I use ISPConfig Version: 184.108.40.206 on ubuntu 8.04 2.6.24-28-server on vmware VPS hosting.
My problem is in month ago i see in my netstat -tupan
tcp 0 1 xxx.xxx.xxx.xxx:56021 220.127.116.11:7000 SYN_SENT 6096/crond
or with ESTABLISHED status.
When i block this IP 18.104.22.168, immediately i receive new connection from other IP.
In my case i block /16 with
iptables -I INPUT -s 22.214.171.124/255.255.0.0 -j DROP
How can i block this type of connection?
Please help me.