How to Block Suspicious IP Addresses in WHM August 14, 2025

This article will help you in blocking suspicious IP addresses in WHM. It helps in protecting your website and server from brute-force attacks, hacking attempts, or unwanted traffic.

Let us follow the guide:

1. Log in to WHM.
2. Select the ‘Security Center’ option and click on the ‘Host Access Control’ sub-option.
   
3. You will be redirected to a new page to add a rule to block the IP:
   1.  In the Port field, enter the port number you want to block (or leave it blank to apply to all).
   2. In the IP Address/CIDR field, enter the suspicious IP address.
   3. In the Protocol dropdown, select the appropriate protocol (TCP, UDP, or ALL).
   4. In the Action dropdown, choose REJECT or DROP to block access.
   5. Click Add Rule, then click Save Host Access List.
      
4. Alternatively, you can use cPHulk in WHM, which offers brute-force protection and can automatically block suspicious IP addresses.
   1. Go to Security Center> cPHulk Brute Force Protection.
      
   2. Enable cPHulk if it’s not already active using the toggle switch as shown below.
      
   3. You will receive a success message.
      
   4. Add the suspicious IP under the ‘Blacklist Management’ section and click ‘Add’.
      
5. Some important tips for identifying suspicious IPs:
   1. Check server logs for repeated failed login attempts.
   2. Use security plugins/tools to monitor traffic.
   3. Track unusual spikes in server resource usage.

We hope you relished the article, and do not hesitate to contact our support staff if you need any extra assistance. Also, do not forget to check our latest web hosting plans.

Want to secure your WordPress site too? Learn How to block IP address in WordPress manually