Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

TCP IN Blocked

Discussion in 'Security' started by upsforum, Jul 12, 2016.

Tags:
  1. upsforum

    upsforum Well-Known Member

    Joined:
    Jul 27, 2005
    Messages:
    470
    Likes Received:
    0
    Trophy Points:
    166
    A user have problem with ftp connection, firewall block your ip but CSF or mod security not return problems or messages, this is log (I tried and with my connection work fine):

    Code:
    Jul 12 16:02:51 ssd3 pure-ftpd: (?@user.ip.xxx.xxx) [INFO] New connection from user.ip.xxx.xxx
    Jul 12 16:02:51 ssd3 pure-ftpd: (?@user.ip.xxx.xxx) [INFO] SSL/TLS: Enabled TLSv1/SSLv3 with ECDHE-RSA-AES128-GCM-SHA256, 128 secret bits cipher
    Jul 12 16:02:52 ssd3 pure-ftpd: (?@user.ip.xxx.xxx) [INFO] imxcyczb is now logged in
    Jul 12 16:02:52 ssd3 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3c:4f:fa:00:08:e3:ff:fd:90:08:00 SRC=user.ip.xxx.xxx DST=193.37.152.142 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=7759 DF PROTO=TCP SPT=50334 DPT=44319 WINDOW=65535 RES=0x00 SYN URGP=0
    Jul 12 16:02:55 ssd3 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3c:4f:fa:00:08:e3:ff:fd:90:08:00 SRC=user.ip.xxx.xxx DST=193.37.152.142 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=7763 DF PROTO=TCP SPT=50334 DPT=44319 WINDOW=65535 RES=0x00 SYN URGP=0
    Jul 12 16:03:01 ssd3 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3c:4f:fa:00:08:e3:ff:fd:90:08:00 SRC=user.ip.xxx.xxx DST=193.37.152.142 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=7772 DF PROTO=TCP SPT=50334 DPT=44319 WINDOW=65535 RES=0x00 SYN URGP=0
    Jul 12 16:03:12 ssd3 pure-ftpd: (?@user.ip.xxx.xxx) [INFO] New connection from user.ip.xxx.xxx
    Jul 12 16:03:13 ssd3 pure-ftpd: (?@user.ip.xxx.xxx) [INFO] SSL/TLS: Enabled TLSv1/SSLv3 with ECDHE-RSA-AES128-GCM-SHA256, 128 secret bits cipher
    Jul 12 16:03:13 ssd3 pure-ftpd: (?@user.ip.xxx.xxx) [INFO] imxcyczb is now logged in
    Jul 12 16:03:14 ssd3 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3c:4f:fa:00:08:e3:ff:fd:90:08:00 SRC=user.ip.xxx.xxx DST=193.37.152.142 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=7815 DF PROTO=TCP SPT=50338 DPT=28100 WINDOW=65535 RES=0x00 SYN URGP=0
    Jul 12 16:03:17 ssd3 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3c:4f:fa:00:08:e3:ff:fd:90:08:00 SRC=user.ip.xxx.xxx DST=193.37.152.142 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=7824 DF PROTO=TCP SPT=50338 DPT=28100 WINDOW=65535 RES=0x00 SYN URGP=0
    Jul 12 16:03:23 ssd3 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3c:4f:fa:00:08:e3:ff:fd:90:08:00 SRC=user.ip.xxx.xxx DST=193.37.152.142 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=7835 DF PROTO=TCP SPT=50338 DPT=28100 WINDOW=65535 RES=0x00 SYN URGP=0 
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,367
    Likes Received:
    1,855
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice