New Server Has Banned IP Addresses
Jul 8, 2008
My story starts with my getting burned by fumiNET (the first *grrr*)...
Burstnet reactivates my server (for an additional payment of course). The server seems fine but I thought that I might do better with a BurstNET reseller (better service). So...
I sign up with a reseller, and since I got my new server I've been plagued with email bounces, rejections, etc. Seems that my server (via the reseller) was supplied with a bunch of banned IPs (in other words, crap IPs). (the second *grrrr*)
I've reported to the providers abuse department, but was told that I have to handle this. (third *grrrr* - or is it just continued from the second?)
I've had it. I'm ready to fold up shop. As it is the sites keep me busy - but then...
- I get screwed by fumiNET (losing a big chunk of money)
- the hassle of trying to get my fumiNET server back up (thanks BurstNET)
- transferring to the reseller for better service, and finding out that perhaps BurstNET service was better than the reseller's
I'm open if anyone has suggestions. Some that I've come up with myself...
- finding yet another server provider (recommendations welcome)
- drinking large quantities of Guinness (worth it regardless)
- pulling the plug on the server and getting shared hosting to hold some minimal content
- forgetting the whole damn thing and getting a job as a [pick one]: store clerk, street cleaner, used car salesman
View 1 Replies
ADVERTISEMENT
May 19, 2008
How can make a cronjob for remove banned ip with CSF every 15min?
View 4 Replies
View Related
Sep 13, 2007
Have been receiving the following warnings for more than a day. Does BFD auto execute a permanent ban or do I have to do it myself? If so, how? Also, I did a whois, found out the service provider, and sent an email regarding abuse. I have yet to receive a reply.
I was wondering since its a HK IP, do I have to send the message in chinese? Would anyone be kind enough to do so?
Quote:
Banned the following ip addresses on Thu Sep 13 16:32:01 SGT 2007
203.186.163.31 with 308 connections
View 6 Replies
View Related
Feb 22, 2007
I can't seem to access my server. I can get in through a proxy but not with my own IP. I can't log in through SSH to find out what's going on because I'm banned. I manage my own machines at the moment, so no I can't really contact my host.
View 14 Replies
View Related
Apr 14, 2008
I run an small social netwroking web site.
I just checked and it looks like yahoo dont accept emails from my server.
so is there any way i send those bulk emails to those users or my web site from another mail service prodider so that delivery guaranted?
informing my users who has yahoo mail account about updates etc..
i have dedicated server and cpanel.
View 3 Replies
View Related
Aug 13, 2008
I just lost access to my site, but wannabrowser & siteuptime, etc. all said it was up!
I ran ipconfig /flushdns and everything.
Finally, I unplugged my wireless & router and waited. Plugged it back in, everything worked (I had a new IP)
The only suggestion I can come up with is that my own security protection filtered me! How can I view the nodos blacklist to see if this is the case?
I already checked iptables -L and my IP (and range) did not show.
View 4 Replies
View Related
Dec 15, 2007
You can see my servers information at the bottom.
If in this post there is security information I have reveiled I hope you will tell me
After a couple of hours where someone tried to login to root and Directadmin using ssh, i closed ssh and made some minor changes to the security.
I turned on the automatic add ip if login failed 3 times, in DirectAdmin.
I dont know why I was banned cause I DID NOT use wrong login???
My other users of the server also got banned, and they say they did not use wrong pass either?
SO how do I unban me so I can acces DirectAdmin again?
And as if that was not enough, because Im soooo good at this...
while I was at it I stopped SSL cause I got following error and I dont really need it, I think
-------------------------STARThttpd_error_log
[Sat Dec 15 03:38:22 2007] [error] server reached MaxClients setting, consider raising the MaxClients setting
[Sat Dec 15 03:58:32 2007] [notice] caught SIGTERM, shutting down
[Sat Dec 15 03:58:34 2007] [warn] RSA server certificate CommonName (CN) `localhost' does NOT match server name!?
[Sat Dec 15 03:58:34 2007] [warn] RSA server certificate CommonName (CN) `localhost' does NOT match server name!?
[Sat Dec 15 03:58:34 2007] [warn] Init: SSL server IP/port conflict: www.belove.updownloading.com:443 (/usr/local/directadmin/data/users/belove/httpd.conf:48) vs. www.tokyolondon.net:443 (/usr/local/directadmin/data/users/tokyo/httpd.conf:48)
[Sat Dec 15 03:58:34 2007] [warn] Init: SSL server IP/port conflict: www.fusion-planet.updownloading.com:443 (/usr/local/directadmin/data/users/iceangel89/httpd.conf:48) vs. www.tokyolondon.net:443 (/usr/local/directadmin/data/users/tokyo/httpd.conf:48)
[Sat Dec 15 03:58:34 2007] [warn] Init: SSL server IP/port conflict: www.nicheserver.com:443 (/usr/local/directadmin/data/users/nicsad/httpd.conf:48) vs. www.tokyolondon.net:443 (/usr/local/directadmin/data/users/tokyo/httpd.conf:48)
[Sat Dec 15 03:58:34 2007] [warn] Init: SSL server IP/port conflict: localhost:443 (/etc/httpd/conf/extra/httpd-vhosts.conf:38) vs. www.tokyolondon.net:443 (/usr/local/directadmin/data/users/tokyo/httpd.conf:48)
[Sat Dec 15 03:58:34 2007] [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!!
[Sat Dec 15 03:58:34 2007] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Sat Dec 15 03:58:34 2007] [warn] module php5_module is already loaded, skipping
[Sat Dec 15 03:58:35 2007] [warn] RSA server certificate CommonName (CN) `localhost' does NOT match server name!?
[Sat Dec 15 03:58:35 2007] [warn] RSA server certificate CommonName (CN) `localhost' does NOT match server name!?
[Sat Dec 15 03:58:35 2007] [warn] Init: SSL server IP/port conflict: www.belove.updownloading.com:443 (/usr/local/directadmin/data/users/belove/httpd.conf:48) vs. www.tokyolondon.net:443 (/usr/local/directadmin/data/users/tokyo/httpd.conf:48)
[Sat Dec 15 03:58:35 2007] [warn] Init: SSL server IP/port conflict: www.fusion-planet.updownloading.com:443 (/usr/local/directadmin/data/users/iceangel89/httpd.conf:48) vs. www.tokyolondon.net:443 (/usr/local/directadmin/data/users/tokyo/httpd.conf:48)
[Sat Dec 15 03:58:35 2007] [warn] Init: SSL server IP/port conflict: www.nicheserver.com:443 (/usr/local/directadmin/data/users/nicsad/httpd.conf:48) vs. www.tokyolondon.net:443 (/usr/local/directadmin/data/users/tokyo/httpd.conf:48)
[Sat Dec 15 03:58:35 2007] [warn] Init: SSL server IP/port conflict: localhost:443 (/etc/httpd/conf/extra/httpd-vhosts.conf:38) vs. www.tokyolondon.net:443 (/usr/local/directadmin/data/users/tokyo/httpd.conf:48)
[Sat Dec 15 03:58:35 2007] [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!!
[Sat Dec 15 03:58:35 2007] [notice] Apache/2.2.6 (Unix) mod_ssl/2.2.6 OpenSSL/0.9.8b DAV/2 PHP/5.2.4 configured -- resuming normal operations
[Sat Dec 15 03:58:48 2007] [error] [client ::1] File does not exist: /var/www/html/400.shtml
[Sat Dec 15 03:58:49 2007] [error] [client ::1] File does not exist: /var/www/html/400.shtml
[Sat Dec 15 03:59:10 2007] [error] [client ::1] File does not exist: /var/www/html/400.shtml
[Sat Dec 15 03:59:11 2007] [error] [client ::1] File does not exist: /var/www/html/400.shtml
[Sat Dec 15 03:59:12 2007] [error] [client ::1] File does not exist: /var/www/html/400.shtml
-------------------------END httpd_error_log
I have also posted this on DirectAdmin's forum, but because Im really nervous and dont know when they will answer I posted here too, cause this forum is used more
Server configuration
Linux CentOS5 DirectAdmin
Processor Name Intel(R) Xeon(R) CPU 3050 @ 2.13GHz
Vendor ID GenuineIntel
Processor Speed (MHz) 2133.507
Processor Name Intel(R) Xeon(R) CPU 3050 @ 2.13GHz
Vendor ID GenuineIntel
Processor Speed (MHz) 2133.507
Total Memory 2075520 kB
Free Memory 57004 kB - (Every time I cant access the websites, it is this low, then when I can access the websites again its
around 500mb)
Total Swap Memory 4192956 kB
Free Swap Memory 4192888 kB
Apache 2.2.6 Running
DirectAdmin 1.31.0 Running
Exim 4.67 Running
MySQL 5.0.45 Running
Named 9.3.3rc2 Running
ProFTPd 1.3.1 Running
sshd *** Stopped *** (I stopped it because my websites dont need it, in logs I could see that some sites, I dont know, were trying to acces it?)
vm-Pop3d 1.1.7f-DA-2 Running
View 11 Replies
View Related
Mar 11, 2008
I've an interesting issue here. A client of mine was apparently banned from one of my servers and the problem has been narrowed down to the APF. What's odd is that he's not listed on /etc/apf/deny_hosts.rules file, nor is his IP blocked by iptables.
But, as soon as the APF is enabled he can't access anything on the server! This is very random, I've been using APF for just over a year now and I've never had a problem like this. But who's to say it's not happening to others as well?
View 5 Replies
View Related
Nov 30, 2007
Since some days I have a problem with apf: It can't BAN one of the Ip from file deny_hosts.rules. Other IP's are correctly banned. Of course in apf log are:
apf(28474): {trust} deny all to/from 88.84.141.233
but this ip still have access to my server and scan my ports. I have this problem after editing internals/rab.ports (I added some ports to RAB_PSCAN_LEVEL_2). I don't know how can I fix this problem.
Topic should have title: APF can't block one of the banned IP.
View 4 Replies
View Related
Apr 25, 2009
I took server from Soft Layer
After four month they banned my account, When I talked to them they said we banned your account for tow days because we Suspicion about you and I waited them for tow days but nothing new, after that I sent all my evidences to them, the passport picture, driver's license, ID's card and Visa Card picture from front and back.
NOW!
I don't know the reason for banned my account, why they banned me?
View 14 Replies
View Related
Dec 19, 2005
I have found a host already ...
View 3 Replies
View Related
Sep 30, 2007
when you add a banned ip to APF it doesnt show anything when the user visits the site, just a blank page. is there anyway to set up a page such as "You IP Address has been banned,
View 4 Replies
View Related
Jul 13, 2015
I formatted my server and installed CENTOS 7 and PLESK 12. I have problems with cbl.abuseat.org. My ip enters in blacklist. I sent email to the support of abuseat.org and abuseat reply:
Please fix your HELO strings.
I check the my configuration and I think is correct:
- Reverse lookup is ok
- Hostname is ok (server.domain.tld)
But I have the file in /etc/sysconfig/network empty. There is only written: # Created by anaconda
Also, is correct the my etc/hosts file?
127.0.0.1 server.domain.tld server localhost4 localhost4.localdomain4
:: 1 server.domain.tld server localhost6 localhost6.localdomain6
View 12 Replies
View Related
Apr 8, 2009
How can you tell if two IPs are setup on the same server without having access to the server?
View 6 Replies
View Related
Oct 26, 2008
server with many IP (100-200) and possible buying +20-50 each month. Configuration - CPU: 1.5-2ghz, RAM: 512-1024mb, HDD: 40-80gb. Location - any. Traffic - 1-2tb. OS - CentOS preff.
View 8 Replies
View Related
Feb 4, 2008
I am having a pretty weird problem about ip s at my server. I have a dedi at netdirekt and they gave me like 4 free ips,
all of the sites are at main ip, but today i created a new account and also add 1 of those ips to server and i changed ip of the site.
After that problem started, when i try to ping site it shows ip of the site (new ip), but it gives request timed out. Also sometimes it says, 89.149.218.46 : Destination host unreachable.
If i change the ip of the new site to main ip, site loads well but when i change it to new ip it doesn't load plus gives that ping problem
View 4 Replies
View Related
May 8, 2007
How to add an IP adress to CentOS server?
I can't find 'how to"
How can I add secondary adress using SSH?
What command?
View 1 Replies
View Related
Jul 2, 2008
i just got a 2nd server
i had a problem at the beginning that i had to reload
so i think the tech forgot to add my other ips to my network card configs
i remember layeredtech once reloaded my server and the same problem happend so they advised me to add it to a config file in my server
View 6 Replies
View Related
Aug 29, 2008
How to view all ip on the server ?
os linux
View 1 Replies
View Related
Apr 5, 2008
I want to change whole server IPs. I use cPanel.
I have main IP used for first nameserver and client sites, and second IP used for second name server.
What steps I have to make if I would recive 2 new IPs from my Data Center?
I have DDoS and my DC said that they can only change my IPs to new.
View 7 Replies
View Related
Dec 10, 2008
Is there a limit to assigning maximum IPs on a server.
I am not using any contro panel (plesk or cpanel).
View 11 Replies
View Related
May 12, 2009
I'm upgrading to a new server but when I change IP's on the nameservers I dont want to have data loss due to DNS cache, so I want to forward the old server IP's to the new server IP's, how do I do that?
View 1 Replies
View Related
Jan 3, 2009
Due to some of my projects I am looking for a good Dedicated server hosting provider who can offer Muliples IP addressess from different IP Pools.
View 14 Replies
View Related
May 20, 2009
We require a server with 10+ IP addresses (Each one with a separate OS and external IP Address, i.e myip.dk)
This is to be used as an added security level for our employees logging into our system from outside the office. Our system monitors the IP Address and we need to restrict access to certain items depending on the IP. We basically would like to set up multiple VPS on one server.
Can you confirm how this would work?I know we can buy a Windows VPS for around £15, but we need multiple of these (10-20)and figure our own server might be the way forward.
View 2 Replies
View Related
Jun 3, 2008
how to configure linux so that it allows for two ip addresses on one machine?
I know this is possible because my server administrator setup one of my servers to have two different ip addresses so that I could have a static and dynamic http daemon (two different daemons but listening on different ips).
What do you need to configure?
View 1 Replies
View Related
May 4, 2008
I've been carrying some weird hours lately, so I'm able to see activity on my sites that I normally don't see.
Certain IPs are trying to diddle their things into my server and need the boot. It's not consistent (ie not happening every 5, 10 mins)... it's periodically throughout the months. I'll see an IP I blocked 2 months ago just randomly show up at 4:30am and try accessing the same files it was probing during it's last visit. Assuming this is just some sort of bot, can I block it permanently?
I know APF has a collection system that purges an IP list to keep it from bloating, and I had PSM do some hardening so I'm not entirely sure about the workings of APF firewall. So far my IP blocks are blank (which is a good sign!), but I'd like to add some nuisances to it, to keep their crap from appearing in my error logs anymore as "Denied by Server Configuration"
My question is: Can I block people at server level permanently? I do not want their IP being taken out with the purge list that comes by every so often.
View 4 Replies
View Related
Nov 10, 2008
There are lots of hosts who can give you IPs on different blocks. You should easily be able to find one hosting account that can do this. Of course, you'll need to get a low-end dedicated or colo server to do that, but the IP address thing is no big deal. With the money you would be spending, you're well within the range of a low-end dedicated anyway.
Hi Eric,
I know this thread is old BUT...
This comment interests me a lot, and I hope that somebody can clarify for me that does 50 IPs on one dedicated server require multiple routers (like 2x IPs per router?) to manage all of the IP's communicating with the dedicated server?
View 3 Replies
View Related
Sep 10, 2008
Our dedicated server runs our virtual machines for us and the NAT option is terrible...the virtual machines work REALLY well when they use a Bridged connection. The problem is that our virtual machines have to acquire an IP address somehow, and the hosting provider we currently use says they only give one IP address to our server which is fine if the NAT within the software worked really well...is there a webhost that can provide a setup where they have a router hooked to our dedicated server so if we need more local IP's they can be given/assigned by the router. This would then allow us to run our virtual machines much better. Does anybody know of a dedicated server host that will do this?
View 9 Replies
View Related
Feb 19, 2008
We would like to offer root servers to customers, but we worry that they change the IP address to another IP address in our network and make troubles like this. I think, if a customer takes the same IP like our gateway router, our whole network is not reachable anymore. How can I avoid this?
View 10 Replies
View Related
Jan 28, 2007
The subject pretty much says it all. A simple implementation / reversal is what we are looking for.
View 1 Replies
View Related
May 15, 2008
We are interested to buy different C class IPs so we can host many related sites on the same server. Our hosting provider does not sell different C class IPs. I wanted to know if there is anyway to buy IP addresses from somewhere else, lets say from other hosting companies, or private providers, who would forward the IP to our server. Did you ever hear of such service?
Does any one want to offer us this serivce?
View 14 Replies
View Related
