Yesterday, my friend called me to help check something. It turned out that it was nginx again. He asked if I had closed the panel. My friend said he hadn't closed but had restricted access. His baltan panel allowed only specified IP addresses to access. He also used enterprise-level anti-spoofing. The problem still occurred with nginx.
Baltan is truly god-like. There have been vulnerabilities for years.