IT Support · DevOps · Consultancy

What we do in the first hours

• Access & Health Check secure access, OS/Web/DB checks, resources and security posture.
• Monitoring Online : connect to Zabbix with basic dashboards & alerts.
• WAF & Traffic Hygiene Sucuri/Cloudflare rules,GeoIP _ User-Agent policies to reduce noise.
• Backups : configure/verify Proxmox Backup Server (PBS) , retention, test-restore checks.
• Hardening BitNinja updates, rate-limits & protection for admin endpoints.

What we deliver next

• Short audit report with findings and priorities.
• Runbook/Playbook for incidents, deploys, backups/restore.
• Improvement plan : caching strategies, DB tuning, WAF fine-tuning, capacity planning.
• Agreed escalation and clarified response times.

Zabbix 24/7 Monitoring

Infrastructure/application monitoring with alerts & escalation. Correlate metrics withaccess logsfor spikes/latency and targeted action.

• Dashboards & notifications
• Escalation policies
• Capacity & trend analysis

BitNinja Security

Multi-layer protection: WAF/IPS, IP reputation, bot control, malware scanning & honeypots. Foundation for Traffic Hygiene,

• Server-level WAF/IPS
• Bot & reputation filtering
• Custom rules / hardening

Sucuri WAF & DDoS

Edge WAF/DDoS with GeoIP & User-Agent policies. Filter crawlers/scrapers without harming official search bots or legitimate international traffic.

• WAF rules & rate-limits
• GeoIP policies & exceptions
• User-Agent allow/deny & challenges

Cloudflare CDN, WAF & DDoS

Global CDN, smart caching and an extra WAF/DDoS layer. Combine rulesets, page rules and bot management per route/endpoint.

• CDN & smart caching (HTML edge cache where it fits)
• Firewall rules, bot/challenge modes
• Page rules, redirects, TLS optimization

Proxmox Backup Server (PBS)

Enterprise backups with local repositories & offsite targets. Retention, verification (test restores) and DR playbooks.

• Local + offsite targets
• Retention & verification
• DR planning (RPO/RTO)

Performance & Reliability

App/web/DB tuning, caching layers (Redis/Memcached), PHP-FPM/LSAPI optimization, runbooks for stability.

• Cache strategies & invalidation
• DB/index tuning & connection pooling
• Zero-downtime practices

1) Collection & Normalization

We aggregateaccess logsfrom web servers (Apache, NGINX, LiteSpeed/OpenLiteSpeed) and normalize (UA, IP, ASN, Path, Status, Bytes, TLS, Country).

• Separate human traffic vs bots/crawlers
• Unify multiple hosts/containers
• Enrich with GeoIP & ASN

2) Metrics that matter

We don’t just look at “hits”. We examine rates, patterns and correlations with latency/errors.

• Bot rate (often up to ~60% in some environments)
• Top UAs/IPs/ASNs and hot paths (/wp-login.php /cart /api
• Spikes & anomalies vs Zabbix (CPU/IO/RAM, latency, 5xx)

3) Filtering policies

Based on findings we apply targeted policies on Sucuri/Cloudflare (edge) and BitNinja (server):

• GeoIP block/challenge countries outside your audience, with exceptions (corporate IPs, partners, travelers/VPN).
• User-Agent : allowlist official bots with reverse DNS/ASN validation ), blocklists for headless/malicious UAs, JS/Cookie challenges
• WAF rules : rate-limits, route-based rules (e.g. stricter on /wp-admin /api

4) Impact checks & optimization

After rollout we perform gradual rollout and monitor the impact on performance, errors and SEO.

• A/B or canary testing on a small traffic slice
• Track changes in latency, error budgets, conversion
• Fine-tune rules, add exceptions for legitimate tools

Why it matters

Filtering noise means cleaner analytics, fewer scraper spikes, steadier UX and resource savings (CPU/IO/TLS/bandwidth).

What we don’t do

No cloaking and no blocking of legitimate crawlers or assistive technologies.