[Dark Spider]

Hello forum,

today it is only a question.


I receive daily log entries from "Auto Exploiter Scripts" and Webshells, since 4 Weeks its Extreme my Server cant handle the Requests, sometime
the PHP-fpm Crashes.
I read a bit on Stackoverflow but, is there a better way to block AutoExploiters?

My Ideas was:
.htaccess forwarding (I think this is not good for Performance)
a CloudFlare or other DNS firewall?

Other Ideas?



Im Using TYPO3 as CMS system on version 9.5.5
Info

Thanks and best regards 🤩

[Nachfolger]

I would most certainly throw cloudflare infront of your server. The problem is, your original IP address is already public, so you might need to request a new one. I don't know where you host, but if you use DigitalOcean or something like that, always use a floating IP, so your VPS IP is never used. Beyond the anecdote, consider beefing up your server, and also using Fail2Ban.