Day: 5 October 2026
-
Exploiting Fail2ban "portscan" permablocks over HTTP for denial-of-service
On a forum they and I share, Loebas suggested that I should be careful doing portscans in case I hit e.g. fail2ban rules. I counter that such rulesets would be a terrible idea (and are therefore uncommon), and provide a specific demonstration of how an attacker can turn them against the site's legitimate users!