- Below, we outline the most common firewall block reasons, their causes, and how to prevent them.
- In some cases, you may be able to use our IP Unblock tool, available in your account management portal, to unblock your IP. If you’re unsuccessful in removing the IP block, you may need to contact our support team, depending on the type of block triggered.
Port Scan
- Port Scan detected from 1.1.1.1
- A “Port Scan” block indicates that an application or program on your computer or mobile device is attempting to connect to our servers on closed ports. This issue often arises from misconfigured FTP applications, email clients, or attempts to SSH into the default port. The IP address shown (1.1.1.1) will be replaced by your actual modem/router IP address.
Failed SMTP Login
- (smtpauth) Failed SMTP AUTH login from 1.1.1.1
- A “Failed SMTP Auth” block occurs after multiple consecutive failed SMTP login attempts for email. This usually results from an incorrect email address or password being used on a device such as a mobile phone or email client. To prevent brute-force attacks, our firewall blocks the IP after failed login attempts as a security precaution. The IP address (1.1.1.1) will be replaced by your modem/router IP.
Failed cPanel or Webmail Logins
- (cpanel) Failed cPanel login from 1.1.1.1
- A “Failed cPanel login” block can be triggered by failed login attempts on your cPanel login screen or from webmail. To resolve this, reset your cPanel password and verify the correct username. Ensure you’re using the correct email address and password for both webmail and cPanel to prevent further blocks. The IP address (1.1.1.1) will be replaced by your modem/router IP.
Failed FTP Login
- (ftpd) Failed FTP login from 1.1.1.1
- A “Failed FTP Login” block occurs due to incorrect FTP login credentials (username or password). To prevent brute-force attacks, the firewall blocks IPs with a large number of failed login attempts. The IP address (1.1.1.1) will be replaced by your modem/router IP.
Failed POP3 Login
- (pop3d) Failed POP3 login from 1.1.1.1
- A “Failed POP3 Login” block indicates that your email client, using the POP3 protocol, has an incorrect email address or password. Double-check your credentials and consider resetting your password to resolve this issue. The IP address (1.1.1.1) will be replaced by your modem/router IP.
Mod_Security Block
- mod_security (id) triggered by 1.1.1.1
- If a “mod_security” block is triggered, you will need to contact support. There are various reasons this block can occur, ranging from website module/plugin issues triggering a SQL injection block to multiple failed login attempts on platforms like WordPress or Joomla. The IP address (1.1.1.1) will be replaced by your modem/router IP.
