Customer is continually being blocked by cPanel/WHM servers

Customer is continually being blocked by cPanel/WHM servers

If customers are continually being blocked by cPanel/WHM it is important that the root cause of the issue is identified and resolved.  Whitelisting IPs is a good temporary measure, but, typical users ISPs provide dynamic IPs, so, when these change, the whitelist no longer works and the user, having not solved the root cause of the issue, will simply be blocked again.

Ono the Cartika shared/reseller cPanel/WHM servers, we run a combination of security layers, including IPTables, CSF and our own Webscan script

All of these layers all block IPs and traffic, and provide various levels of web service and application level security from common, day to day attacks.  If these systems are being triggered by a legitimate user, the root cause needs to be addressed in order to permanently resolve this issue

the most common causes for such blocks include
  1. The web owner's mail client has a very low "mail check interval", causing a denial of service attack like behavior, especially if many users are accessing mail through a common corporate connection.
  2. The web owner failed to successfully authenticate in a mail, web, FTP or cPanel services interface multiple times, leading the firewall to think its a brute force attempt.
  3. The web owner has an FTP client set with very high number of simultaneous connections, causing the firewall to think the connection attempts is a denial of service attack.
  4. A website update was interpreted as a hack attempt by the web application firewall (mod_security).
Please contact us if you are blocked so that we can remove your IP from the system blocking you.  Customers are then encouraged to go through the list above and once addressed, the issue should resolve itself

For users in unusual scenarios, where their normal day to day usage (outside of what is listed above) is causing blocks (ie many people access the site normally from a single IP), please contact us to work out a custom solution for your needs
 
    • Related Articles

    • How to Set Up Private Name-servers in WHM/cPanel on VM's and Dedicated Servers.

      Setting up your own private nameservers on a cPanel server has many benefits, most importantly enabling all of cPanel’s built in DNS tools which can make DNS changes much easier. Most Customers with their own VM's or Dedicated servers with WHM/cPanel ...
    • How do I make my private name servers the default for all accounts I create in cPanel WHM?

      The following instructions will only set the name server entries in the DNS zones. Your customers must still update their name servers with their registrar. Reseller, Dedicated and VPS Hosting This sets up the default name servers for the entire ...
    • Setting Up Private Nameservers in WHM/cPanel

      Setting up your own private nameservers on a cPanel server has many benefits, most importantly enabling all of cPanel’s built in DNS tools which can make DNS changes much easier. This guide will show you how to set up and register new private ...
    • Setting Up Private Nameservers in WHM/cPanel

      Setting up your own private nameservers on a cPanel server has many benefits, most importantly enabling all of cPanel’s built in DNS tools which can make DNS changes much easier. This guide will show you how to set up and register new private ...
    • Installing WHM/Cpanel

      To install CPanel first make sure perl is installed and updated yum -y install perl Then update the hostname to it's proper hostname, you can find it here: nano /etc/sysconfig/network Navigate to root user's home cd /home Then download the latest ...