Is it possible to block IPs on Windows servers? I had a file hacked last night and am pretty sure of the IP. There are plenty of ranges that I’d like to block.
As far as I can see, the hsphere Web Access control only works for Linux and htaccess won’t work. What alternatives are there?
I actually learned a few months ago that even though the docs say ‘linux’ the web access control does work on windows adding to the deny list when put there, and then giving them a access denied error if their IP visits.
If you could send me the account name in which you want to do this, I will give it a try and take some screenshots for howto on it for your reference (I will block out any private info)
Sent a PM.
The hack in question just messed up a couple of characters in the index.asp file, which I’ve seen before on other sites and it’s usually a sign the file has been re-written using the wrong character set. There was only one IP logged in awstats anywhere near the same time. 222.246.206.114 -Chinese.
I don’t have a PM from you?
I found it. Weird that VB allowed another ‘stephen’ to register…wow.
I noticed a while back that you were listed as having just joined… I thought you’d reset the account or something.
Our friend at that IP has been busy… I found some more domains on that server, different account, where the homepage was re-written around the same time and all have a matching awstats log. I don’t see that anything was done to the pages apart from the character mis-writes, but maybe something was there and has been removed again.
I found a bad file on the one your PMed ‘me’ about (and btw PM me with new message, not in reply, and it will work)
I also blocked that IP you reported at the server level but one note on blocking large ranges use like this
245.123.0.0 with subnet mask 255.255.0.0 to block a large range, the 1.1 you had will throw an error in w2k3.
The Web Access control in hsphere won’t let you add IPs if you use zeroes.
It shows “Validation failed: Domain or IP : domain name or IP address (parameter [222.186.0.0])”
ok, I tested, odd, but it works with 1.1 in hpshere.
I blocked myself to test on the k account.