Hack Forums
[PHP] [QUESTION] CMS Stop Auto Exploiter - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Web Development (https://hackforums.net/forumdisplay.php?fid=183)
+---- Thread: [PHP] [QUESTION] CMS Stop Auto Exploiter (/showthread.php?tid=5966794)



[QUESTION] CMS Stop Auto Exploiter - Dark Spider - May 4, 2019

Hello forum,

today it is only a question.


I receive daily log entries from "Auto Exploiter Scripts" and Webshells, since 4 Weeks its Extreme my Server cant handle the Requests, sometime
the PHP-fpm Crashes.
I read a bit on Stackoverflow but, is there a better way to block AutoExploiters?

My Ideas was:
.htaccess forwarding (I think this is not good for Performance)
a CloudFlare or other DNS firewall?

Other Ideas?



Im Using TYPO3 as CMS system on version 9.5.5
Info

Thanks and best regards 🤩


RE: [QUESTION] CMS Stop Auto Exploiter - Nachfolger - May 5, 2019

I would most certainly throw cloudflare infront of your server. The problem is, your original IP address is already public, so you might need to request a new one. I don't know where you host, but if you use DigitalOcean or something like that, always use a floating IP, so your VPS IP is never used. Beyond the anecdote, consider beefing up your server, and also using Fail2Ban.