Administration - Installation - Core: brute force attack log

i noticed several brute force attack i i want to block this kind of attack.
i've looked but i didn't find. there is anywhere in ilias log failed login attempts and the IP from which twas tried? all i have found was multiple files in ilias log folder  with pattern *_<number>. 
i want to block attack using fail2ban and it will be much simpler if there is a single file with this info (failed login and ip)