[sshd]
enabled   = true
filter    = sshd
banaction = iptables
backend   = systemd
maxretry  = 3
findtime  = 3d
bantime   = 2w
ignoreip  = 127.0.0.1/8 10.2.0.0/24