Banned From "my" Webhost?!?

[GoodBYtes]

Hello,

 

My brother wanted to put online a website online, so I suggested this web-host as I have it. So he did get a .com an webhost service from you guys.

No problem here exists, everything is fine.

 

But the last 3 days, I and ONLY I myself, cannot access my brother web page, friends and my other brother can perfectly connect and view the website.

Firefox, Opera, IE 7 all gives me "Connection timeout". I can't even connect on his FTP address to upload HIS website (I'm his webmaster)

 

Yet I have no problem connecting to my web site, and not problem connecting my my FTP server.

 

Website in question:

http://www.bebop-guitar.com

 

My website:

http://www.helpweaver.com

 

I tried to reboot my modem and router, but that clearly didn't help.

Thanks!

[TCH-Thomas]

Both sites loads fine for me.

 

I would open a ticket and ask the techs to look in to it. Perhaps a firewall stopping your ip or similar.

[TCH-Dick]

Try it now and check your FTP passwords. Your IP was blocked for numerous failed attempts to log in to FTP.

[GoodBYtes]

Thanks, All works now!

[GoodBYtes]

Hello again,

 

Well now my brother is locked out (baned)... It seams that the FTP program we use called LeapFTP cause issues when connecting.

We will try to use the recommended FTP software, SmartFTP from now on.

I am currently posting on my brother computer.

 

 

We just wonder, is it is possible to prevent these two IP address to be baned?

 

Thank you so much.

[TCH-Don]

You will need to open a help desk ticket to get your IP unblocked

[TCH-Carl]

The IP will get blocked only due to repeated attempts to access the server using incorrect logins, which is a very important security measure. You are hosted on a shared server, we do not whitelist client IP on them due to security / policy restrictions. I hope you understand its significance.

[GoodBYtes]

The IP will get blocked only due to repeated attempts to access the server using incorrect logins

 

That's right. It seams that LeapFTP has either a bug and only successful connect after several attempts (different each time), so it just falls into a number of failed attempt where your system blocks. Like I said, we will stop using LeapFTP, as also it randomly crashes and blocks during transfer too.

 

Just a question, a hacker can still easily hack the webhost by disconnecting its internet and connect back with a DSL modem, as on each connect it's IP is different. So who your security system helps?

Edited June 10, 2007 by GoodBYtes

[TCH-Andy]

>Just a question, a hacker can still easily hack the webhost by disconnecting its internet and connect back with a DSL modem, as on each connect it's IP is different. So who your security system helps?

If someone wanted to try a brute force attack on guessing passwords, with disconnecting from the internet between every few attempts - it would take them months if not years (unless you have a particularly poor password). In addition we have systems in place that would spot them and block them even if they tried. We obviously cant give details of our full security packages here, but we take security seriously to protect your account - and hence the systems are in place.

 

I'm not aware of a specific bug in LeapFTP that prevents access, the most common reason is that someone tries using anonymous FTP - which is not allowed.

[JTD]

Just a tad off subject here,but not really. You say this is caused by leapftp? I use leapftp myself and if configured correctly it has no problems. Maybe you got a bad download of it or something else. But i doubt leap is the issue.

[carbonize]

As JTD says there is possibly something in the settings of LeapFTP that is the problem. I personally use FileZilla but it's multiple connections feature can cause problems if set to high.

[MikeJ]

Just a question, a hacker can still easily hack the webhost by disconnecting its internet and connect back with a DSL modem, as on each connect it's IP is different. So who your security system helps?

If someone wanted to try a brute force attack on guessing passwords, with disconnecting from the internet between every few attempts - it would take them months if not years

 

Plus most brute force attempts come from compromised machines, not the hackers IP, so those blocks basically take the compromised machine they gained access to out of the usable list for more attempts. And most brute force attempts are scripted so if they start failing, they'll typically just move on to the next host.