Security and SSL
Block an IP from web access in cPanel
cPanel's IP Blocker lets you stop web requests from specific addresses. It can help with unwanted activity identified in the logs, but it does not replace the application's permissions or fix a vulnerability.
Add a specific block
- Find the IP in the website's logs and note down the reason and the time. An address may be shared by several people.
- Open cPanel > IP Blocker.
- Enter the address you want to block and confirm. Check how it appears in the list.
- Check that the website is still reachable from the legitimate connections you need.
Start with an exact IP. Ranges and prefixes can affect many visitors; do not add them for a one-off case without checking their scope. Avoid entering a domain name in the hope that it will permanently identify a person.
Check what the server is seeing
If there is a proxy or CDN in front of the website, confirm how the original IP is obtained. Blocking an intermediary's address can stop many users from accessing the site.
This tool controls the corresponding web access; it does not guarantee that IMAP, SMTP, FTP or SSH are blocked. For an issue with another service, identify its security system and ask us about the case.
Remove the rule when it is no longer needed
From the IP Blocker list, delete the corresponding entry and check a new request. If the error continues, check other rules, the application or the firewall. Changing one list does not automatically remove blocks from every layer.
An attacker can change address. If you see a flaw being exploited or unauthorised access, review the application and the affected credentials as well as blocking.
You may also find useful
- What to do if Imunify360 blocks your access Explains why an IP may be blocked, how to check whether the block comes from Imunify360 and what to...
- Add an IP to your hosting firewall whitelist Shows how to authorise, from the client area, a legitimate IP blocked by the firewall so that develo...
- Enable web DDoS protection per domain Check when to apply an extra check to visitors, how to enable it and which integrations you should t...
- Restrict the client area to authorised IPs Add specific IPs to client area access, check a new session and plan what to do if your connection c...
Something wrong or out of date? Tell us and we will review it.