[SSHGuard-users] Centos sshguard "error"

[<li...@la...>]

I'm running Centos 7.3 using Firewalld. Is this error really an error?
Also any help to see what IP is being blocked would help.

Dec 27 02:04:05 centos-1gb-sfo1-01 sshd[3829]: error: maximum
authentication attempts exceeded for root from 197.251.5.165 port 42280
ssh2 [preauth] Dec 27 02:04:05 centos-1gb-sfo1-01 sshd[3829]:
Disconnecting: Too many authentication failures [preauth] Dec 27
02:04:05 centos-1gb-sfo1-01 sshguard[2934]: Attack from "197.251.5.165"
on service 100 with danger 10.

Perhaps useful info:
sh-4.2# firewall-cmd  --get-ipsets
sshguard4 sshguard6

firewall-cmd  --list-icmp-blocks
returns noting.

I used this as a guide:
https://www.ctrl.blog/entry/how-to-sshguard-firewalld

Unfortunately Centos does not use firewallctl but rather firewall-cmd,
so the commands don't tranlate. Here is the suggested command to see
what IP has been blocked:
You can inspect the blocked entries in each ipset using the following
commands:

firewallctl info ipset --permanent "sshguard4"
firewallctl info ipset --permanent "sshguard6"

This returns a blank line:
sh-4.2# firewall-cmd  --ipset=sshguard4 --get-description --permanent