IP BLOCK (URGENT!)

Discussion in 'ISPConfig 3 Priority Support' started by ruliezz, Jan 17, 2016.

  1. ruliezz

    ruliezz Member HowtoForge Supporter

    Hallo,
    I have a attack on my server from a IP. I dissable the target website but now still he is attacking my server.
    In the root of ispconfig /var/www/html I put a .htaccess but still he is visit the server:

    .htaccess:

    Order Deny,Allow
    Allow from all
    Deny from 130.185.144.160
     
  2. ruliezz

    ruliezz Member HowtoForge Supporter

    That is what the access log says:

    130.185.144.160 - - [17/Jan/2016:15:15:18 +0100] "POST /xmlrpc.php HTTP/1.0" 302 545 "-" "Mozilla/4.0 (compatible: MSIE 7.0; Windows NT 6.0)"
     
  3. ruliezz

    ruliezz Member HowtoForge Supporter

    I found it. It must in the ispconfig dir
     
  4. sjau

    sjau Local Meanie Moderator

    or block it by iptables:
    Code:
    iptables -I INPUT -s xxx.xxx.xxx.xxx -j DROP
    
     

Share This Page