How to use this plug-in in aaPanel: First download the plugin: Download Select import in the panel third-party plugin If you don't have this column now, please update to panel 6.5.1 or above. Here are some screenshots of the features:

hello, this plugin can block many request GET/POST with /?s=xxxxx (random string) in WordPress

@aaPanel_Jose CDN will be checked if a website behind a CDN like cloudflare?

kaz050457 If your site has cdn enabled, please tick here.

Third-party plug-in for aaPanel [Nginx Free Firewall]

aaPanel_Jose

jazz1611
The plugin can customize various rules, I think it can be applied to all sites, but blocking some special requests may require you to manually add rules according to the actual situation.

jazz1611

aaPanel_Jose
after install, it show this

NO, ON/OFF ?

aaPanel_Jose

jazz1611
Already fixed, please uninstall and re-import

jazz1611

aaPanel_Jose
hello, it work fine now. but how can i block many request (spam) GET/POST with /?s=xxxxx (random string) in WordPress ?

aaPanel_Jose

jazz1611
Can you give me some access log information for wp? I will test the rules for you and send them to you.

jazz1611

aaPanel_Jose
many IP flood like this with random string
177.70.172.242 - - [22/Nov/2019:05:43:14 -0500] "GET /?s=isN2S8zjJmvA3DoOI6Zg7GtcTCfkXPREy019a4dWUp5LwnHhFeVlrubsN2S8zjJmvA3DoOI6Zg7GtcTCfkXPREy019a4dWUp5LwnHhFeVlrub HTTP/1.1" "200" 814 "http://domain.com" "Mozilla/5.0 (Linux; Android 7.1.2; ZTE-Z999 Build/N2G47H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.111 Mobile Safari/537.36" "177.70.172.242" "http://domain.com:80/?s=isN2S8zjJmvA3DoOI6Zg7GtcTCfkXPREy019a4dWUp5LwnHhFeVlrubsN2S8zjJmvA3DoOI6Zg7GtcTCfkXPREy019a4dWUp5LwnHhFeVlrub"

aaPanel_Jose

jazz1611
This is a normal search request, so the firewall is not blocked, I think you can try to use the wordpress plugin
Search Limiter & Blocker to solve this problem

professormichel

jazz1611 This type of problem you do not solve with firewall, you are getting an application attack, this type of attack needs to be mitigated with htaccess. If you wish I'm an information security engineer, I can help you with that.

szone

aaPanel_Jose Thank you so much for this security firewall, saved me from DDOS which was causing 100% CPU usage. Please report this IP for DDOS [85.254.72.27]

szone

aaPanel_Jose

I have one question, if you can answer, do we still need to use Fail2BAN Manager, after installing this firewall?
If we still need to use Fail2BAN Manager, then I am facing an issue today, fail2ban manager service is not starting since I have updated AAPanel to 6.5.1. Please share some knowledge about it.

Thanks in advance!

UPDATE: I have uninstalled Fail2BAN manager and reinstalled it again, working fine now.

aaPanel_Jose

szone
They can coexist

LCDraws

Thanks a lot for the plugin 😃
the translation needs some work tho 🙁

aaPanel_Jose

LCDraws
Could you translate more professionally? 😀

LCDraws

aaPanel_Jose where can i find the translation files? 🙂

LCDraws

aaPanel_Jose ugh... is hardcoded 🙁

jazz1611

aaPanel_Jose
hello, that plugin can't help with thousands request per min.

Kasi

aaPanel_Jose when i activate Nginx Firewall my forum go down why ?

aaPanel_Jose

Kasi
Please check the interception logs for incorrect interception?

v1sh4l

It won't work with Apache?

Can you add more features like ip blocklist in fail2ban plugin?

caiconcac

How not to rewrite error log and access log nginx

doger

on this new protection, is it possible to change the port? or should it be port 80 by default?

« Previous Page Next Page »