Security
How to Enable or Disable Mod Security in cPanel
Are you facing the issue of IP getting blocked repeatedly? If the answer is Yes, then it may have happened due to Mod Security. What is Mod Security? ModSecurity is a module that protects your website from various types of attacks. Mod Security protects a website from hackers, brute force attacks, cross-site request forgery(CSRF), and many other threats. Although it sometimes creates a problem, we do not recommend you to disable it but instead fix your software’s vulnerability. Disabling ModSecurity can help you determine whether ModSecurity blocks your IP or not. However, if your IP is blocked for a different reason, then contact us. We will find the exact reason behind it in order to resolve your issue so that you will not be required to disable the module. How to Enable or Disable Mod Security in cPanel? Log in to your cPanel account. In the Security section, click on
Related: cpanel, domains, modsecurity, security
How to Block Any IP Address via an htaccess Rule
If you want to block an IP Address, you can add the below lines to your htaccess file. order allow, deny deny from IP-ADDRESS allow from all Replace IP-ADDRESS with the IP you want to block.
Related: htaccess
How to Restrict Access to Directories by IP Address
To secure your admin area from hackers, you should only allow access to your admin directory from selected IP addresses. You can create a dot htaccess file in the directory where you want to restrict access to specific IP addresses. For example, if you have a WordPress blog installed on your main directory and you log in via example.com/wp-admin, you should create an htaccess file in /wp-admin/.htaccess and put the following code into it. Please, don’t forget to replace the allowed IP address with your IP address. order deny, allow deny from all allow from YOUR-IP-ADDRESS-HERE Replace the Your-IP-Address-Here text with your IP address. You can test this by accessing the wp-admin directory from another IP address, not mentioned in your htaccess file.
How to Protect the htaccess File
You can prevent unauthorized access to your htaccess file by adding this rule to the file: # .htaccess protection order allow, deny deny from all satisfy all
Related: htaccess