[ SECURITY ]·#0003·7 min read··status: resolved
My Monitoring Said the Server Was Too Slow. It Was Being Scanned.
Nextcloud timing out, CPU pinned at 91%, uptime flapping for days. The obvious fix was a faster host. The obvious fix was wrong — webshell scanners had found the origin directly, and every probe forked a PHP interpreter.