How do you deal with malicious IPs that scan for exploits?

Jon Snow · Dec 11, 2025

I usually ignore it because I always keep my web apps up to date.

But I've been curious what you guys have in place to deal with them.

One web host I've been with (managed hosting in the past) used to block IPs that flagged too many 404s but that wasn't the best route because it flagged a lot of false positives / legit users too.

Manually checking your access log can get tiring too. The ones I do notice, I block the ASNs in Cloudflare.

eva2000 · Dec 13, 2025

Paid Cloudflare Plans' WAF has managed rules that can take care of alot of them Managed Rules

Available managed rulesets

Cloudflare Managed Ruleset: Created by the Cloudflare security team, this ruleset provides fast and effective protection for all of your applications. The ruleset is updated frequently to cover new vulnerabilities and reduce false positives.
Ruleset ID:

Cloudflare OWASP Core Ruleset: Cloudflare's implementation of the Open Web Application Security Project, or OWASP ModSecurity Core Rule Set. Cloudflare routinely monitors for updates from OWASP based on the latest version available from the official code repository.
Ruleset ID:

Cloudflare Exposed Credentials Check: Deploy an automated credentials check on your end-user authentication endpoints. For any credential pair, the Cloudflare WAF performs a lookup against a public database of stolen credentials. Cloudflare recommends that you use leaked credentials detection instead of this ruleset.
Ruleset ID:

Cloudflare Free Managed Ruleset: Available on all Cloudflare plans. Designed to provide mitigation against high and wide impacting vulnerabilities. The rules are safe to deploy on most applications. If you deployed the Cloudflare Managed Ruleset for your site, you do not need to deploy this managed ruleset.
Ruleset ID:

The following managed rulesets run in a response phase:

Cloudflare Sensitive Data Detection: Created by Cloudflare to address common data loss threats. These rules monitor the download of specific sensitive data — for example, financial and personally identifiable information.
Ruleset ID:

Click to expand...

example some Cloudflare Managed Ruleset WAF rules for Wordpress

Log in / Register

Forums

Discover Centmin Mod today

How do you deal with malicious IPs that scan for exploits?

Jon Snow Active Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Discover Centmin Mod today

How do you deal with malicious IPs that scan for exploits?

Jon Snow Active Member

eva2000 Administrator Staff Member

.