• [^] # Re: protection par fail2ban

    Posté par (site web personnel) . En réponse au journal Fail2ban, ajustement des valeurs par defaut. Évalué à 5.

    Possible, mais il a raison de bloquer. C'est bloqué pour moi aussi.

    The error indicates an attempt to scan OpenSSL for the SSLv3 POODLE vulnerability. No need to panic - getting scanned is an everyday occurrence for web server administrators, and hopefully your server is already long since patched for POODLE and disabled SSLv3 connections entirely. Furthermore, many of the servers scanning the internet making these connections are researchers - the example I provided above referencing the IP address 184.105.139.68 is one such example, and belongs to a group called "The Shadowserver Foundation" that reviews the internet for vulnerabilities and publishes trends in their findings.

    Source: https://www.joshwieder.net/2015/11/an-explanation-of-webserver-logs-that.html