The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
34 views

Dynamic IP Blocking on FORTIGATE 200A Firewall

I have FORTIGATE 200A firewall protecting a IIS Server running a ASP.NET website (windows server 2008 and IIS7) I'm not familiar with Fortigate configurations and options. I recently had "attacks" ...
0
votes
1answer
44 views

How can I block traffic FROM Amazon Technologies Inc. (possible DDOS attack) [closed]

I've a small website (portfolio) and I usually notice traffic of about 10-20MB per day. But for few recent days I've noticed about 10-15GB (1000 times more) each day for 4 days now (and it continue ...
0
votes
1answer
39 views

How do ISPs handle Customer IPs blocked by WebHost

At my ISP, we issue static IP addresses to customers. A lot of times, we get complaints from our users unable to access their websites or emails from their IPs (but same sites and mails are accessible ...
0
votes
1answer
77 views

squid3 blocking access to particular IP not working

I have installed a squid3 on debian and using it as a proxy server. after some time I want to block the particular user using IP address. So I have defined this rule in my squid.conf file but it is ...
2
votes
4answers
443 views

/etc/hosts.deny ignored in Ubuntu 14.04

I have Apache2 running on Ubuntu 14.04LTS. To begin securing network access to the machine, I want to start by blocking everything, then make specific allow statements for specific subnets to browse ...
0
votes
1answer
145 views

deny from .htaccess with banned IP list from stopforumspam.com not working?

so i'm trying to use .htaccess to ban a large list (50,000) of suspicious spam IP addresses that i got from this site. the list is almost 1M in size when i add the deny from directive for each ...
1
vote
2answers
2k views

How to run node.js app on port 80? Are processes blocking my port?

I believe the port 80 on my remote instance is blocked, and I am trying to run a node.js app using port 80. I have experimented with ports 3000 and 3002, and both ports are working fine, but I get an ...
0
votes
1answer
394 views

csf lfd denied by desktop because of mod_security

I have a WHM/Cpanel server with CSF/LFD installed and mod_security enabled. I used to login to WHM/cpanel from one of my local windows box through a linux (Centos 5)NAT gateway(with a public IP ...
0
votes
1answer
476 views

Block all public IP addresses except those whitelisted

We have a 2008 R2 server hosted in a data centre where we have no physical access but connect to it using RDP. We plan to run SQL Server and some other services which should only be accessible to a ...
1
vote
1answer
461 views

Nginx geoipblocking & allowing LAN IPs

I'd like to block IPs with geoip except whitelisted countries AND the local area network. The first part works flawless, the second one not. Somwehere searching the internet I found the codes LH ...
0
votes
0answers
50 views

new attacks from banned IPs in CSF

I have many blocked IPs in csf with "do not delete" comment. But every day I got notifications from server about new brute force attacks via some of these IPs. When I want to add the attacker IP to ...
0
votes
0answers
398 views

How to set csf to block brute force attacker's IP beside DirectAdmin settings?

I have a VPS with CentOS, DirectAdmin and CSF. This is what I have set in DirectAdmin: But as I talked with DirectAdmin support team, when CSF is installed on the server, these settings don't ...
2
votes
2answers
976 views

Block bots by their Java referrer or User-Agent string?

I have been getting a lot of web hits in my logs that crawl most top level pages of my site and show a referrer as a Java version. I see different variants of the Java versions in the referrer, i.e. ...
0
votes
1answer
206 views

Nginx “allow 127.0.0.1” in location block letting in all users

Problem I have the following block in my nginx config. The idea is to let the server access the file but noone else. If anyone else accesses i it should throw a 403. If I comment out the allow line ...
2
votes
2answers
954 views

Fail2ban log filled with entries saying “fail2ban.filter : WARNING Determined IP using DNS Lookup:..”

My fail2ban log at /var/log/fail2ban.log is completely filled with entries saying: fail2ban.filter : WARNING Determined IP using DNS Lookup: [IP address] I think this may have begun after I changed ...
3
votes
1answer
117 views

Fail2ban settings after changing ssh port

I switched my ssh port to 22000 and I changed the port settings in /etc/fail2ban/jail.local to specify to ban on both 22 and 22000 but when I tried failing to login 6 times, my connection was cutoff ...
0
votes
1answer
61 views

Files repeatedly downloaded form same IP - suggestions?

I have a few files that can be downloaded from my website. Every few hours all files are downloaded from the same IP address (98.137.207.97 - might be Yahoo?). How should I proceed? Should I just ...
0
votes
1answer
204 views

Automation of blocking IP address

I have an Ubuntu 12.04 machine running Apache2 which hosts about 10 wordpress websites. Recently I have been subjected to attacks from clients which seem to be sending POST requests to a wordpress ...
1
vote
2answers
212 views

Adding sleep / delay between iptables blocks in shell script

On one server, we're trying to block any access for the country China. We wish to implement this with iptables rather than via .htaccess. The problem we're experiencing though, is that when adding ...
1
vote
1answer
63 views

Does an ip catch all exist?

I'm trying to block specific ip address traffic using this: sudo iptables -A INPUT -s 192.148.10.209 -j DROP Does an ip address catch all exist where I could block all addresses on 192.148.10.* ...
4
votes
1answer
288 views

Amazon S3 appears to be blocking cloudflare IP addresses. How do I fix it?

I have static content that is being served by Cloudflare. Cloudflare points to Amazon S3 to pick up the static content and serves it via a CNAME (cdn.mydomain.com). The bucket is setup properly and ...
1
vote
1answer
581 views

Can't reach server without proxy (website down from my home)

I have a website hosted on Hostinger However I am experiencing problems with my wordpress site. This is really annoying. If I understood the situation right, The server is blocking me or denying ...
0
votes
1answer
880 views

Prevent DNS responses for specific domain completely

Situation: Server (Win 2008R2) is being used in a DNS (amplification) DDoS attack. Amplification factor is already down to 1: Set the DNS server to non-recursive and removed all root hints -> DNS ...
0
votes
0answers
80 views

Check IP Blocking on Windows Server 2008

When I login to google webmaster tools, from last 5-6 days I am getting error regarding Google connectivity issue. It says googlebot is not able to access the site. When I set User agent in firefox ...
0
votes
1answer
1k views

Hacking attempt detected, Can we block user by PC-Name

Recently we notied that hackers are trying to hack our server, we have IP blocking softwares installed on our server but the thing is that, hacker is using dynamic ip addresses to try again and ...
1
vote
1answer
202 views

.htaccess rules cause infinite loop

I am trying to set up some .htaccess rules to stop my WordPress wp-login.php page being accessed from anyone outside of the UK (I keep getting hundreds of people daily trying to hack into it from ...
1
vote
1answer
151 views

View when IP Address Was Blocked in IIS

We had an issue recently where our server started throwing 500 errors because an IP address was blocked that had already been blocked elsewhere. It -appears- that the IP was blocked on individual ...
1
vote
3answers
469 views

Is it possible to automatically block too frequently accessing IP addresses?

One IP address was accessing my site too frequently to be a real user, it was accessing so much that it caused site to slow down. Is there any application that can automatically block IP, if it is ...
-1
votes
1answer
205 views

How to find out why website is not accessible? [closed]

I cannot access a certain website. There are two possible reasons: The block is on the ISP side. The block is at the website. Is there a technical way to figure out which of these are causing the ...
1
vote
1answer
421 views

Regular POP3D Attacks and Blocks

I'm using a self-hosted wordpress blog. I'm using Gmail to access my domain email accounts. I want to know, is built-in email services such as exim, etc are necessary if we are using Gmail to manage ...
0
votes
1answer
516 views

Frequent UDP_IN Blocked for Port Scanning

I run a blog self-hosted with Wordpress. I'm getting frequent email notifications from LFD regarding UDP_IN blocks. I usually get 10+ emails daily about it. The email looks like following: Time: ...
0
votes
1answer
60 views

Security risks of allowing incoming traffic as a response of a previous request

I understand that somebody would want to block incoming traffic as a general rule except for public resources. And I also understand that you could want to block all outgoing traffic except for ...
0
votes
1answer
948 views

Cisco ASA - Unable to create “range” type of network object on 8.2

I'm wanting to block a range of ip addresses on my Cisco ASA 5520 (8.2) using ASDM 6.4. In the help files/cisco documentation, it says, just create a network object with a "range" type, and use that ...
6
votes
2answers
2k views

IIS7 ban IP range [duplicate]

Possible Duplicate: How does IPv4 Subnetting Work? I have a list of IP ranges I would like to ban, an example being: 119.30.47.xx Where xx is anything. I've added the domain and IP ...
5
votes
4answers
8k views

How to Automatically and Temporarily block an IP address making too many hits on the Server in a short timespan?

One of my LAMP servers was recently brought down by some kind of script bot looking for exploits. From the looks of it, it was making so many requests a second, that it overloaded the RAM on the ...
0
votes
1answer
141 views

Block IPs in Local Security Policy

What would be the most efficient way of blocking a list of IPs in Windows 2008's Local Security Policy? Ideally, I would want to block the subnet that the IPs belong to. What IP subnets should I be ...
0
votes
1answer
98 views

Blocking request to port 80 on gateway on Ubuntu

I want to block access to the gateway (192.168.1.1) on port 80, to prevent network user from trying to access the router setup. I'm using Ubuntu 9.10
1
vote
2answers
67 views

Does ip blocking occur anywhere other than at the endpoints?

My localhost's IP address/port is being blocked from accessing a certain site. The blocking is occurring, but I don't know where. The question is : does IP blocking possibly occur not only at the ...
1
vote
3answers
183 views

IPTables not blocking some connections

I am using IPtables for a basic firewall, I have placed some blocks on those IP's attempting FTP, SSH conenctions, etc. I have accept rules at the top for good measure to ensure that my monitoring ...
0
votes
2answers
1k views

How to add iptables ip blocklists to Plesk 10.4.4 (CentOS)?

I'm trying to figure out the best way to add IP blocklists to my Plesk 10.4.4 server (CentOS). It's a simple Virtual Server I recently acquired through my hosting company. I've used .htaccess files ...
2
votes
2answers
459 views

If I block users with a blank IP address, will that affect innocent, non-technical users?

I run a website with an anonymous commenting feature. Users can flag each other for abuse; flags are tied to an IP address (grabbed via PHP from $_SERVER['REMOTE_ADDR']). I've noticed that 99% of the ...
-2
votes
2answers
161 views

My bulk email company supresses all hard bounces -even if they get their IP's blocked

I send out about 500,000 emails every week. I have been sending the list out for about 1 year. But in conversation, I was advised that the company sends in a shared IP manner. So my list goes out ...
0
votes
1answer
186 views

Blocking all RIPE Addresses in Server 2008?

Our datacenter has recommended we block all RIPE IP Addresses on one of our machines. It is constantly being DDoS Attacked everytime the null routes are lifted, so I am not sure how this would help, ...
2
votes
3answers
6k views

How to create a group policy to block facebook or any website in windows server 2008 r2 domain

How do I create a Group Policy that will prevent my users from accessing specific web-sites? I am at the 2008r2 functional level.
2
votes
2answers
883 views

Block IPs that try to exploit common webapp vulnerabilities

Is there an application that goes through the nginx logs and blocks IPs that made requests for common webapp vulnerabilities? I have an nginx web server that serves only static content. I routinely ...
0
votes
1answer
552 views

Allow Only US Traffic (Server 2008 R2)

I'm trying to setup Windows Server 2008 R2's firewall so that it blocks all traffic except traffic originating from US IPs. The current inbound firewall policy is setup as follows: Block a few ports ...
1
vote
2answers
399 views

How to ban potential hacker IP Addresses from Port 80?

I am hosting a bunch of PHP web sites on a web server. While I have taken all precautionary mesaures to protect all ports, Port 80 specific attacks continue. I want to ban any IP Address that taken an ...
1
vote
2answers
481 views

Automatically block IP in apache2 - it is possible?

Is there are a way to automatically block IPs with apache2. For example, if we get a lot requests (100s) for non-existing pages (or known patterns, like CHANGE_LIST.txt, etc.) to block that IP and add ...
4
votes
3answers
3k views

How to block a Countries IP range with a Cisco ASA?

To be more specific I have a request from a client to block China's IP range. I know how to do this. I would use the IPs from https://www.countryipblocks.net/e_country_data/CN_netmask.txt and make a ...
2
votes
4answers
214 views

Blocking attacker's IPs: What options do I have?

A website of mine is being attacked by some IPs. I don't even know if it was a ddos yet, I only know that it has been filling my application's logs for longer than a day, and then the server crashed ...