One of the best ways to protect servers from incoming attacks against our network is the use of firewalls such as CSF.
CSF monitors all authentication logs in cPanel and WHM among other functions.
Invalid login attempts that occur in a short period of time from the same source can result in the blocking of your IP on the server, making it impossible to access the contracted service. Likewise, if you have reseller or hosting clients under your care, they may also see their IP blocked if they try to log in with incorrect data.
On the other hand, CSF also blocks IP's from attacks of any kind (even if you upload files with viruses, CSF can block the IP for security purposes) and from abnormal behavior when browsing our network (attempted continuous access to X page, intrusions in restricted areas... etc.).
We recommend that all our customers always log in with the correct data in cPanel and WHM. Once the tasks in any of the 2 management panels are finished, close the session before leaving the panels.
In the event that your IP or that of one of your clients is blocked, please access your client area > Services > select the hosting or reseller contracted > and on the front page of your service, you will see a central module called "Firewall Connection Checker" from which you can unblock your IP and that of your clients (in the case of resellers, for hosting you can only unblock your IP).
Please use common sense services to prevent your IP from being blocked or bigger problems.
More information: https://atreshost.com/en/ip-unblocker-with-csf-new-tool-in-hosting-and-reseller/