Free and open-source VPS protection

Is abusive traffic overloading your VPS?

Immution detects repeated probes and request floods, then stops abusive clients before they reach your PHP application and consume the CPU your real visitors need.

Install Immution free See how it works

Free to use. New installations start in monitor mode and do not block traffic.

  • Local processing
  • No browser JavaScript
  • No Python/PHP packages
  • MIT licensed
$ sudo immutionctl.py explain 192.0.2.10

IP: 192.0.2.10
Score: 54.0
Banned: yes
Requests while tracked: 3
404 responses: 3
Probe paths: 3

Reasons:
  +16.0 probe /.git/config
   +3.5 404 /.git/config

# monitor mode: request allowed
Action: would_block

A narrower tool

You probably do not need an enterprise WAF.

Small Apache servers still receive constant probing and request floods. Immution gives administrators a local, explainable layer for this specific problem without pretending to replace patching, backups or network-level DDoS protection.

01

Monitor first

New installations record what would be blocked. They do not return a 403 until an administrator explicitly changes mode.

02

Explain every decision

Scores, recent reasons and temporary state remain inspectable through a small local command-line tool.

03

Reverse the action

Scores decay, inactive state expires and one command immediately unblocks an address.

How it works

Logs become documented, temporary decisions.

Immution does not trust a “bot” label in the User-Agent and does not accept spoofable forwarding headers directly. Behaviour is evaluated from the effective client address and the local Apache access log.

1. Observe The Python daemon follows Apache access logs and detects documented error, probe and burst patterns.
2. Score Atomic local state records the score, expiry and recent reasons for the effective client address.
3. Decide The PHP gate records would_block in monitor mode or returns a temporary 403 in block mode.

Install safely

Start in monitor mode. Keep control.

Review the installer, run it from the extracted release directory and inspect the report generated from your normal workload before enabling blocks.

  • Integrated path testedUbuntu 24.04 LTS, Apache 2.4, mod_php and systemd
  • Request gatePHP 7.0 or newer
  • Daemon and toolsPython 3.6 or newer
  • DependenciesStandard Python and PHP libraries only
The v0.1 installer does not configure PHP-FPM, Nginx or trusted reverse proxies automatically. Read the compatibility notes before using block mode. 
# Extract the downloaded GitHub release
$ unzip immution-0.1.0-rc4-py36.zip
$ cd immution-v0.1.0-rc4

# Review, then install
$ less scripts/install.sh
$ sudo ./scripts/install.sh

# Nothing is blocked yet
$ sudo /opt/immution/immutionctl.py status
$ sudo /opt/immution/immutionctl.py report
Download from GitHub Read the threat model

Keep the code free

Use it yourself, support the work or hire experience.

Immution is free and open source. Donations fund development. Professional services are available for teams that want installation, tuning or operational help.

Professional support

Direct help for small Apache/PHP environments, scoped to the server and workload.

  • Setup and baseline reviewfrom €190
  • Hardening and tuningfrom €390
  • Ongoing operational supportfrom €90/month
Request paid support

Release candidate 0.1.0-rc4

See what Immution would block before it blocks anything.

The public scoring rules, privacy notes, security policy and test workflows live with the source.

Open the repository Ask a question