In my /etc/fail2ban/jail.conf file:
enabled = true port = ssh filter = sshd logpath = /var/log/auth.log bantime = -1 findtime = 10m maxretry = 5
So my Fail2ban should able to ban IP if the IP fails to attempt SSH 5 times within 10 minutes. But now Fail2ban not banning any IP
Solution: make sure Fail2ban service turned on
sudo fail2ban start sudo fail2ban-client start</code></pre>
Then make sure /var/log/auth.log file exist in order to log the record
Finally restart rsyslog
sudo /etc/init.d/rsyslog restart
