When your company hosts a website or web app online, whether it’s an individual dedicated server or a whole server cluster, you naturally expect to have uninterrupted access at all times. It is possible, though unlikely, that your IP address might become blocked by your server, preventing you from connecting to and using the service.
If that has happened to you, this quick summary will provide you with all the essential information needed to verify the status of your IP. Additionally, some of the most common reasons for being blocked will be covered, as well as a few suggestions on how to unblock and whitelist your IP as quickly as possible. Learn more about how to avoid having your IP blocked.
How does IP address blocking work?
IP-based blocking creates barriers in a network that block all traffic to or from a set of IP addresses. This approach to blocking content doesn’t directly block content but traffic to known IP addresses associated with some content or an application. IP-based blocking is also accomplished by software on users’ computers, typically for network security purposes.
How do I know if my IP address has a IP blocked condition?
To verify if you are blocked from accessing your server, attempt to log in to your web server. Take note of the connection error message, which should indicate the specific reason for the IP blocking. In case the error message is vague or unspecific, you can also ping your server for more information.
Common Reasons For Firewall IP Block
1.Failed SMTP Login
Error: (smtpauth) Failed SMTP AUTH login from 1.1.1.1
When a ‘failed SMTP Auth’ block is shown, it denotes that there are many consecutive failed SMTP login attempts for the email. This is generally because of making login attempts through a device like mobile phone or email client on a PC and the email address or password being used in these attempts is incorrect. In order to prevent a hacker from brute forcing in the email account, our firewall blocks the through which the failed login attempts are made as a security measure. The address denoted above 1.1.1.1, this address will be replaced by your original IP address through your modem or router.
2.Failed FTP Login
Error: (ftpd) Failed FTP login from 1.1.1.1
When a ‘failed FTP login’ block is shown it signifies that login attempts done through an FTP connection are failing due to the use of incorrect username and/or password. In order to prevent the brute force hackers, our firewall will block a large number of failed FTP logins as a security measure. it denoted above 1.1.1.1, this IP address will be replaced by your original address through your modem or router.
3.Failed POP3 Logins
Error: (pop3d) Failed POP3 login from 1.1.1.1
A ‘Failed POP3 Login’ entry shows that your email client is utilizing the POP3 protocol for email is based on an incorrect email address and/or password. It is recommended that you re-check or reset the password for the email account for resolving this issue. The IP address denoted above 1.1.1.1, this address will be replaced by your original address through your modem or router.
4. Mod Security Block
Error: mod_security (id:xxxxxx) triggered by 1.1.1.1
In case a ‘mod_security’ block is triggered, you will have to get in touch with our support team. There are many reasons behind a mod_security block getting triggered, therefore our team will have to investigate further on this. The reasons behind this can be anything from issues with website modules or plugins triggering an SQL injection block or this block maybe shown simply due to multiple failed WordPress or Joomla login attempts. The IP address denoted above 1.1.1.1, this address will be replaced by your original address through your modem or router.
5.Failed cPanel or Webmail Logins
Error: (cpanel) Failed cPanel login from 1.1.1.1
A ‘Failed cPanel login’ block can be triggered in two different ways:
- The first is by making failed login attempts to your cPanel account. In this case, it is recommended that you reset your cPanel password and verify if the username is correct.
- This firewall block can also be triggered because of failed ‘webmail’ login attempts. In this case you must ensure if you are using the right email address and password for webmail along with cPanel to make sure that this block is not displayed again.
This denoted above 1.1.1.1, this will be replaced by your original through your modem or router.
If the steps mentioned in this article do not solve your issue, you can get in touch with our support team and we would be happy to help.