Only this step, before WP or anything else:
fail2ban-client reload
I try [sshd] or [ssh] like in world anywhere, not help...
I think this is bad:
[DEFAULT]
ignoreip = 127.0.0.1/8
bantime = 60
findtime = 600
maxretry = 5
banaction = firewallcmd-ipset
action = %(action_mwl)s
[sshd]
enabled = true
filter = sshd
port = 22
action = %(action_mwl)s
logpath = /var/log/secure
