Firewall & Security Shield
Dual-tier protection: Server-level packet filtering (UFW), intrusion prevention (Fail2ban), and WordPress 7G/8G Web Application Firewall.
UFW Packet & Port Access Control
Controls Linux kernel network packet routing. Default incoming is DENY, default outgoing is ALLOW.
| Index | To (Port / Service) | Action | From (IP / Subnet) | Protocol | Delete |
|---|---|---|---|---|---|
| Loading UFW rules... | |||||
Fail2ban Automated Host Intrusion Defense
Monitors system authentication logs and automatically jails IPs exhibiting brute-force attacks.
Fine-tune automated intrusion detection. Attackers exceeding this threshold are blocked instantly at the server packet filter.
Currently Jailed / Banned IP Addresses
| Banned IP | Jail Name | Status | Action |
|---|---|---|---|
| No IPs currently jailed. | |||
WordPress Web Application Firewall (WAF)
Zero-overhead Nginx application filtering. Blocks SQL injections, cross-site scripting, bad bots, and brute-force logins.
Inspects query strings, request methods, and user-agents for SQL injection (UNION SELECT), base64 exploits, XSS tags, path traversals, and automated scanners (Nikto, SQLmap, WPScan). Intercepted at Nginx with instant 403 Forbidden.
Limits login attempts to 5 requests/minute per client IP with a burst allowance of 10. Excess attempts receive immediate HTTP 429 Too Many Requests without loading PHP.
Completely blocks /xmlrpc.php requests. Stops XML-RPC pingback amplification attacks and automated credential stuffing.
Denies queries like /?author=1 and public REST endpoint /wp-json/wp/v2/users to stop automated username harvesting by threat actors.
Denies web access to .env, .git, .bak, .sql, .log, and sample config files.
Ensures no script inside /wp-content/uploads/ can ever execute PHP. Protects against arbitrary file upload backdoors.
Block hostile geographic regions or whitelist only your legitimate business countries to eliminate over 90% of bot scans.
⚡ Any request matching the block rule receives an immediate 403 Forbidden drop before WordPress processes any PHP.
🔬 Forensic Threat Inspector & Audit Log Deep Packet Inspection
Filter, audit, and analyze hostile web probes, path traversals, SQLi attempts, and brute-force events.
| Threat Type ⇅ | Location ⇅ | Details | Status ⇅ | Date ⇅ | Action |
|---|---|---|---|---|---|
| Loading threat stream... | |||||
Raw Security Interception Log (Last 50 Events)
Streaming logs...
Firewall Protection
| Request | GET /phpinfo.php.bak |
| IP | 136.70.243.177 |
| Location | United States |
| HTTP status | 403 |
| Request ID | f51337aa50073473b9942e44e75a67e0 |
| Bot | No |
Detection Details
| Code | FW_URI_FILENAME_BUCKET_6 |
| Area | uri |
| Matched pattern | /(\)(olux|owl|pekok|petx|php-?info|phpping|popup-pomo|priv|r3x|radio|rahma|randominit|readindex|readmy|reads|repair-?bak|root)(\.php)/i |
| User agent | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 |
| Referer | - |
| Protocol | HTTP/2.0 |