How to block IPs from accessing your website

Sometimes you might need to prevent access to the website or whole hosting account for specific visitors, for instance, when you are developing a website or in case of DDoS attacks.

Below you can find guidelines on setting up an automatic IP block, a manual IP block and a block from a specific country:

automatic IP block

     for cPanel paper_lantern theme
     for cPanel x3 theme

manual IP block




for cPanel paper_lantern theme:

For an automatic IP block, cPanel provides a special IP Blocker tool.

NOTE 1: IP Deny Manager is available for all shared hosting plans starting from the Professional/Stellar Plus one. So if you have a Value plan with us, you should set denying rules in the .htaccess file manually.

NOTE 2: Sometimes, it is easier to block all and allow access for certain IPs. Such rules are to be manually configured in the .htaccess file, as IP Deny Manager provides the possibility only to block IPs.

NOTE 3: IP Deny Manager blocks access to all hosted domains and services under your account.


To block an IP automatically, follow the steps below:

1. Log in to your cPanel and navigate to Security section > IP Blocker menu:



2. Enter the IP address that should be blocked into IP Address or DomainMfield and click on Add button. It will be added to the list of blocked IPs:



You can always unblock the IP by clicking Delete next to the IP address in question.


for cPanel x3 theme:

For an automatic IP block, cPanel provides a special IP Deny Manager tool.

NOTE 1
: IP Deny Manager is available for all shared hosting plans starting from the Professional one. So if you have a Value plan with us, you should set denying rules in the .htaccess file manually.

NOTE 2
: Sometimes, it is easier to block all and allow access for certain IPs. Such rules are to be manually configured in the .htaccess file, as IP Deny Manager provides the possibility only to block IPs.

NOTE 3
: IP Deny Manager blocks access to all hosted domains and services under your account.


To block an IP using IP Deny manager, follow the steps below:

1. Navigate to the IP Deny Manager menu in cPanel:

 

2. Enter the IP address that should be blocked into the ‘IP Address’ field and click on the Add button.
It will be added to the list of blocked IPs.

You can always unblock the IP by clicking Remove next to the IP address in question:
 





Manual IP block

Below you can find several examples for manual blocking configuration.

These lines need to be added to the .htaccess file under all existing rules

  • block users with the X.X.X.X IP address, allow access to everybody else:

   <RequireAll>
          Require all granted
          Require not ip X.X.X.X
         </RequireAll>


  • block all visitors except for the specific admin IP for example, or yourself

   <RequireAll>
         Require all denied
         Require ip X.X.X.X
         </RequireAll>


  • redirect visitors from X.X.X.X IP address to another URL

RewriteCond %{REMOTE_HOST} ^X\.X\.X\.X$
      RewriteRule .* http://example.com [L,R=301]


  • redirect all requests, except for the ones coming from X.X.X.X IP address to another URL

RewriteEngine On
      RewriteBase /
      RewriteCond %{REMOTE_HOST} !^X.X.X.X
      RewriteRule .* http://example.com [R=302,L]



Do not forget to replace X.X.X.X with the IP address you would like to allow or block.


To block/allow access from a specific country, you need to list all IP subnetworks that belong to this country.
This can be quite challenging for manual configuration, so it is recommended to use special online tools that have access to such country-specific IP databases.

Example of such an online resource is here.
You will need to choose the country and then copy the generated code to your .htaccess file.

The code will look like as follows:

  • block access from a specific country

order allow,deny
      deny from 81.52.168.0/23 …
      deny from 188.138.10.163/32
      deny from 188.138.78.129/32
      allow from all

  • allow access from one specific country

order deny,allow
      allow from 81.52.168.0/23 ...
      allow from 188.138.10.163/32
      allow from 188.138.78.129/32
      deny from all




That's it!


            Need any help? Contact our Helpdesk
 

Comments

We welcome your comments, questions, corrections and additional information relating to this article. Your comments may take some time to appear. Please be aware that off-topic comments will be deleted.

If you need specific help with your account, feel free to contact our Support Team. Thank you.

Need help? We're always here for you.

× Close