive (combines all).
# See "tests/files/logs/sshd" or "filter.d/sshd.conf" for usage example and details.
#mode     = normal
port      = ssh
enabled   = true
filter     = sshd
ignoreip  = 192.168.1.0/24
banaction = iptables-multiport
bantime   = 3600
maxretry  = 3
logpath   = %(sshd_log)s
backend   = %(sshd_backend)s
action    = sendnotif