How to Block AS number by WHM?

sajithgsm

Well-Known Member
Jun 9, 2020
98
19
83
Sri Lanka
cPanel Access Level
Root Administrator
Hi,

there are getting some attacks from some of Datacenter's and VPS. I want to block them all by AS number.

Example:
Screenshot 2022-03-01 at 10.17.05 AM.jpg

Is there any possibility to do that in WHM or using some 3rd party plugin?
 
Last edited by a moderator:

ITHKBO

Active Member
Jun 23, 2020
28
31
13
Netherlands
cPanel Access Level
Root Administrator
Do you have ConfigServer Firewall installed (CSF)?
You should be able to simply block it from the CC_DENY field than.

Attached screen with path and instructions. Make sure to restart CSF after changes and be ready for the increased resource usage to handle the blocks.
I would not implement it all at once to avoid the risk of stalling or worse crashing your own services due to automated service kills.
Not to mention to log any complaints with regards to legitimate traffic that is no longer allowed.

Home >> Plugins >> ConfigServer Security & Firewall >> Firewall Configuration >> Country Code Lists and Settings >> CC_DENY

cc_deny_example.PNG
 
  • Like
Reactions: cPRex