To find the configuration settings for ssh you will need to edit the following file
vi /etc/fail2ban/jail.local
Once you are in the file you will need to locate the ssh-iptables section. It should look similar to the following:
[ssh-iptables]
enabled = true
filter = sshd
action = iptables[name=SSH, port=ssh, protocol=tcp]
sendmail-whois[name=SSH, dest=root, sender=fail2ban@example.com]
logpath = /var/log/secure
maxretry = 5
If you wish to change the default ssh port on your server then you can also change fail2ban to listen to the custom port. Simply replace port=ssh with the ssh port number eg.
port=123
\\
**Enabled** - represents if the ssh protection is on or off
\\
**filter** - represents directory in which the configuration file can be found. E.g **/etc/fail2ban/filter.d/sshd.conf**
\\