diff --git a/fail2ban/jail.d/sshd.conf b/fail2ban/jail.d/sshd.conf
new file mode 100644
index 0000000..39dc23e
--- /dev/null
+++ b/fail2ban/jail.d/sshd.conf
@@ -0,0 +1,11 @@
+[sshd]
+enabled = true
+port = 22
+filter = sshd
+maxretry = 3
+findtime = 60
+#bantime = 86400
+bantime = 7d
+action = iptables-multiport
+logpath = /var/log/auth.log
+backend = polling