Skip to main content

IP Address Getting Constantly Getting Blocked

Comments

3 comments

  • quietFinn
    I do not have this problem with the other server. They are both using the same (Configserver). But this one, is one where I have my own domain email so it's maddening. Is there some kind of setting that can be changed to only block IPs that have x number of failed logins? That's normal. I guess I could ask on the Configserver forum as well, but thought I'd start here.

    In CSF -> csf-Configserver Firewall->Firewall configuration look under "Login Failure Blocking and Alerts", there you can set how many login failures trigger the block, and for how long the block lasts. I also suggest you look in CSF -> Server Information -> Search System Logs, search for the IP that was blocked and you will see why it was blocked.
    0
  • cPanelLauren
    @quietFinn is correct, it sounds like something is attempting to connect to that server with the incorrect credentials along with your logins, checking the logs might reveal more information in that situation.
    0
  • eurekaa
    I am facing the same issue. Thank you for the responses. It's useful for me.
    0

Please sign in to leave a comment.