How to View Fail2ban Logs in HestiaCP

Prerequisites

Before viewing Fail2ban logs, make sure you have:

• SSH access to your VPS
• Fail2ban installed and running

Method 1: View via HestiaCP Web Interface

Step 1: Log in to HestiaCP

https://YOUR_SERVER_IP:8083

Step 2: Navigate to SERVER → Firewall

Click on SERVER, then Firewall tab.

Step 3: View Banned IPs

The Fail2ban section shows currently banned IPs and history.

Method 2: View via SSH Command Line

View Fail2ban log:

tail -f /var/log/fail2ban.log

View last 50 lines:

tail -50 /var/log/fail2ban.log

Search for specific IP:

grep "185.45.6.78" /var/log/fail2ban.log

Check Currently Banned IPs

For specific jail:

fail2ban-client status sshd

For all jails:

fail2ban-client status

List banned IPs for a jail:

fail2ban-client banned sshd

View Authentication Logs

See failed login attempts:

grep "Failed password" /var/log/auth.log | tail -20

Monitor in real-time:

tail -f /var/log/auth.log | grep "Failed password"

Check Fail2ban Statistics

fail2ban-client status

Output example:

Status
|- Number of jail:      2
`- Jail list:           hestia, sshd