If you host with EDZNET, you’ve probably seen the BitNinja logo at the bottom of our website. BitNinja is the security system that guards every one of our shared and managed hosting servers, around the clock. You don’t need to install it, configure it or pay extra for it — it’s already working for your website and email. This guide explains what it actually does, in plain English, and what (if anything) you ever need to do about it.
The Short Version
Every website on the internet is attacked constantly. Not by someone targeting you personally — by automated bots that crawl the web day and night, trying common passwords, probing for out-of-date WordPress plugins and looking for anywhere to upload malware or send spam.
BitNinja sits on the server in front of your website and email, and watches every connection that comes in. Normal visitors and customers pass straight through without noticing anything. Connections that behave like an attack are blocked before they ever reach your site.
Think of it as a security guard on the door of the building, rather than a lock on your own office: it protects everyone in the building at once, and it’s already there when you move in.
What BitNinja Protects You From
- Password guessing. Bots try thousands of username and password combinations against WordPress logins, cPanel, webmail, email accounts and FTP. BitNinja spots the pattern of repeated failures and blocks the address doing it.
- Hacking attempts on your website. A built-in web application firewall recognises common attack techniques — such as attempts to break into databases or exploit known plugin weaknesses — and stops those requests before your website has to deal with them.
- Malware. Files uploaded to the server are scanned for known malicious code, so an infected upload or a compromised plugin is caught early rather than quietly spreading.
- Bad bots and floods of traffic. Scrapers, vulnerability scanners and bursts of junk traffic designed to slow a site down are filtered out, which keeps your website fast for real visitors.
- Known bad actors. BitNinja shares what it learns across a worldwide network of protected servers. An address caught attacking a server in another country can be challenged or blocked on ours before it ever tries anything here.
- Attack tools in disguise. Hacking tools often pretend to be a normal web browser. BitNinja can recognise them anyway from the way they set up a secure connection — a kind of digital fingerprint. (How TLS fingerprinting works.)
Why It Matters Even for a Small Website
It’s easy to think “nobody would bother hacking my little site.” Bots don’t pick targets — they try everything. A hacked small-business website is useful to criminals for sending spam, hosting phishing pages or redirecting your visitors elsewhere. The consequences land on you:
- Google flags your site as dangerous and your visitors see a red warning page.
- Your email domain gets blacklisted, so your invoices and quotes stop reaching customers.
- You spend time and money cleaning up, restoring backups and rebuilding trust.
Stopping attacks at the server level means most of them never get the chance to start. It also protects you from your neighbours: on shared hosting, a problem on one account could otherwise affect everyone on the server. BitNinja works alongside our account isolation (CloudLinux and CageFS) so that each website is kept safely in its own space.
What You’ll Notice (Usually Nothing)
For almost everyone, almost all of the time, BitNinja is invisible. Your visitors browse, your customers buy, and your email flows as normal.
Occasionally, if a connection looks a little suspicious, a browser visitor may see a short security check page — either a brief “checking your browser” screen or a simple captcha. Completing it lets them straight through. This is BitNinja giving a real person the benefit of the doubt rather than blocking them outright.
What If BitNinja Blocks Me?
It does happen, and it’s nearly always for an innocent reason. The most common cause by far is an old password saved on a device: you change your email password, but an old phone or tablet keeps trying the old one in the background. To the server, that looks exactly like someone guessing passwords, so your connection gets blocked — and often everyone else on the same office Wi-Fi with it.
The signs are: the website shows a captcha that keeps coming back, or your email app or FTP program suddenly times out, but everything works fine on your phone’s mobile data. Very old browsers and email apps can also show an “SSL handshake” error, because their outdated connection style looks like an attack tool — updating the app fixes it.
Getting unblocked is quick:
- Find your IP address with our What’s my IP tool (or whatsmyip.edznet.io if edznet.io won’t load for you).
- Send it to our support team, with a note of what wasn’t working.
- We’ll remove the block and tell you what triggered it, so it doesn’t happen again.
Our full guide, Blocked from your website, email or cPanel?, walks through it step by step, and the knowledge base has a quick-reference version: Blocked by the firewall? How to get your IP unblocked.
Is BitNinja a Replacement for Keeping My Website Updated?
No — it’s a strong extra layer, not a substitute for good habits. Security works best in layers:
- Keep WordPress, themes and plugins updated. Updates close the holes attackers look for. (Our managed WordPress plans handle this for you.)
- Use strong, unique passwords and turn on two-factor authentication where you can.
- Keep your own computers clean. Malware on your PC can steal passwords, and no server firewall can stop someone who logs in with your real details.
- Keep backups. Our hosting includes them, but it never hurts to have your own copy too.
Frequently Asked Questions
Do I need to install anything?
No. BitNinja runs on the server itself and protects every website and mailbox on it automatically. There’s nothing to install in WordPress or on your computer.
Does it cost extra?
No. It’s included with all EDZNET shared, managed and reseller hosting at no extra cost.
Will it slow my website down?
No — if anything, the opposite. By turning away junk traffic before it reaches your site, it leaves more of the server’s resources for your real visitors.
Does BitNinja see my customers’ data?
BitNinja processes technical details such as IP addresses and login attempts to decide what to block. It does this on our behalf, purely to keep the servers secure, and keeps that data only as long as it needs to. Our privacy policy covers this in more detail.
Can my office IP be exempted?
If your business has a fixed (static) IP address, yes — ask us and we can whitelist it. Most home and mobile connections change their IP regularly, so whitelisting those doesn’t help for long.
Why does my site sometimes show a captcha to visitors?
The visitor’s connection (often a VPN, a shared public network or an unusual browser) looked suspicious for a moment. Completing the check lets them straight in. If a particular customer sees it repeatedly, ask them for their IP address and we’ll take a look. For the technical background, see TLS handshake fingerprinting explained.
