How to Block AS number by WHM?

[sajithgsm]

Hi,

there are getting some attacks from some of Datacenter's and VPS. I want to block them all by AS number.

Example:


Is there any possibility to do that in WHM or using some 3rd party plugin?

 

[ITHKBO]

Do you have ConfigServer Firewall installed (CSF)?
You should be able to simply block it from the CC_DENY field than.

Attached screen with path and instructions. Make sure to restart CSF after changes and be ready for the increased resource usage to handle the blocks.
I would not implement it all at once to avoid the risk of stalling or worse crashing your own services due to automated service kills.
Not to mention to log any complaints with regards to legitimate traffic that is no longer allowed.

Home >> Plugins >> ConfigServer Security & Firewall >> Firewall Configuration >> Country Code Lists and Settings >> CC_DENY

 

[cPRex]

Thanks, @ITHKBO