fail2ban on CentOS 7 for ssh access

• Add EPEL repositories
  

  wget http://epel.mirror.nucleus.be/7/x86_64/e/epel-release-7-1.noarch.rpm
  rpm -i epel-release-7-1.noarch.rpm

• Install packages
  

  yum install fail2ban-firewalld fail2ban-systemd

• create /etc/fail2ban/jail.local
  

  [DEFAULT]
  findtime  = 5000
  [sshd]
  enabled = true

• Create /etc/fail2ban/action.d/firewallcmd-ipset.local
  

  [Init]
  bantime = 10000

• Enable and start fail2ban:
  

  systemctl enable fail2ban
  systemctl start fail2ban

• Check if selinux isn't blocking fail2ban from accessing the logs
  

  tail /var/log/audit/audit.log