Results 1 to 5 of 5
  1. #1
    Join Date
    Dec 2002
    Posts
    53

    Banning IWeb IP ranges

    Lately, we have been getting hit with a lot of unauthorized access attempts from the IWeb IP range.

    67.205.102.148 (CA/Canada/ip-67-205-102-148.static.privatedns.com) blocked with too many connections
    Today's example of 140 connections to port 25 before the block.

    tcp: 67.205.102.148:1915 -> MYIP:25 (ESTABLISHED)

    We are using the CSF firewall and we did have this in the csf.deny file:

    #Iweb host
    67.205.64.0/19
    72.55.128.0/18
    I changed the 67 IP to a /18. Is there something I am missing to prevent any more traffic from that host?

  2. #2
    Join Date
    Nov 2003
    Location
    Montréal
    Posts
    140
    Can you please send us more information about this.

    You can contact me in PM or abuse@iWeb.com and we will verify.

    Thanks!
    Sylvain Delisle
    Community Manager
    iWeb.com

  3. #3
    Join Date
    Oct 2009
    Posts
    276
    I saw both the Ips are put in csf.deny, hence it is already blocked. There is no other settings needed to block the connections from IWeb. You can even block the whole subnet also from this IP range if it is still occurring.

  4. #4
    Quote Originally Posted by Frontpage View Post
    Lately, we have been getting hit with a lot of unauthorized access attempts from the IWeb IP range.



    Today's example of 140 connections to port 25 before the block.




    We are using the CSF firewall and we did have this in the csf.deny file:



    I changed the 67 IP to a /18. Is there something I am missing to prevent any more traffic from that host?
    It's better to contact iWeb Enggs and see what they have to say. If there is some other server in iWeb which is compromised and carrying out such Brute Force attacks, they can take necessary action. As 'fbc' have said, forward him detailed logs so that they can check.
    | LinuxHostingSupport.net
    | Server Setup | Security | Optimization | Troubleshooting | Server Migration
    | Monthly and Task basis services.
    | MSN : madaboutlinux[at]hotmail.com | Skype : madaboutlinux

  5. #5
    Join Date
    Mar 2003
    Location
    /root
    Posts
    23,991
    The only problem here is if you have a client that is using a server in iweb and will not be able to contact you.

    Blocking an ip range of a DC is not a solution. It is the last option but you can control the attack if you are wise enough.

    Specially 4 U
    Reseller Hosting: Boost Your Websites | Fully Managed KVM VPS: 3.20 - 5.00 Ghz, Pure Dedicated Power
    JoneSolutions.Com is on the net 24/7 providing stable and reliable web hosting solutions, server management and services since 2001
    Debian|Ubuntu|cPanel|DirectAdmin|Enhance|Webuzo|Acronis|Estela|BitNinja|Nginx

Similar Threads

  1. which company have this ip ranges?
    By mashahost in forum Dedicated Server
    Replies: 7
    Last Post: 01-13-2010, 01:11 PM
  2. who know this IP ranges
    By mashahost in forum Dedicated Server
    Replies: 3
    Last Post: 09-06-2009, 04:19 AM
  3. IP Ranges
    By matt4 in forum Hosting Security and Technology
    Replies: 3
    Last Post: 12-05-2006, 09:39 AM
  4. Many Ip's in different ranges
    By andymindel in forum Web Hosting
    Replies: 7
    Last Post: 10-09-2002, 03:21 AM
  5. International IP ranges?
    By magnafix in forum Hosting Security and Technology
    Replies: 8
    Last Post: 11-29-2001, 09:59 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •