The server firewall blocks addresses showing patterns associated with attack.
WHAT TRIGGERS A BLOCK
Repeated failed authentication on cPanel, FTP, SSH, mail or webmail Rapid connection attempts across many ports Patterns matching known scanning behaviour Excessive connections from a single address
WHAT IT LOOKS LIKE
The site, cPanel and webmail all fail to load from that connection, while working normally elsewhere. The browser typically reports a timeout rather than an error page.
WHY IT EXISTS
Automated attacks are constant on every server. Without automated blocking, brute-force attempts would consume resources and eventually succeed against weak passwords.
TEMPORARY AND PERMANENT BLOCKS
Many blocks expire automatically after a period. Repeated triggers can escalate to a longer block.
GETTING RELEASED
Open a ticket with your current address from whatismyip.com.
THE MOST COMMON UNDERLYING CAUSE
An email client or phone configured with an outdated password, retrying continuously. Fix that, or the block returns as soon as it is lifted. Check every device, including ones you rarely use.
