BitNinja Part 2: Management & Troubleshooting
Managing & Troubleshooting BitNinja
Checking Status
From the BlitzPress panel, go to your server → Security → BitNinja. Via SSH:
# Check if running
systemctl status bitninja
# Module status
bitninjacli --module-status
# Version
bitninjacli --version
Module Management
BitNinja runs multiple security modules. Enable or disable individually:
# List all modules
bitninjacli --module-status
# Disable a module
bitninjacli --module=WAFManager --disable
# Enable a module
bitninjacli --module=WAFManager --enable
# Reload a module
bitninjacli --module=SenseLog --reload
Common Modules
| Module | Purpose | Notes |
|---|---|---|
| AntiMalware | Malware scanning | Starts automatically after install |
| WAFManager | Web Application Firewall | Supplements BlitzPress 7G WAF |
| IpFilter | IP reputation & blocking | The Defense Network module |
| SenseLog | Log analysis | Must have OLS logs configured |
| Captcha | CAPTCHA challenges | For suspicious visitors |
| PortHoneypot | Honeypot ports | Detects port scanners |
| SslTermination | SSL inspection | For HTTPS traffic analysis |
BitNinja & BlitzPress Security Stack
BitNinja works alongside BlitzPress’s existing security features:
| Layer | BlitzPress (built-in) | BitNinja (add-on) |
|---|---|---|
| WAF | 7G rewrite rules in OLS | Application-layer WAF with AI |
| Brute Force | fail2ban on SSH | IP reputation + CAPTCHA |
| Malware | ClamAV + maldet + Virusdie | AI-powered scanner + auto-patch |
| IP Blocking | Manual UFW rules | 100M+ shared IP blocklist |
| Bot Detection | 7G User-Agent rules | Behavioral analysis + honeypots |
| Spam | Not included | Outbound spam detection |
| Log Analysis | Manual | Automated SenseLog |
You do not need to disable BlitzPress’s built-in security to use BitNinja. They complement each other — BlitzPress handles the OLS/server layer, BitNinja adds the network intelligence layer.
Troubleshooting
BitNinja not starting
# Check service logs
journalctl -u bitninja -f --no-pager | tail -50
# Restart the service
service bitninja restart
High RAM usage
BitNinja typically uses 200-500MB RAM. If your server is low on memory:
- Disable modules you don’t need (e.g., PortHoneypot, Captcha)
- Consider upgrading your VPS RAM
- Or uninstall BitNinja and rely on BlitzPress’s built-in security stack
SenseLog not detecting attacks
- Verify log paths:
cat /etc/bitninja/SenseLog/config.ini - Check logs exist:
ls /home/*/logs/*access.log - Reload:
bitninjacli --module=SenseLog --reload
WAF blocking legitimate requests
- Check the BitNinja dashboard for recent blocks
- Whitelist the IP or URL pattern in BitNinja’s WAF settings
- Or temporarily disable:
bitninjacli --module=WAFManager --disable
UFW rule conflicts
BitNinja adds its own UFW rules (marked with # Rule added by Bitninja). View them with ufw status. Manually adjust if they conflict with BlitzPress ports.
Uninstalling BitNinja
From the BlitzPress panel, click “Uninstall BitNinja” on the Security tab. This removes everything: agent, configs, logs, SSL certs, and UFW rules.
Manual uninstall via SSH:
# Stop service
service bitninja stop
# Remove packages
apt-get purge -y 'bitninja*'
# Clean up files
rm -rf /opt/bitninja /opt/bitninja-ssl-termination
rm -rf /var/log/bitninja /etc/bitninja /var/lib/bitninja
Important: After uninstalling, delete the server from your BitNinja dashboard at admin.bitninja.io → Servers → delete the entry.
BitNinja Pricing Reference
| Tier | Server Specs | Price |
|---|---|---|
| Free | ≤2 vCPU, ≤2GB RAM, ≤10 users | $0/month |
| VPS 6 | ≤4 vCPU, ≤8GB RAM, ≤10 users | $6/month |
| Standard (1 user) | Any server | $14/month |
| Standard (2-40) | Any server | $27/month |
| Unlimited | Any server | $52/month |
Annual billing and bulk discounts available. Visit bitninja.com/pricing for current rates.