Question

[UFW BLOCK] Random IPs trying to connect

Hello,

For the past weeks whenever I would connect to DigitalOcean and go to the console I would receive the following messages (https://ibb.co/pJyNCrD). I didn’t know what to make of them at the time but after some research, I found out that the firewall is blocking some connections. I tried blocking some of them using “sudo ufw deny from IP” but there are so many of them. Is there another way to permanently block these connections? Because they show up constantly they render the console unusable and after they started showing up, our server would constantly go down due to “Error displaying the error page: Application Instantiation Error: Could not connect to MySQL”.


Submit an answer

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

Sign In or Sign Up to Answer

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

In addition to what was already mentioned you may want to look into fail2ban

Hi there @c4e,

As a quick fix you could sign up for Cloudflare, this would hide your Droplet’s IP address behind their CDN and also there is an option which you could enable in case of a DDoS attack.

Another thing you could do is to add a Cloud Firewall as an extra layer of protection.

Hope that this helps! Regards, Bobby