Firewall & Security Shield

Server Firewall (UFW)

Active UFW Port Rules

Fail2ban Jails Active

Threats Intercepted (24h)

UFW Packet & Port Access Control

Controls Linux kernel network packet routing. Default incoming is DENY, default outgoing is ALLOW.

Active

☁️ Cloudflare-Only Port 80/443 Strict Lock (Direct Origin Shield) Checking...

Silently drops all direct IP scans and bypass attempts at the Linux kernel packet filter (0 CPU/RAM overhead). Ports 80 and 443 strictly accept connections only from official Cloudflare proxy IP ranges and private management subnets (LAN & loopback). SSH (Port 22) is always preserved.

Scanning UFW port 80/443 bindings...

🚨 SSH Port Hardening & Custom Port Switcher Port: Checking... Access: Checking... Rate Limit: Checking...

Attack bots and automated scanners continually brute-force default Port 22 across the internet. Switch to a non-standard high port, restrict to trusted IP/LAN, or activate kernel-level rate limiting to eliminate 99%+ of intrusion attempts.

Option A: Change SSH Port Anti-Lockout Protected

Updates sshd_config, verifies with sshd -t, opens new port in UFW, and cleanly removes the old port.

Option B: Restrict Source IP Anywhere

Only allow connections from your home/office static IP or VPN CIDR. Anyone else is dropped.

📜 Live SSH Login & Authentication Audit Log Loading events...

▼

Time	User	Status	Auth Method	Source IP & Port	Key Fingerprint / Note
Loading recent SSH sessions...

+ Add Port / IP Firewall Rule

Index	To (Port / Service)	Action	From (IP / Subnet)	Protocol	Delete
Loading UFW rules...

Banned IP	Jail Name	Status	Action
No IPs currently jailed.

WordPress Web Application Firewall (WAF)

Zero-overhead Nginx application filtering. Blocks SQL injections, cross-site scripting, bad bots, and brute-force logins.

Select Target Site:

🛡️ 7G/8G Application Firewall Ruleset Zero PHP Overhead

Inspects query strings, request methods, and user-agents for SQL injection (UNION SELECT), base64 exploits, XSS tags, path traversals, and automated scanners (Nikto, SQLmap, WPScan). Intercepted at Nginx with instant 403 Forbidden.

⏳ /wp-login.php Brute-Force Rate Limiter DDoS & Brute-Force Shield

Limits login attempts to 5 requests/minute per client IP with a burst allowance of 10. Excess attempts receive immediate HTTP 429 Too Many Requests without loading PHP.

🚫 XML-RPC Complete Lockdown Exploit Prevention

Completely blocks /xmlrpc.php requests. Stops XML-RPC pingback amplification attacks and automated credential stuffing.

🛡️ Aggressive REST API & Author Lockdown Brute-Force Shield

Blocks unauthenticated reconnaissance of administrator and author usernames via /wp-json/wp/v2/users, query routes (?rest_route=...), and /?author=1 scans before attackers can launch credential-stuffing or brute-force attacks.

📁 Block Sensitive System, Backup & Env Files Data Leak Shield

Denies web access to .env, .git, .bak, .sql, .log, and sample config files.

🛡️ Block PHP Execution in Uploads Directory Web Shell Blocker

Ensures no script inside /wp-content/uploads/ can ever execute PHP. Protects against arbitrary file upload backdoors.

🍯 Nginx "Honeypot Trap" Auto-Jail Zero False-Positive Instant 30-Day Kernel Ban

Exposes fake lure URLs that no legitimate human would ever visit (e.g. vulnerable plugin connectors, leaked database backups, fake phpMyAdmin paths). If an IP sends even 1 request to a honeypot lure, it is guaranteed to be an automated exploit bot and is banned instantly in Fail2ban for 30 days at the Linux packet filter with 0% risk of banning a real customer.

🌍 GeoIP Country Shield & Geoblocking Cloudflare & Nginx Edge Drop

Inspect attack origins on the live threat radar, blacklist hostile regions, or whitelist only your legitimate client countries to deflect automated probes at zero PHP cost.

🌐 Global Attack Origins Radar LIVE TELEMETRY

⚡ Cloudflare CDN Geo-Header: CF-IPCountry Edge Drop: HTTP 403 Forbidden

Top Threat Countries (7d) Analyzing feed...

Loading country statistics...

Request	GET /phpinfo.php.bak
IP	136.70.243.177
Location	United States
HTTP status	403
Request ID	f51337aa50073473b9942e44e75a67e0
Bot	No

Code	FW_URI_FILENAME_BUCKET_6
Area	uri
Matched pattern	/(\)(olux\|owl\|pekok\|petx\|php-?info\|phpping\|popup-pomo\|priv\|r3x\|radio\|rahma\|randominit\|readindex\|readmy\|reads\|repair-?bak\|root)(\.php)/i
User agent	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Referer	-
Protocol	HTTP/2.0

Firewall & Security Shield

UFW Packet & Port Access Control

Fail2ban Automated Host Intrusion Defense

Currently Jailed / Banned IP Addresses

WordPress Web Application Firewall (WAF)

🔬 Forensic Threat Inspector & Audit Log Deep Packet Inspection

Raw Security Interception Log (Last 50 Events)

Firewall & Security Shield

UFW Packet & Port Access Control

Fail2ban Automated Host Intrusion Defense

Currently Jailed / Banned IP Addresses

WordPress Web Application Firewall (WAF)

🔬 Forensic Threat Inspector & Audit Log Deep Packet Inspection

Raw Security Interception Log (Last 50 Events)

Firewall Protection

Detection Details

Request Fields