Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

DanielRønfeldt's avatar

Ways of blocking vulnerability scanners/bots?

One of the Laravel-driven websites I'm managing is showing a significant increase in vulnerability scanning activities, and therefore I decided to install fail2ban on that server. But since I'm not very familiar with Linux, I started looking specifically for Laravel-oriented solutions. And then I found this article where the author is suggesting a "honeypot" approach: https://aureola.codes/en/blog/2021/how-stop-vulnaribility-scanners-laravel-fail2ban

From my perspective, it surely looks like a well-thought solution that could probably save a lot of "parasite" traffic on my website - yes, I am aware of the fact that this shouldn't be my biggest concern when it comes about vulnerability scanning - but I haven't implemented it yet, given my rather limited knowledge on the subject.

And therefore, I was hoping that you guys could share your opinions on whether or not it would be a good idea for me to follow along with that tutorial, or look further for a better solution.

Thanks a lot!

0 likes
0 replies

Please or to participate in this conversation.