DavidWinter's profile

DavidWinter

New Contributor II

 • 

6 Messages

Closed

Sucuri Website Firewall Blocking Access

Trying to access my bank with Firefox browser. Getting "Access Denied - Sucuri Website Firewall". Lists my IP address and the URL I'm trying to access and says "Block reason: Your IP address is listed on our blacklist and blocked from completing this request."

I contacted the bank IT and they said they do not block any IP addresses.

I connected my laptop directly to my Cox modem and got a different IP address and that was able to access the site. But when I reconnected my router I got the same IP from Cox as before and got blocked.

As near as I can determine sucuri is some kind of web server firewall software. it appears one Cox IP is blocked by it but others are not. But the bank isn't running it on their servers. Can there be an intermediate server between Cox and the bank that is blocking it? How would we determine what that is and get it unblocked> Can Cox get it unblocked? How do we know what server is blocking it?

Discussions

 • 

Updated 

2.6K

1

0

0

W

WiderMouthOpen

+6 more

Esteemed Contributor III

 • 

3.5K Messages

Can Cox get it unblocked?

No, this isn't a Cox issue, is is a bank issue. A blacklist isn't something that happens randomly. There must be a reason why they blocked you. Seems Sucuri triggers when it detects malware or DDoS attacks. Changing the IP only hides the problem. Are you sure it was the bank's IT and not just a support rep? I suggest contacting them again.

With that said, you can probably get around the problem with MAC cloning on the router. What model router is it? If it triggers again then you know for sure there is something either on your end or their end triggering the block.

19

0

D
DavidWinter

New Contributor II

 • 

6 Messages

I have a Netgear Nighthawk AC1900 Model 7000 router. I'll see if I can figure out how to do MAC cloning with it. Is the theory that if I do MAC cloning I'll get a different IP address and that may work? I'm a novice with this stuff but isn't the IP address assigned to me by Cox? Do I have any control over that? If I use MAC cloning is that going to give me a different IP address?

Like

Reply

0

W
WiderMouthOpen

+6 more

Esteemed Contributor III

 • 

3.5K Messages

Nighthawk AC1900 Model 7000

See here for instructions on changing the MAC address. A MAC address is a unique hexadecimal number that all network devices have. Think of them as finger marks for computers. Your router has one and the network card in your computer has another. Cox and most cable broadband ISP use something called DHCP that gives out IP addresses automatically based on their MAC address. Different MAC means different IP. That is why you got a different IP when connecting direct to the modem.  That is also why you can clone your routers MAC to your PC's MAC to get the same IP, or at least different then the one cached to the router.

However I would like to state this is a work around solution. Without knowing what triggered the first black list there is no knowing how long this will work. It's DHCP which changes the IP address perhaps every 24 hours(usually not though) so you might eventually get the same blocked IP again.

Like

Reply

W
WiderMouthOpen

+6 more

Esteemed Contributor III

 • 

3.5K Messages

OH! BTW, see my thread on the R7000 router. You need to update the firmware because of a known vulnerability. See here for instructions.

Like

Reply

0

D
DavidWinter

New Contributor II

 • 

6 Messages

I actually follow most of that but I didn't realize the relationship between the MAC address and the IP, although it makes sense now that I realize I got another IP when I replaced the router connection with my computer . I understand this is just a work around. I'll try it for testing purposes and get back to the bank to see if they can do anything. Not sure if they'll be able to help or not but I'll try. I do need to update the router firmware; haven't logged in to the router as an admin for quite sometime. I'll post again once I try everything out and let you know what happens. Thank you for all the input. I'm still a novice but glad to learn a little more each day.

Like

Reply

W
WiderMouthOpen

+6 more

Esteemed Contributor III

 • 

3.5K Messages

Let us know how it goes. Good luck!

Like

Reply

0