FAIL2BAN

Ban abusers automatically.

Fail2ban watches your logs for attack patterns and bans the source IP at the firewall. Cloudnan exposes the jails, the bans, and the unban action without SSH.

cloudnan.com / dashboard / fail2ban

Fail2ban

5 jails · 23 currently banned IPs

sshd

12 banned

Found

487

Maxretry

5

Bantime

24h

nginx-auth

8 banned

Found

142

Maxretry

10

Bantime

1h

postfix

1 banned

Found

19

Maxretry

3

Bantime

2h

recidive

2 banned

Found

14

Maxretry

5

Bantime

7d

Currently banned IPs

  • 185.220.101.34sshd2 min ago
  • 203.0.113.42nginx-auth14 min ago
  • 198.51.100.7sshd1 h ago
  • 192.0.2.55recidive3 h ago

How it works

What happens under the hood.

  1. 01

    Jails monitor logs

    Built-in jails for sshd, nginx-auth, postfix, mysql, and more. Custom jails for app-specific patterns.

  2. 02

    Threshold reached → ban

    After N failures in M minutes, the IP gets a firewall drop rule for X hours.

  3. 03

    Panel surfaces the jail state

    See active jails, currently-banned IPs, recent bans (with timestamps), threshold settings.

  4. 04

    Unban with one click

    False positive? Unban from the panel — audit-logged with reason.

What you get

The capabilities that ship.

Built-in jails

sshd, nginx-auth, postfix, mysql, recidive (auto-bans repeat offenders).

Custom jails

Author per-application jails by regex against any log file. Stored versioned in the panel.

Live banned-IPs list

See who's currently banned and why. Geo-located when possible.

Recidive jail

Auto-bans IPs that get banned repeatedly across multiple jails — with longer ban times.

FAQ

Common questions.

Does this slow down my server?
Negligible. Fail2ban tails logs and adds firewall rules; both are extremely cheap. The performance hit you'd notice would be a botnet trying 5,000 logins / second, in which case you absolutely want Fail2ban catching it.
How does Fail2ban compose with the WAF?
WAF blocks specific malicious requests at layer 7. Fail2ban bans the IP at layer 3 after enough WAF triggers. Together they stop persistent attackers without manual intervention.

Related capabilities

Web Application Firewall

Layer 7 protection — Fail2ban handles the IP-level escalation.

Read

Firewall (UFW)

Network-layer rules; Fail2ban writes to it.

Read

AI Operations Assistant

Ask: "ban IPs that hit the WAF more than 10 times in the last hour".

Read

Your fleet deserves better.

Get started in minutes.

Deploy agents on your servers, connect securely, and take full control. Start free, upgrade when ready.

Get Started Free
Contact Sales
  • 7-day free trial
  • No credit card
  • Cancel anytime