Dashboard

Your ext. IP: Loading…

Settings

General Settings

Language

Server Port

Fail2ban Callback URL

This URL is used by all Fail2Ban instances to send ban alerts back to Fail2Ban UI. For local deployments, use the same port as Fail2Ban UI (e.g., http://127.0.0.1:8080). For reverse proxy setups, use your TLS-encrypted endpoint (e.g., https://fail2ban.example.com).

Fail2ban Callback URL Secret show secret

This secret is automatically generated and used to authenticate ban notification requests. It is included in the fail2ban action configuration.

Enable Debug Log

Enable Console Output

Advanced Actions for Recurring Offenders

Automatically add recurring offenders to an external firewall once they hit a specific threshold.

Enable automatic permanent blocking

Threshold before permanent block

If an IP is banned at least this many times it will be forwarded to the selected firewall integration.

Integration

Choose where permanent bans should be synchronized.

Permanent Block Log

No permanent blocks recorded yet.

Alert Settings

Alert Preferences

Enable alerts for bans Enable alerts for unbans

Alert Provider

GeoIP Provider

Choose the GeoIP lookup provider. MaxMind requires a local database file, while Built-in uses a free online API.

GeoIP Database Path

Path to the MaxMind GeoLite2-Country database file.

Maximum Log Lines

Maximum number of log lines to include in ban notifications. Most relevant lines are selected automatically.

Alert Countries

Choose the countries for which you want to receive alerts when a block is triggered.

Destination Email (Alerts Receiver)

SMTP Configuration

SMTP Host

SMTP Port

Common ports: 25 (plain), 587 (STARTTLS), 465 (SMTPS), 2525 (alternative STARTTLS)

SMTP Username

SMTP Password

Sender Email

Authentication Method

Use TLS (Recommended)

Skip TLS Certificate Verification ⚠️ Not recommended for production

⚠️ Please save your SMTP settings first before sending a test email.

Global Default Fail2Ban Configurations

These settings will be applied to all enabled Fail2Ban servers and stored in their jail.local [DEFAULT] section.

Enable Bantime Increment

If set to true, the bantime will be calculated using the formula: bantime = findtime * (number of failures / maxretry) * (1 + bantime.rndtime).

Enable Jails by Default

If enabled, all jails will be enabled by default. When disabled, jails must be explicitly enabled.

Default Bantime

The number of seconds that a host is banned. Time format: 1h = 1 hour, 1d = 1 day, 1w = 1 week, 1m = 1 month, 1y = 1 year.

Bantime Rndtime

Optional. Max random seconds added in bantime increment formula (e.g. 2048). Leave empty to use Fail2ban default.

Banaction

Default banning action (e.g. nftables-multiport, nftables-allports, firewallcmd-rich-rules, etc). It is used to define action_* variables.

Banaction Allports

Banning action for all ports (e.g. iptables-allports, firewallcmd-allports, etc). Used when a jail needs to ban all ports instead of specific ones.

Default Chain

iptables/nftables chain used for banning (e.g. INPUT for host, DOCKER-USER for Docker containers).

Default Findtime

A host is banned if it has generated 'maxretry' failures during the last 'findtime' seconds. Time format: 1h = 1 hour, 1d = 1 day, 1w = 1 week, 1m = 1 month, 1y = 1 year.

Default Max Retry

Number of failures before a host gets banned.

Ignore IPs

Space separated list of IP addresses, CIDR masks or DNS hosts. Fail2ban will not ban a host which matches an address in this list.

Sign in to Fail2ban UI

Dashboard

Filter Debug

Settings

General Settings

Console Output

Advanced Actions for Recurring Offenders

Permanent Block Log

Alert Settings

Destination Email (Alerts Receiver)

SMTP Configuration

Webhook Configuration

Elasticsearch Configuration

Global Default Fail2Ban Configurations

Filter Config:

Manage Jails

Create New Jail

Create New Filter

Manage Fail2ban Servers

Registered Servers

Add or Update Server

Whois Information -

Manually Block / Test

Logs -

Ban Insights

Bans by country

Recurring IPs

Global Threat Map

Elasticsearch Setup Guide

1. Create an Index Template

2. Document Structure

3. Authentication

4. Save and Test

5. Kibana Data View

6. Review the Data

Default chain