aaPanel_Jose the api to the node is a problem, as long as you cannot pull the download without the api, you are dependent on the node and as long as the ips can be tracked.
the user who creates here via the db: INSERT INTO users
(id
, username
,password
, login_ip
,login_time
, phone
,email
) VALUES
(1, 'admin', '21232f297a57a5a743894a0e4a801fc3', '192.168.0.10', '2016-12-10 15:12:56', 0, '287962566@qq.com');
Many of the attacks come from the same, namely from Guangdong Communication Co.Ltd. ASN 9808
All attacks are conducted via our own proxy servers or others, but ultimately from the regions of BT.CN and Shenzhen Tencent Computer Systems Company Limited ASN 45090
backlinks like libList.conf :: "help": "http://www.bt.cn/bbs",
it is very helpful to prepare such attacks, because they alone provide enough information about which ip the panel is installed on.