By default, fail2ban on CentOS 7 does nothing. This post describes enabling the pre-configured jail for sshd to block IP addresses with repeated failed login attempts.