I use ISPConfig Version: 220.127.116.11 on ubuntu 8.04 2.6.24-28-server on vmware VPS hosting. My problem is in month ago i see in my netstat -tupan Code: tcp 0 1 xxx.xxx.xxx.xxx:56021 18.104.22.168:7000 SYN_SENT 6096/crond or with ESTABLISHED status. When i block this IP 22.214.171.124, immediately i receive new connection from other IP. In my case i block /16 with Code: iptables -I INPUT -s 126.96.36.199/255.255.0.0 -j DROP How can i block this type of connection? Please help me.