{"id":147,"date":"2026-05-01T23:57:42","date_gmt":"2026-05-01T21:57:42","guid":{"rendered":"https:\/\/eryann.fr\/?p=147"},"modified":"2026-05-02T14:08:59","modified_gmt":"2026-05-02T12:08:59","slug":"fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian","status":"publish","type":"post","link":"https:\/\/eryann.fr\/index.php\/linux\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\/","title":{"rendered":"Fiche fail2ban : protection des services ssh, ftp et apache sous Debian"},"content":{"rendered":"\n<p>Pour les \u00e9tudiants en BTS CIEL ou SIO, s\u00e9curiser un serveur passe par la surveillance des logs et le blocage automatique des comportements malveillants.<br><\/p>\n\n\n\n<p>Fail2ban permet :<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>d\u2019analyser les logs syst\u00e8me<\/li>\n\n\n\n<li>de d\u00e9tecter les tentatives d\u2019attaque<\/li>\n\n\n\n<li>de bannir automatiquement les adresses IP<\/li>\n<\/ul>\n\n\n\n<p>Cette fiche couvre la protection de :<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>SSH<\/li>\n\n\n\n<li>Apache<\/li>\n\n\n\n<li>FTP (vsftpd)<br>avec exploitation des logs.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"683\" height=\"1024\" src=\"https:\/\/eryann.fr\/wp-content\/uploads\/2026\/05\/2b0e09cd-a9b0-486d-b860-7cba8c3c5e96-683x1024.png\" alt=\"\" class=\"wp-image-148\" srcset=\"https:\/\/eryann.fr\/wp-content\/uploads\/2026\/05\/2b0e09cd-a9b0-486d-b860-7cba8c3c5e96-683x1024.png 683w, https:\/\/eryann.fr\/wp-content\/uploads\/2026\/05\/2b0e09cd-a9b0-486d-b860-7cba8c3c5e96-200x300.png 200w, https:\/\/eryann.fr\/wp-content\/uploads\/2026\/05\/2b0e09cd-a9b0-486d-b860-7cba8c3c5e96-768x1152.png 768w, https:\/\/eryann.fr\/wp-content\/uploads\/2026\/05\/2b0e09cd-a9b0-486d-b860-7cba8c3c5e96.png 1024w\" sizes=\"auto, (max-width: 683px) 100vw, 683px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Configuration compl\u00e8te fail2ban <\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code># =========================================================<br># INSTALLATION<br># =========================================================<br><br>apt update &amp;&amp; apt install fail2ban -y<br><br># =========================================================<br># DEMARRAGE<br># =========================================================<br><br>systemctl enable fail2ban<br>systemctl start fail2ban<br><br># =========================================================<br># CONFIGURATION PRINCIPALE<br># =========================================================<br><br>nano \/etc\/fail2ban\/jail.local<br><br>&#91;DEFAULT]<br>bantime = 3600<br>findtime = 600<br>maxretry = 5<br>backend = systemd<br><br># =========================================================<br># SSH<br># =========================================================<br><br>&#91;sshd]<br>enabled = true<br>port = ssh<br>filter = sshd<br>logpath = \/var\/log\/auth.log<br>maxretry = 5<br><br># =========================================================<br># APACHE<br># =========================================================<br><br>&#91;apache-auth]<br>enabled = true<br>port = http,https<br>filter = apache-auth<br>logpath = \/var\/log\/apache2\/error.log<br>maxretry = 5<br><br># =========================================================<br># FTP (VSFTPD)<br># =========================================================<br><br>&#91;vsftpd]<br>enabled = true<br>port = ftp<br>filter = vsftpd<br>logpath = \/var\/log\/vsftpd.log<br>maxretry = 5<br><br># =========================================================<br># REDEMARRAGE<br># =========================================================<br><br>systemctl restart fail2ban<br><br># =========================================================<br># VERIFICATION<br># =========================================================<br><br>fail2ban-client status<br>fail2ban-client status sshd<br>fail2ban-client status apache-auth<br>fail2ban-client status vsftpd<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Explication d\u00e9taill\u00e9e<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">Principe de fonctionnement<\/h4>\n\n\n\n<p>Fail2ban analyse les logs :<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>SSH \u2192 <code>\/var\/log\/auth.log<\/code><\/li>\n\n\n\n<li>Apache \u2192 <code>\/var\/log\/apache2\/error.log<\/code><\/li>\n\n\n\n<li>FTP \u2192 <code>\/var\/log\/vsftpd.log<\/code><\/li>\n<\/ul>\n\n\n\n<p>Lorsqu\u2019un nombre d\u2019\u00e9checs d\u00e9passe <code>maxretry<\/code> dans <code>findtime<\/code>, l\u2019IP est bannie pendant <code>bantime<\/code>.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Analyse des logs utilis\u00e9s<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">Logs SSH<\/h4>\n\n\n\n<pre class=\"wp-block-code\"><code>tail -f \/var\/log\/auth.log<\/code><\/pre>\n\n\n\n<p>Exemple :<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>May  1 11:50:12 debian sshd&#91;1122]: Failed password for invalid user admin from 192.168.1.60 port 53322 ssh2<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h4 class=\"wp-block-heading\">Logs Apache<\/h4>\n\n\n\n<pre class=\"wp-block-code\"><code>tail -f \/var\/log\/apache2\/error.log<\/code><\/pre>\n\n\n\n<p>Exemple :<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&#91;Wed May 01 10:20:01] &#91;error] &#91;client 192.168.1.60] user admin: authentication failure<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h4 class=\"wp-block-heading\">Logs FTP (vsftpd)<\/h4>\n\n\n\n<pre class=\"wp-block-code\"><code>tail -f \/var\/log\/vsftpd.log<\/code><\/pre>\n\n\n\n<p>Exemple :<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Tue May 01 10:15:10 2026 &#91;pid 1234] &#91;ftpuser] FAIL LOGIN: Client \"192.168.1.60\"<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Recherche dans les logs<\/h3>\n\n\n\n<p>Tentatives SSH \u00e9chou\u00e9es :<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>grep \"Failed password\" \/var\/log\/auth.log<\/code><\/pre>\n\n\n\n<p>Top des IP attaquantes :<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>grep \"Failed password\" \/var\/log\/auth.log | awk '{print $11}' | sort | uniq -c | sort -nr<\/code><\/pre>\n\n\n\n<p>Tentatives Apache :<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>grep -i \"authentication failure\" \/var\/log\/apache2\/error.log<\/code><\/pre>\n\n\n\n<p>Tentatives FTP :<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>grep \"FAIL LOGIN\" \/var\/log\/vsftpd.log<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Commandes utiles fail2ban<\/h3>\n\n\n\n<p>Voir le statut global :<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>fail2ban-client status<\/code><\/pre>\n\n\n\n<p>Voir les IP bannies :<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>fail2ban-client status sshd<\/code><\/pre>\n\n\n\n<p>D\u00e9bannir une IP :<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>fail2ban-client set sshd unbanip 192.168.1.60<\/code><\/pre>\n\n\n\n<p>Recharger la configuration :<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>fail2ban-client reload<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Bonnes pratiques<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>adapter <code>maxretry<\/code> pour \u00e9viter les faux positifs<\/li>\n\n\n\n<li>surveiller r\u00e9guli\u00e8rement les logs<\/li>\n\n\n\n<li>utiliser des mots de passe forts<\/li>\n\n\n\n<li>d\u00e9sactiver l\u2019authentification root SSH<\/li>\n\n\n\n<li>limiter l\u2019exposition des services FTP<\/li>\n\n\n\n<li>combiner avec un pare-feu<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">R\u00e9capitulatif des fichiers importants<\/h3>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Fichier<\/th><th>R\u00f4le<\/th><\/tr><\/thead><tbody><tr><td>\/etc\/fail2ban\/jail.conf<\/td><td>configuration par d\u00e9faut<\/td><\/tr><tr><td>\/etc\/fail2ban\/jail.local<\/td><td>configuration personnalis\u00e9e<\/td><\/tr><tr><td>\/etc\/fail2ban\/filter.d\/sshd.conf<\/td><td>filtre SSH<\/td><\/tr><tr><td>\/etc\/fail2ban\/filter.d\/apache-auth.conf<\/td><td>filtre Apache<\/td><\/tr><tr><td>\/etc\/fail2ban\/filter.d\/vsftpd.conf<\/td><td>filtre FTP<\/td><\/tr><tr><td>\/var\/log\/auth.log<\/td><td>logs SSH<\/td><\/tr><tr><td>\/var\/log\/apache2\/error.log<\/td><td>logs Apache<\/td><\/tr><tr><td>\/var\/log\/vsftpd.log<\/td><td>logs FTP<\/td><\/tr><tr><td>\/var\/log\/fail2ban.log<\/td><td>logs fail2ban<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Conclusion<\/h3>\n\n\n\n<p>Fail2ban permet de s\u00e9curiser efficacement un serveur en s\u2019appuyant sur l\u2019analyse des logs.<br>Avec la protection combin\u00e9e de SSH, Apache et FTP, il constitue une premi\u00e8re ligne de d\u00e9fense contre les attaques automatis\u00e9es.<\/p>\n\n\n\n<p>C\u2019est un outil essentiel pour toute infrastructure exp<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Pour les \u00e9tudiants en BTS CIEL ou SIO, s\u00e9curiser un serveur passe par la surveillance des logs et le blocage automatique des comportements malveillants. Fail2ban permet : Cette fiche couvre la protection de : Configuration compl\u00e8te fail2ban Explication d\u00e9taill\u00e9e Principe de fonctionnement Fail2ban analyse les logs : Lorsqu\u2019un nombre d\u2019\u00e9checs d\u00e9passe maxretry dans findtime, l\u2019IP [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[12],"tags":[],"class_list":["post-147","post","type-post","status-publish","format-standard","hentry","category-linux"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Fiche fail2ban : protection des services ssh, ftp et apache sous Debian - Eryann Breizh SecOps<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/eryann.fr\/index.php\/linux\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Fiche fail2ban : protection des services ssh, ftp et apache sous Debian - Eryann Breizh SecOps\" \/>\n<meta property=\"og:description\" content=\"Pour les \u00e9tudiants en BTS CIEL ou SIO, s\u00e9curiser un serveur passe par la surveillance des logs et le blocage automatique des comportements malveillants. Fail2ban permet : Cette fiche couvre la protection de : Configuration compl\u00e8te fail2ban Explication d\u00e9taill\u00e9e Principe de fonctionnement Fail2ban analyse les logs : Lorsqu\u2019un nombre d\u2019\u00e9checs d\u00e9passe maxretry dans findtime, l\u2019IP [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/eryann.fr\/index.php\/linux\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\/\" \/>\n<meta property=\"og:site_name\" content=\"Eryann Breizh SecOps\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-01T21:57:42+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-02T12:08:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/eryann.fr\/wp-content\/uploads\/2026\/05\/2b0e09cd-a9b0-486d-b860-7cba8c3c5e96.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"1536\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"wpadmin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"wpadmin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/eryann.fr\\\/index.php\\\/linux\\\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/eryann.fr\\\/index.php\\\/linux\\\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\\\/\"},\"author\":{\"name\":\"wpadmin\",\"@id\":\"https:\\\/\\\/eryann.fr\\\/#\\\/schema\\\/person\\\/d2ee98d2385cd045ed4fe1c07ca320b5\"},\"headline\":\"Fiche fail2ban : protection des services ssh, ftp et apache sous Debian\",\"datePublished\":\"2026-05-01T21:57:42+00:00\",\"dateModified\":\"2026-05-02T12:08:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/eryann.fr\\\/index.php\\\/linux\\\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\\\/\"},\"wordCount\":322,\"publisher\":{\"@id\":\"https:\\\/\\\/eryann.fr\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/eryann.fr\\\/index.php\\\/linux\\\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eryann.fr\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/2b0e09cd-a9b0-486d-b860-7cba8c3c5e96-683x1024.png\",\"articleSection\":[\"Linux\"],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/eryann.fr\\\/index.php\\\/linux\\\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\\\/\",\"url\":\"https:\\\/\\\/eryann.fr\\\/index.php\\\/linux\\\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\\\/\",\"name\":\"Fiche fail2ban : protection des services ssh, ftp et apache sous Debian - Eryann Breizh SecOps\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/eryann.fr\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/eryann.fr\\\/index.php\\\/linux\\\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/eryann.fr\\\/index.php\\\/linux\\\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eryann.fr\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/2b0e09cd-a9b0-486d-b860-7cba8c3c5e96-683x1024.png\",\"datePublished\":\"2026-05-01T21:57:42+00:00\",\"dateModified\":\"2026-05-02T12:08:59+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/eryann.fr\\\/index.php\\\/linux\\\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/eryann.fr\\\/index.php\\\/linux\\\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/eryann.fr\\\/index.php\\\/linux\\\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\\\/#primaryimage\",\"url\":\"https:\\\/\\\/eryann.fr\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/2b0e09cd-a9b0-486d-b860-7cba8c3c5e96.png\",\"contentUrl\":\"https:\\\/\\\/eryann.fr\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/2b0e09cd-a9b0-486d-b860-7cba8c3c5e96.png\",\"width\":1024,\"height\":1536},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/eryann.fr\\\/index.php\\\/linux\\\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/eryann.fr\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Fiche fail2ban : protection des services ssh, ftp et apache sous Debian\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/eryann.fr\\\/#website\",\"url\":\"https:\\\/\\\/eryann.fr\\\/\",\"name\":\"Eryann Breizh SecOps\",\"description\":\"Fiches techniques &amp; labs en syst\u00e8mes et r\u00e9seaux poor les \u00e9tudiants en BTS CEIL ET SIO\",\"publisher\":{\"@id\":\"https:\\\/\\\/eryann.fr\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/eryann.fr\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/eryann.fr\\\/#organization\",\"name\":\"Breizh Sec Ops\",\"url\":\"https:\\\/\\\/eryann.fr\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/eryann.fr\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/eryann.fr\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/cropped-088112b9-fd28-4b18-b02d-4d9dded3e900-e1777846396685.png\",\"contentUrl\":\"https:\\\/\\\/eryann.fr\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/cropped-088112b9-fd28-4b18-b02d-4d9dded3e900-e1777846396685.png\",\"width\":1246,\"height\":229,\"caption\":\"Breizh Sec Ops\"},\"image\":{\"@id\":\"https:\\\/\\\/eryann.fr\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/eryann.fr\\\/#\\\/schema\\\/person\\\/d2ee98d2385cd045ed4fe1c07ca320b5\",\"name\":\"wpadmin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d71b4031c3d015de3ca68c137413277e548b331b07db0acf781b9379b798eb3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d71b4031c3d015de3ca68c137413277e548b331b07db0acf781b9379b798eb3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d71b4031c3d015de3ca68c137413277e548b331b07db0acf781b9379b798eb3e?s=96&d=mm&r=g\",\"caption\":\"wpadmin\"},\"sameAs\":[\"https:\\\/\\\/eryann.fr\"],\"url\":\"https:\\\/\\\/eryann.fr\\\/index.php\\\/author\\\/wpadmin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Fiche fail2ban : protection des services ssh, ftp et apache sous Debian - Eryann Breizh SecOps","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/eryann.fr\/index.php\/linux\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\/","og_locale":"fr_FR","og_type":"article","og_title":"Fiche fail2ban : protection des services ssh, ftp et apache sous Debian - Eryann Breizh SecOps","og_description":"Pour les \u00e9tudiants en BTS CIEL ou SIO, s\u00e9curiser un serveur passe par la surveillance des logs et le blocage automatique des comportements malveillants. Fail2ban permet : Cette fiche couvre la protection de : Configuration compl\u00e8te fail2ban Explication d\u00e9taill\u00e9e Principe de fonctionnement Fail2ban analyse les logs : Lorsqu\u2019un nombre d\u2019\u00e9checs d\u00e9passe maxretry dans findtime, l\u2019IP [&hellip;]","og_url":"https:\/\/eryann.fr\/index.php\/linux\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\/","og_site_name":"Eryann Breizh SecOps","article_published_time":"2026-05-01T21:57:42+00:00","article_modified_time":"2026-05-02T12:08:59+00:00","og_image":[{"width":1024,"height":1536,"url":"https:\/\/eryann.fr\/wp-content\/uploads\/2026\/05\/2b0e09cd-a9b0-486d-b860-7cba8c3c5e96.png","type":"image\/png"}],"author":"wpadmin","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"wpadmin","Dur\u00e9e de lecture estim\u00e9e":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/eryann.fr\/index.php\/linux\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\/#article","isPartOf":{"@id":"https:\/\/eryann.fr\/index.php\/linux\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\/"},"author":{"name":"wpadmin","@id":"https:\/\/eryann.fr\/#\/schema\/person\/d2ee98d2385cd045ed4fe1c07ca320b5"},"headline":"Fiche fail2ban : protection des services ssh, ftp et apache sous Debian","datePublished":"2026-05-01T21:57:42+00:00","dateModified":"2026-05-02T12:08:59+00:00","mainEntityOfPage":{"@id":"https:\/\/eryann.fr\/index.php\/linux\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\/"},"wordCount":322,"publisher":{"@id":"https:\/\/eryann.fr\/#organization"},"image":{"@id":"https:\/\/eryann.fr\/index.php\/linux\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\/#primaryimage"},"thumbnailUrl":"https:\/\/eryann.fr\/wp-content\/uploads\/2026\/05\/2b0e09cd-a9b0-486d-b860-7cba8c3c5e96-683x1024.png","articleSection":["Linux"],"inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/eryann.fr\/index.php\/linux\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\/","url":"https:\/\/eryann.fr\/index.php\/linux\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\/","name":"Fiche fail2ban : protection des services ssh, ftp et apache sous Debian - Eryann Breizh SecOps","isPartOf":{"@id":"https:\/\/eryann.fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/eryann.fr\/index.php\/linux\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\/#primaryimage"},"image":{"@id":"https:\/\/eryann.fr\/index.php\/linux\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\/#primaryimage"},"thumbnailUrl":"https:\/\/eryann.fr\/wp-content\/uploads\/2026\/05\/2b0e09cd-a9b0-486d-b860-7cba8c3c5e96-683x1024.png","datePublished":"2026-05-01T21:57:42+00:00","dateModified":"2026-05-02T12:08:59+00:00","breadcrumb":{"@id":"https:\/\/eryann.fr\/index.php\/linux\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/eryann.fr\/index.php\/linux\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/eryann.fr\/index.php\/linux\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\/#primaryimage","url":"https:\/\/eryann.fr\/wp-content\/uploads\/2026\/05\/2b0e09cd-a9b0-486d-b860-7cba8c3c5e96.png","contentUrl":"https:\/\/eryann.fr\/wp-content\/uploads\/2026\/05\/2b0e09cd-a9b0-486d-b860-7cba8c3c5e96.png","width":1024,"height":1536},{"@type":"BreadcrumbList","@id":"https:\/\/eryann.fr\/index.php\/linux\/fiche-fail2ban-protection-des-services-ssh-ftp-et-apache-sous-debian\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/eryann.fr\/"},{"@type":"ListItem","position":2,"name":"Fiche fail2ban : protection des services ssh, ftp et apache sous Debian"}]},{"@type":"WebSite","@id":"https:\/\/eryann.fr\/#website","url":"https:\/\/eryann.fr\/","name":"Eryann Breizh SecOps","description":"Fiches techniques &amp; labs en syst\u00e8mes et r\u00e9seaux poor les \u00e9tudiants en BTS CEIL ET SIO","publisher":{"@id":"https:\/\/eryann.fr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/eryann.fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/eryann.fr\/#organization","name":"Breizh Sec Ops","url":"https:\/\/eryann.fr\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/eryann.fr\/#\/schema\/logo\/image\/","url":"https:\/\/eryann.fr\/wp-content\/uploads\/2026\/05\/cropped-088112b9-fd28-4b18-b02d-4d9dded3e900-e1777846396685.png","contentUrl":"https:\/\/eryann.fr\/wp-content\/uploads\/2026\/05\/cropped-088112b9-fd28-4b18-b02d-4d9dded3e900-e1777846396685.png","width":1246,"height":229,"caption":"Breizh Sec Ops"},"image":{"@id":"https:\/\/eryann.fr\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/eryann.fr\/#\/schema\/person\/d2ee98d2385cd045ed4fe1c07ca320b5","name":"wpadmin","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/d71b4031c3d015de3ca68c137413277e548b331b07db0acf781b9379b798eb3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d71b4031c3d015de3ca68c137413277e548b331b07db0acf781b9379b798eb3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d71b4031c3d015de3ca68c137413277e548b331b07db0acf781b9379b798eb3e?s=96&d=mm&r=g","caption":"wpadmin"},"sameAs":["https:\/\/eryann.fr"],"url":"https:\/\/eryann.fr\/index.php\/author\/wpadmin\/"}]}},"_links":{"self":[{"href":"https:\/\/eryann.fr\/index.php\/wp-json\/wp\/v2\/posts\/147","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eryann.fr\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eryann.fr\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eryann.fr\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eryann.fr\/index.php\/wp-json\/wp\/v2\/comments?post=147"}],"version-history":[{"count":1,"href":"https:\/\/eryann.fr\/index.php\/wp-json\/wp\/v2\/posts\/147\/revisions"}],"predecessor-version":[{"id":149,"href":"https:\/\/eryann.fr\/index.php\/wp-json\/wp\/v2\/posts\/147\/revisions\/149"}],"wp:attachment":[{"href":"https:\/\/eryann.fr\/index.php\/wp-json\/wp\/v2\/media?parent=147"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eryann.fr\/index.php\/wp-json\/wp\/v2\/categories?post=147"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/eryann.fr\/index.php\/wp-json\/wp\/v2\/tags?post=147"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}