Server is getting too many hits bringing apache down - 404 errors, wp-admin - Need Cloudflare WAF

@Microlent

Hello! This is a very common issue on newly provisioned servers, especially with WordPress, and what you’re seeing is almost certainly automated bot traffic, not real users. The good news is that this can be controlled effectively, even on the Cloudflare free plan, without impacting legitimate visitors. Here’s how I’d help stabilize and protect your server: Traffic filtering & bot mitigation • Configure Cloudflare security rules to block or challenge common bot patterns • Rate-limit repeated 404 scans and wp-admin / wp-login attempts • Add firewall rules to reduce unnecessary hits before they reach your server WordPress hardening • Protect wp-admin and login endpoints • Reduce attack surface by tightening access to sensitive paths • Ensure only legitimate traffic can trigger heavy PHP processes Server-side protection • Review server logs to identify abusive IP ranges and request patterns • Add fail2ban or equivalent protections where appropriate • Tune server and web server settings to handle residual noise safely The goal isn’t just blocking today’s bots, but keeping the server stable and quiet going forward so resources stay online and performance remains consistent. If you’d like, we can start with a quick review of your current Cloudflare and server setup, then apply targeted rules and protections immediately. You should see a noticeable drop in resource usage very quickly. Best regards, Jenifer

@SBITServices

Hi Robert, I will analyze the server logs to identify the source of the excessive hits causing the server to go down. Implementing Cloudflare WAF will help mitigate the 404 scans and wp-admin logins, preventing further attacks and ensuring server stability. Let's discuss further to tailor a solution for your specific needs. Regards, Sai Bhaskar

@oronnosl

Hello Sir, I believe it's wordpress issue and block the bot attacks can solve this problem. Work process: 1. i'll scan full site and check the memory status 2. deactive unused plugins 3. Optimise the site files 4. Block bot attack Regards, Nure Alam

@kuldeepvk

Hi, I have 10 years of experience as a System Administrator with strong expertise in setting up and managing Linux web hosting servers, AWS and cloud servers, GPU servers, server monitoring, security, optimization, mailing servers, email marketing, SSL, DNS, Apache/Nginx, and more. I work with cPanel/WHM, Plesk, Virtualmin, LAMP/LEMP stacks, Tomcat, MySQL/MariaDB, Zimbra, Postfix, MailEnable, SmarterMail, MS SQL, and other server environments. I can provide a reliable, secure, and fully optimized setup based on your requirements. Please discuss so we can get started. Thank you!

@metaexcel

Hello Sir, it means there is going on something wrong with your server. I need to scan your whole server including database. May I know you website name so that I can take a look? I am ready to fix. Thanks

@pvsysgroupinc

★★★ TOP 1% IN FREE LANCER WORLD★★★ I’m excited to bring my experience as CMD as with 20+ years in international Business Operations Our Services * Lead Generation Experts * Sales Expert *Operational Strategic planner * Data Entry *Customer Support 24*7 *Excel / Word Operation *LinkedIn *Chat Support *Calling Support *Business Plans / Marketing Strategy/ * Digital Marketing *Social Media Marketing * Internet Marketing *Any type of Data Projects Regards, CMD PVSYS GROUP (INDIA) LinkedIn Followers = 15 K worldwide Impressions on posts = 200 Millions Earning = 500 K Euro from 20012 IF YOU THINK THEN I CAN

@khurshid040462

Hi there, I understand the frustration of dealing with server resource issues and the strain caused by excessive bot traffic resulting in 404 errors. I have extensive experience in managing and optimizing servers using Apache and Cloudflare, ensuring that sites like yours stay up and responsive. By integrating Cloudflare's Web Application Firewall (WAF) with your existing systems, I can efficiently filter out harmful traffic, protecting your wp-admin and other vital resources from unnecessary scans and attacks. With a focus on performance and security, I propose to implement these solutions swiftly to restore your website's functionality. Let’s finalize a timeline to start resolving this issue.

@webcast

Hi there, I've worked with Liquid Web and Cloudflare setups before, so I know how frustrating constant 404 scans and wp-admin attacks can get. I'll configure Cloudflare rules, server-level firewalls, and rate limits to block malicious bots efficiently without disrupting real visitors. Let’s secure your server today. Thanks- Nitish Bhardwaj

@jayprakashyadav

As an experienced web developer with over 15 years in the field, I have accumulated a wealth of knowledge and skills that make me the ideal candidate for your Cloudflare WAF project. My expertise isn't just limited to WordPress and Joomla, it also extends to areas such as PHP, MySQL, HTML5, CSS and many more. One of the recent challenges I tackled was creating a robust WAF solution for a high-traffic e-commerce website plagued with similar issues as yours. We were able to successfully bring down unwanted bot activities and boost security significantly. Generated through OPEN AI API, this solution employs the latest technology and an absolute commitment providing quality work. Given this background, I am confident in my ability to not only resolve your 404 scan problem but also guarantee an increase in your server uptime. My deep understanding of Cloudflare's tools coupled with my proficiency in various programming languages makes me well-equipped to handle the task professionally and efficiently. Let's work together to bring stability and security back to your server environment! Thanks, Jay

@rupa37

As an experienced IT professional with over 15 years in system administration and DevOps, I understand the importance of a stable and secure IT environment more than anyone. And I know exactly how to address the issue you're experiencing with Liquid Web. My range of skills including Linux, PHP, Web Hosting, and WordPress make me uniquely qualified for this project. In regards to your specific problem with server resources being overwhelmed by bot attacks, I recommend implementing Cloudflare's Web Application Firewall (WAF) immediately. With my extensive experience managing and optimizing IT infrastructures, I can smoothly integrate and configure Cloudflare WAF into your existing setup to efficiently block out those malicious 404 scans and wp-admin logins. But I don't just want to solve this particular problem; I want to future-proof your server against similar threats. Hence, as part of my service, I'll also equip you with the knowledge you need to continue monitoring and managing the system confidently. My dedication to prompt updates and security measures will ensure that your server stays protected from vulnerabilities, reducing downtime and maximizing its performance. Let's get started on securing your server today!

@rainsys

As Rainsys Web & Software Development Company, our team has extensive experience in handling WordPress related projects, including managing servers to optimize their performance. Being conversant with Apache and PHP, we not only possess the skills you need but also understand how to counteract the server overload issue associated with numerous 404 scans and wp-admin logins you're experiencing. My experience as an IT professional extends over many years and across multiple projects which makes me confident in my ability to address your challenges. By leveraging our expertise along with the benefits of Cloudflare WAF, we can ensure that your server remains protected from bot attacks while keeping it up and running smoothly. Our past clientele base is not just satisfied, they are pleased! And that's an affirmation that you too will be served excellently. Partnering with us guarantees your peace of mind, a more stable server for uninterrupted operations, in addition to a long-lasting relationship. I believe we are tailor-made for this task - let's work together and resolve this challenge once and for all.

@gattes

Hi there, I have over 10 years work experience with Linux and Cloudflare/DNS/WAF and I think I can definitely help you out to support/substain these attacks. Ping me! Cheers

@fwzy

Hello there, I can secure your WordPress site by properly configuring Cloudflare rules to block bot attacks, wp-admin brute-force attempts, and excessive 404 scans that are crashing your Apache server. I can optimize security and rate-limiting on your existing Cloudflare plan so your server stays online and stable. Regards, Fauzi

@johnallenvillan1

Hello, I understand your server issues with frequent 404 errors and bot attacks. With expertise in Linux, Web Development, and Cloudflare, I can optimize your server to prevent these incidents. Implementing Cloudflare WAF will enhance security and performance, ensuring smooth operations. Let's fortify your server together to combat malicious activities. When can we start this improvement?

@wallymna

**THIS IS NOT AN AUTOMATIC BID** Hello, I can secure your Liquid Web server using Cloudflare to block bot attacks, 404 scans, and wp-admin/login abuse, reducing load and preventing resource outages. I will configure firewall rules, rate limiting, and WordPress specific protections to stop malicious traffic while keeping the site fully accessible to general public. The cost of the project will be fixed at19.99 AUD per hour with immediate availability. Please drop me a message to discuss further, thank you!

@dataspro

Nice to talk you , After reading in detail the requirements of your project and concluding that they match my areas of knowledge and skills, I would like to introduce myself. My name is Anthony Muñoz and I am the lead engineer for DS Pro IT agency. I have worked for over 10 years in Backend and software development and have successfully done multiple jobs. It will be a pleasure to work together to make your project a reality. Please feel free to contact me. I´m looking forward to working with you. I really appreciate your time and remain attentive to any request or question. Greetings

@markupdudes

Hi, I understand the frustration of having your server resources overwhelmed by relentless 404 scans and wp-admin login attempts. With solid expertise in WordPress, Apache, Linux, and Cloudflare, I have successfully helped numerous clients to protect their servers from malicious bot attacks and optimize resource usage. I will analyze your current setup with Liquid Web and your Cloudflare free plan to implement a robust WAF (Web Application Firewall) configuration tailored to your needs, dramatically reducing the spam traffic and securing your wp-admin area. Typically, I can have a tailored solution running within 2-3 days to safeguard your site and restore server stability. Let's start with a thorough assessment of your server and Cloudflare settings to halt these attacks efficiently. What specific types of bot attacks have you noticed most frequently, and have you tried any custom Cloudflare rules so far? Best regards,

@mayankinnovative

Hello, Security Situation After moving to Liquid Web, your server is getting hammered by automated traffic—404 scans, wp-admin brute-force attempts, and bot activity that’s consuming resources and causing outages. With Cloudflare already in place (free plan), the goal is to harden the setup without breaking legitimate access. Stabilization Plan I’ll start by analyzing server logs (Apache + WordPress) to identify traffic patterns, attack vectors, and abusive IP ranges. Based on that, I’ll tune Cloudflare security using firewall rules, rate limiting alternatives available on the free plan, bot fight mode, and proper challenge rules for wp-login, wp-admin, and common scan paths. On the server side, I’ll tighten Apache and WordPress security: blocking malicious user agents, restricting admin access, disabling XML-RPC if not required, and adding lightweight rules to reduce unnecessary load. Everything will be configured carefully so real users and search engines are not affected. Outcome & Control Once completed, your server will stop wasting resources on junk traffic, admin attacks will be minimized, and uptime will stabilize. I’ll also explain what was changed so you know how to monitor it going forward or adjust rules later if traffic grows. I can start immediately and work hourly With Solutions integrate 15+ years of professional software knowledge.

@hareshchauhan566

I can help secure your Liquid Web server and reduce bot traffic causing resource issues by tightening Cloudflare settings, blocking malicious scans, protecting wp-admin, and hardening your WordPress site to stop those recurring attacks.