Clearing an IP Address Block on Your Server (WHM) Print

What this is

Your server actively protects itself. When it sees repeated failed logins or other suspicious behaviour from an IP address, its firewall blocks that address automatically. This is a good thing, it is what stops attackers, but every so often it catches the wrong person: you, a colleague, or a client, usually after a few mistyped passwords or a mail program looping on an old password.

The symptom is unmistakable. Your website, cPanel, and email all become unreachable at once, from your location specifically, while everyone else can reach them fine. That pattern, everything down for you and only you, almost always means your IP has been blocked rather than anything being wrong with the server. This article shows you how to clear it yourself in WHM.

First, confirm it's actually a block

Before clearing anything, make sure a block is what you are dealing with:

• Check it is only you. Use downforeveryoneorjustme.com, if the site is up for the world and down only for you, a block is the likely cause.
• Find your IP address. Visit ipapi.co/ip from the affected connection and note the address, that is what you will be looking for and clearing.

One catch worth knowing: if your connection has blocked you out entirely, you may not be able to reach WHM from it either. In that case, get to WHM from a different connection, mobile data instead of Wi-Fi, or another location, and clear the block from there.

Clearing the block in WHM

Your server uses the CSF firewall, and WHM gives you a simple search-and-remove tool for it:

1. Log in to WHM on your server.
2. In the search box top-left, type ConfigServer Security and open the ConfigServer Security & Firewall tool.
3. Find the Quick Unblock field, sometimes labelled "Search for IP" or "Quick Deny/Allow/Unblock".
4. Enter the blocked IP address and choose Unblock. The firewall removes it and access returns immediately.

That is the whole task. It is safe, it affects only the one address you enter, and it is exactly the kind of thing we are happy for you to handle yourself.

Fix the cause, or it comes back

An IP that keeps getting blocked is a symptom, and unblocking it repeatedly without addressing the cause just means doing this again tomorrow. The usual causes:

• A mail program with an old password, looping in the background and failing to log in over and over. This is the most common one by far. Update the password everywhere that mailbox is configured, phone, desktop, everything, our article on changing a mailbox password covers it.
• Repeated failed logins to cPanel, WHM, or webmail. Confirm the correct password rather than guessing repeatedly, each failed attempt digs the hole deeper.
• An old saved password on a device you forgot about, a tablet in a drawer, a second computer, quietly hammering the server.

If a particular IP keeps getting blocked and you cannot find why, that is worth a support ticket, we can look at the server logs and tell you exactly which service is triggering it, which usually points straight at the culprit.

A note on what to leave alone

The CSF firewall tool can do far more than unblock an address, and on a managed server almost all of it is our job, not yours. We configure and maintain this firewall as part of keeping your server secure, so please stick to the Quick Unblock function and leave the wider configuration to us. Changing firewall settings, deny lists, or its configuration can open security holes or lock out legitimate traffic in ways that are not obvious until something breaks. Unblocking an address is safe and yours to do; reconfiguring the firewall is ours. If you think something in the firewall needs changing, tell us and we will handle it.

Good to know

Blocks like this are the firewall doing its job, so being caught by one occasionally is a sign your server is protecting itself properly, not a fault. The two things worth remembering: keep WHM reachable from a second connection or device so a block never fully strands you, and treat a repeat block as a clue to hunt down rather than an annoyance to keep clearing. Fix the device with the stale password once, and the blocks stop.