Container must be run as privileged container
sudo docker run --name=fail2ban --net=host --privileged -d -v /var/log:/var/log/host fail2ban
Log files must be mounted to /var/log/host so that there won't be logging conflicts with the host.
By default attached jail.local is used which includes only SSH.
Additionally your own jail.local file and filters can be mounted