My IP has been blocked by some services

[mbagheri]

Hi
I'm running Kloxo-MR 6.5.0F, installed about 50 days ago,and everything was fine, till today, when I couldn't browse any domain including kloxo panel itself from my IP address. I can browse them after connecting to a VPN, I can browse them from another location, but just not with my own IP address.
The Error is "The connection to the server was reset while the page was loading."

 I can connect to ssh with my IP without problem.
 I can browse with https.
 I can ping the server.
 I can connect to port 80 via telnet, but no response when I type Correct commands! but if I type incorrect commands, I get the error response.

I'm not running iptables. I checked lxgaurd, and my IP wasn't on the blocked Hosts, I also checked /etc/hosts.deny and my ip wasn't listed there too.

Tried to:
 1- restart httpd
 2- restart the server
 3- checked if iptables is running, but it's stopped.
 4- checked lxgaurd blocked hosts, /etc/hosts.deny,
 5- checked security/blockedIP from kloxo panel
 6- added my IP to whitelist in lxgaurd
 7- Checked /var/log  for log files of httpd and others but nothing special, just the following was at the end of the httpd
      access.log file: [My IP] - - [07/Jul/2014:14:51:19 +0430] "-" 408 - "-" "-"
 8-When I checked kloxo sessions from another IP, I found that there is a session with my blocked IP, but when I tried to
     close it (delete it), I got this error: "Post token not match or using get instead post."

[MRatWork]

What's happen if using https://<ip_or_domain>:7777 instead http://<ip_or_domain>:7778.

Better clear browser cache before try above access.

[mbagheri]

What's happen if using https://<ip_or_domain>:7777 instead http://<ip_or_domain>:7778.

Better clear browser cache before try above access.

Hi, thanks for your reply.

As I mentioned, I can browse through https

[MRatWork]

What's happen if using https://<ip_or_domain>:7777 instead http://<ip_or_domain>:7778.

Better clear browser cache before try above access.

Hi, thanks for your reply.

As I mentioned, I can browse through https

Access via https and go to 'Port Config'.

[MRatWork]

Or run 'sh /script/defaultport' to change back port to 7778.

[mbagheri]

Or run 'sh /script/defaultport' to change back port to 7778.

Hi, thanks again.

The problem is only when connecting with my IP address to any HTTP plain protocol. like port 80 for other domains defined in this server or port 7778 for Kloxo-MR panel itself. so I tried to telnet to either of these ports (80 or 7778), and the ports were open, but when I typed correct http commands via the telnet, the web server didn't respond! but if I type incorrect http commands, the web server replays an html response.

It's very weird.

[MRatWork]

Did you update with 'yum clean all; yum update kloxomr php*; sh /script/cleanup'?.

It's importance (especially for php using php-fpm). Please read http://forum.mratwork.com/kloxo-mr-releases-and-announcements/%28update%29-please-update-to-6-5-0-f6-5-1-b-to-201405102201405104/

[mbagheri]

Hi
so today I checked to see if the problem still exists, and it was OK. nothing I did, I think maybe it was related to my ISP doing some kind of filtering or tests on my IP.
or maybe some hackers finding a backdoor to server and without me knowing, they are abusing the server, well I hope the second guess not comes true

anyway, thanks for your help Mustafa.

[MRatWork]

Investige log files with 'log manager', especially rkhunter.