webnestify
It runs only on the main control panel server over port 9095. That port is fully closed by default and only opened for specific allowed IPs. The WebUI is protected by a strong password plus two layers of security: UFW and built-in IP restriction.
To access it, you need to run:
cpfence --add-webui-ip <your-ip-address>
This command whitelists your IP in both UFW and the WebUI’s built-in protection.
So, for someone to gain access, they'd first need root access to reset the password and have their IP manually whitelisted from root. Even after logging in, only specific allowed actions can be executed , any attempt to tamper with those won’t be allowed.
