ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Site host blocking ISP: isolating issue

    IT Discussion
    3
    7
    702
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      gjacobse
      last edited by

      For some reason - Our site host (web site) is blocking our IP a few times a week. It's being reported as a bad log in.

      Is there any way to isolate this down and stop it? I know I can use Solarwinds or WireShark, but I just haven't had good luck with reading the data.

      I had to have our IP unblocked 4 times in the last 24 hours.

      1 Reply Last reply Reply Quote 0
      • S
        scottalanmiller
        last edited by

        Sounds like a major issue with the provider, not something for you to fix. Why not just require the host to stop blocking you?

        G 1 Reply Last reply Reply Quote 0
        • G
          gjacobse @scottalanmiller
          last edited by

          @scottalanmiller
          I believe the system is doing it automatically... by script. they see so many failed attempts to log into an account and flags it.

          S 1 Reply Last reply Reply Quote 0
          • S
            scottalanmiller @gjacobse
            last edited by

            @g.jacobse said:

            @scottalanmiller
            I believe the system is doing it automatically... by script. they see so many failed attempts to log into an account and flags it.

            So require that they stop the script. This is their issue. Or just change providers. If they don't know why they are blocking you they don't know what customers they are blocking. Drop them.

            G 1 Reply Last reply Reply Quote 0
            • G
              gjacobse @scottalanmiller
              last edited by gjacobse

              @scottalanmiller
              I am in the process of dropping them. They were our email provider as well. Office 365 is moved (just need to set up users on Outlook 109 desk visits). I still need to move our web pages. And they hold some DSL accounts also.

              ETA: They told me it was a repeated failed log in attempt. but can't (won't) tell me more than that.

              1 Reply Last reply Reply Quote 0
              • S
                scottalanmiller
                last edited by

                Likely just fail2ban doing its thing. Do you have people in-house attacking your host?

                1 Reply Last reply Reply Quote 0
                • R
                  Reid Cooper
                  last edited by

                  Any luck getting them to whitelist you?

                  1 Reply Last reply Reply Quote 0
                  • 1 / 1
                  • First post
                    Last post